Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3CB30A2D9D411EF91534188762E951A.roa
File: F3CB30A2D9D411EF91534188762E951A.roa (raw, json)
Hash identifier: 0HKxGix2jS9hLJVtOLLF058V+kbr+bo+ofan/+DmJeM=
Subject key identifier: A6:AA:0C:77:00:F4:75:1F:26:CE:C3:5C:4B:2D:A5:3F:A1:60:FF:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01432D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3CB30A2D9D411EF91534188762E951A.roa
Signing time: Thu 23 Jan 2025 21:56:52 +0000
ROA not before: Fri 24 Jan 2025 21:56:48 +0000
ROA not after: Fri 28 Feb 2025 21:56:48 +0000
asID: 62240
IP address blocks: 154.194.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82733 (0x1432d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:56:48 2025 GMT
Not After : Feb 28 21:56:48 2025 GMT
Subject: CN=6792bb24-b138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:46:cb:f4:bf:7f:b9:cf:86:31:65:f4:c6:18:
29:18:c9:ae:56:1a:d5:1f:b7:1f:3d:18:0f:f8:aa:
08:23:ec:c3:10:25:5b:39:92:f3:d5:07:9f:1e:42:
02:eb:fc:3f:cf:9b:91:96:a7:86:b1:49:97:91:cf:
f3:e4:9b:18:ce:8f:8e:3c:c5:78:58:f7:ca:fc:b2:
d9:78:b2:f9:31:33:90:98:1c:bc:63:44:92:5f:dc:
61:1d:cb:d7:b6:0c:bd:e2:fe:76:83:30:9b:c2:d2:
c9:6c:c8:bd:7e:69:8b:1e:79:e9:7a:35:cb:87:49:
76:e4:70:50:2e:32:2c:b3:1c:b3:dc:2c:76:53:8a:
0c:de:29:66:41:73:ab:78:cc:7f:1b:f2:db:4a:63:
ed:bf:2b:49:8f:89:d0:d2:3c:e6:b5:cb:08:72:65:
a4:ba:1d:98:39:0c:00:66:42:9c:a5:5d:af:15:2a:
b9:a2:53:f2:05:12:42:51:e3:f5:15:18:ba:d2:0c:
8f:a9:28:4b:06:a5:00:34:30:ca:f4:5e:dd:e5:a7:
f0:34:d6:d7:b8:0d:83:06:50:87:d0:28:07:04:80:
45:e8:46:e7:3a:b3:8c:c4:8d:d8:d7:12:05:28:ec:
a2:4a:df:25:ef:8c:49:cf:29:99:c8:9f:0b:5a:b0:
92:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AA:0C:77:00:F4:75:1F:26:CE:C3:5C:4B:2D:A5:3F:A1:60:FF:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3CB30A2D9D411EF91534188762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.86.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:0f:71:8c:fe:96:78:b3:c2:5c:8a:b3:fb:ba:bb:b0:82:a9:
42:79:16:4b:63:40:b8:9c:c9:2c:2f:51:f1:f4:1e:95:49:12:
89:57:ed:22:b6:0f:93:c0:04:c9:30:1c:94:c0:5c:a0:52:77:
d9:d1:a3:8f:2e:bf:ad:21:90:f8:57:31:ce:b8:b5:42:4b:9f:
1d:e2:b2:7d:41:10:37:81:6c:4c:44:52:ea:69:65:92:47:bb:
6f:46:7a:1d:e3:b1:23:c6:bf:1d:1d:6f:ee:a0:2c:c4:9f:9f:
56:61:55:e8:5a:f1:91:38:8e:0e:d4:1c:52:e6:90:0c:67:21:
07:8f:f0:d9:59:17:ec:a4:62:30:4e:fb:fe:9f:bd:40:ba:58:
6b:47:49:b7:bc:11:03:20:ff:8f:eb:fc:e0:00:e9:c0:6e:29:
c0:46:d6:31:c7:4e:a3:b8:35:1d:a9:33:9e:da:f2:b1:9c:df:
4f:35:f9:69:cf:09:04:fe:aa:e5:4f:10:c2:87:b4:f2:7c:58:
46:5d:e0:e9:78:cc:7d:a2:ab:10:8e:8a:27:ac:f9:b2:bc:9a:
e6:9a:a3:af:f3:2f:30:d9:48:b1:5c:49:37:ff:62:bb:8b:9c:
e2:2d:08:c5:fe:3f:f4:33:8f:b5:84:ad:1b:c3:a8:78:c3:11:
14:93:4c:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUMtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MjE1NjQ4WhcNMjUwMjI4MjE1NjQ4WjAYMRYw
FAYDVQQDEw02NzkyYmIyNC1iMTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnEbL9L9/uc+GMWX0xhgpGMmuVhrVH7cfPRgP+KoII+zDECVbOZLz1Qef
HkIC6/w/z5uRlqeGsUmXkc/z5JsYzo+OPMV4WPfK/LLZeLL5MTOQmBy8Y0SSX9xh
HcvXtgy94v52gzCbwtLJbMi9fmmLHnnpejXLh0l25HBQLjIssxyz3Cx2U4oM3ilm
QXOreMx/G/LbSmPtvytJj4nQ0jzmtcsIcmWkuh2YOQwAZkKcpV2vFSq5olPyBRJC
UeP1FRi60gyPqShLBqUANDDK9F7d5afwNNbXuA2DBlCH0CgHBIBF6EbnOrOMxI3Y
1xIFKOyiSt8l74xJzymZyJ8LWrCSWwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKaq
DHcA9HUfJs7DXEstpT+hYP+lMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GM0NCMzBBMkQ5RDQxMUVGOTE1MzQxODg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJWMA0GCSqGSIb3DQEB
CwUAA4IBAQAfD3GM/pZ4s8JcirP7uruwgqlCeRZLY0C4nMksL1Hx9B6VSRKJV+0i
tg+TwATJMByUwFygUnfZ0aOPLr+tIZD4VzHOuLVCS58d4rJ9QRA3gWxMRFLqaWWS
R7tvRnod47Ejxr8dHW/uoCzEn59WYVXoWvGROI4O1BxS5pAMZyEHj/DZWRfspGIw
Tvv+n71AulhrR0m3vBEDIP+P6/zgAOnAbinARtYxx06juDUdqTOe2vKxnN9PNflp
zwkE/qrlTxDCh7TyfFhGXeDpeMx9oqsQjoonrPmyvJrmmqOv8y8w2UixXEk3/2K7
i5ziLQjF/j/0M4+1hK0bw6h4wxEUk0wI
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:30 2025 by rpki-client