Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F335A140DBDC11EF8D5B674E762E951A.roa
File: F335A140DBDC11EF8D5B674E762E951A.roa (raw, json)
Hash identifier: iFSIK2Hftbgxy5Euda15q9YiNSxPvVaObq/frOPIjHs=
Subject key identifier: 85:49:C6:91:C5:CF:21:FF:F4:EF:A2:B9:2B:B3:DB:0B:21:5A:BE:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F335A140DBDC11EF8D5B674E762E951A.roa
Signing time: Sun 26 Jan 2025 11:59:09 +0000
ROA not before: Sun 26 Jan 2025 11:59:05 +0000
ROA not after: Tue 25 Mar 2025 11:59:05 +0000
asID: 6079
IP address blocks: 154.207.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84618 (0x14a8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 11:59:05 2025 GMT
Not After : Mar 25 11:59:05 2025 GMT
Subject: CN=6796238d-d951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:f9:4f:ef:92:d5:7a:c8:9c:23:d9:f3:9f:
37:f0:6e:2c:e1:a0:d8:4a:33:37:05:3b:c3:6b:e9:
4b:35:7c:51:cc:19:72:2e:31:8f:23:ee:06:1a:d6:
7c:23:b7:5f:b4:ae:80:d8:6b:3d:7e:a8:6a:84:76:
15:7a:67:3b:cf:ee:ac:60:07:81:fa:ce:9a:35:54:
65:62:96:6c:72:57:87:80:da:49:28:8c:f5:70:ce:
93:84:5f:e0:0c:8e:e6:8f:29:6b:1c:72:3b:d3:ff:
e0:11:76:db:84:00:18:d7:f7:c1:d5:0b:49:55:4a:
1d:dd:08:54:b3:94:c7:53:4b:50:ae:1b:6e:bc:01:
23:19:47:eb:af:19:25:9f:68:a2:64:ca:0a:d7:df:
f1:02:18:be:95:f7:8f:1a:77:fc:12:37:58:00:72:
eb:24:b6:f8:d9:c9:74:fc:b6:67:4a:ea:b2:71:a8:
86:6b:44:74:a9:bd:47:f4:2f:80:66:dc:f1:57:c3:
90:a0:09:43:9e:0e:a6:7b:fb:7e:b1:d5:0f:a2:5b:
55:85:e7:9b:b7:69:4a:1f:4f:a4:0d:41:44:4a:87:
17:13:5c:5a:dc:90:dd:c9:51:27:64:f8:52:9f:a5:
81:b8:5b:15:51:eb:9b:f4:78:3e:b5:a6:c0:54:e9:
a5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:49:C6:91:C5:CF:21:FF:F4:EF:A2:B9:2B:B3:DB:0B:21:5A:BE:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F335A140DBDC11EF8D5B674E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.0.0/19
Signature Algorithm: sha256WithRSAEncryption
96:58:d1:1a:c3:ea:e4:51:2e:9e:8b:d7:23:55:99:44:dd:43:
7c:85:55:24:30:ae:4a:27:48:f0:5e:25:ca:ae:70:c7:51:b9:
64:5c:0f:04:74:65:c7:85:e0:1a:a2:4d:ac:3b:ef:a1:2e:93:
b2:fb:db:18:94:2b:91:60:47:20:64:11:5a:a5:1c:17:21:a6:
dd:29:bb:48:ee:64:5b:52:79:3c:97:1f:d3:bb:10:6e:d5:db:
2f:13:d2:c7:26:53:db:75:7c:f9:66:f6:6f:43:b1:f4:24:74:
4f:eb:19:05:31:f8:33:f7:9a:6e:f1:47:d7:43:fa:8d:c3:43:
ce:8c:e3:c9:bb:e6:5e:4c:39:40:67:8e:ca:2b:6e:cc:85:ba:
e1:71:35:c6:3d:f6:f4:fc:5d:8c:de:50:d5:61:61:7d:26:ca:
14:05:b3:ae:a2:d3:07:b1:4c:9c:40:33:6e:de:6e:56:51:09:
72:58:7a:60:4e:dc:55:ab:9c:24:18:6b:d2:f8:32:d0:11:5a:
b4:db:7a:b7:ca:4d:ce:ef:ef:5c:ac:d2:68:94:a7:ac:a0:57:
13:88:ee:18:d4:03:2d:4d:73:ee:4a:ce:f6:ff:0c:25:cf:53:
85:36:fc:b2:97:46:15:8d:3e:6f:3d:2d:78:3a:bc:af:bc:24:
a7:31:c0:94
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUqKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI2MTE1OTA1WhcNMjUwMzI1MTE1OTA1WjAYMRYw
FAYDVQQDEw02Nzk2MjM4ZC1kOTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyrL5T++S1XrInCPZ85838G4s4aDYSjM3BTvDa+lLNXxRzBlyLjGPI+4G
GtZ8I7dftK6A2Gs9fqhqhHYVemc7z+6sYAeB+s6aNVRlYpZscleHgNpJKIz1cM6T
hF/gDI7mjylrHHI70//gEXbbhAAY1/fB1QtJVUod3QhUs5THU0tQrhtuvAEjGUfr
rxkln2iiZMoK19/xAhi+lfePGnf8EjdYAHLrJLb42cl0/LZnSuqycaiGa0R0qb1H
9C+AZtzxV8OQoAlDng6me/t+sdUPoltVheebt2lKH0+kDUFESocXE1xa3JDdyVEn
ZPhSn6WBuFsVUeub9Hg+tabAVOmlyQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIVJ
xpHFzyH/9O+iuSuz2wshWr47MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMzM1QTE0MERCREMxMUVGOEQ1QjY3NEU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFms8AMA0GCSqGSIb3DQEB
CwUAA4IBAQCWWNEaw+rkUS6ei9cjVZlE3UN8hVUkMK5KJ0jwXiXKrnDHUblkXA8E
dGXHheAaok2sO++hLpOy+9sYlCuRYEcgZBFapRwXIabdKbtI7mRbUnk8lx/TuxBu
1dsvE9LHJlPbdXz5ZvZvQ7H0JHRP6xkFMfgz95pu8UfXQ/qNw0POjOPJu+ZeTDlA
Z47KK27MhbrhcTXGPfb0/F2M3lDVYWF9JsoUBbOuotMHsUycQDNu3m5WUQlyWHpg
TtxVq5wkGGvS+DLQEVq023q3yk3O7+9crNJolKesoFcTiO4Y1AMtTXPuSs72/wwl
z1OFNvyyl0YVjT5vPS14OryvvCSnMcCU
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:12:28 2025 by rpki-client