Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/0E35F05E6E9511EFB4062247762E951A.roa
File: 0E35F05E6E9511EFB4062247762E951A.roa (raw, json)
Hash identifier: lISaE3Zm1JVOhw0VcDrpMMBkQhLILmwTN6j7/vY9oPU=
Subject key identifier: 72:79:72:36:E1:2E:61:00:0E:9D:10:DB:B3:07:46:FD:9E:20:C1:12
Certificate issuer: /CN=F363EA80AF/serialNumber=C67C6231120941235581D5942565ABF7419DCECC
Certificate serial: 0225
Authority key identifier: C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/0E35F05E6E9511EFB4062247762E951A.roa
Signing time: Mon 09 Sep 2024 10:19:54 +0000
ROA not before: Mon 09 Sep 2024 10:19:50 +0000
ROA not after: Sat 09 Sep 2034 10:19:50 +0000
asID: 19711
IP address blocks: 154.119.96.0/22 maxlen: 22
154.119.100.0/22 maxlen: 22
154.119.104.0/24 maxlen: 24
154.119.105.0/24 maxlen: 24
154.119.106.0/24 maxlen: 24
154.119.107.0/24 maxlen: 24
154.119.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363EA80AF
Validity
Not Before: Sep 9 10:19:50 2024 GMT
Not After : Sep 9 10:19:50 2034 GMT
Subject: CN=66decbca-5e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:23:34:a0:91:52:aa:8d:d3:1d:ac:60:41:
d7:00:f3:57:0a:d5:34:e7:ca:f2:a4:0b:1f:50:ba:
34:05:72:d7:1a:c4:bf:0f:58:0c:b0:ba:bf:7d:f1:
e0:47:20:17:e5:44:90:1a:94:d6:f0:a7:07:a5:74:
a4:a2:a0:7b:a6:9d:50:5e:1c:be:b6:34:a8:10:27:
ee:5a:42:d7:31:bf:32:3a:05:ce:ba:d5:b1:08:b7:
53:70:c4:c9:fd:24:12:76:21:2f:34:6a:ae:76:ee:
78:2e:36:10:78:34:24:37:82:c5:07:69:a3:a0:36:
b0:07:ad:41:d0:4e:6c:1c:d7:73:9b:03:d9:2e:c7:
5e:be:fe:4e:92:e4:f1:4b:d6:de:3a:a9:6f:e2:33:
c1:64:8a:08:73:7c:40:e6:fd:f6:23:a4:d8:48:a8:
f9:55:10:0f:c0:26:8d:53:eb:42:71:9e:e1:67:5f:
15:54:57:71:83:55:69:c7:57:61:d1:c4:2f:84:06:
33:9c:20:a5:99:89:fa:60:04:b0:27:ac:2f:3c:01:
2f:6a:84:b2:ca:dc:d3:8f:b2:da:84:e2:b2:92:66:
ff:b7:58:61:f2:41:96:78:40:16:8a:7d:a2:03:e8:
1e:ac:f7:fc:38:a2:6d:e4:0c:09:a5:87:7c:23:1a:
1a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:79:72:36:E1:2E:61:00:0E:9D:10:DB:B3:07:46:FD:9E:20:C1:12
X509v3 Authority Key Identifier:
keyid:C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/0E35F05E6E9511EFB4062247762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.119.96.0-154.119.108.255
Signature Algorithm: sha256WithRSAEncryption
af:a2:bc:f6:1a:11:7c:f4:25:c5:50:9b:c6:51:3c:1f:cf:c3:
e9:53:1f:bf:35:a5:64:18:06:56:4b:c3:d8:d4:fc:b6:c0:99:
9d:0d:b0:7f:74:7e:f7:0d:31:f8:0b:30:90:67:dc:3a:cf:eb:
b4:0b:da:9e:8f:58:f7:83:c8:f6:25:44:53:9e:bd:ae:10:bd:
a6:e5:f8:3f:60:46:a5:74:e1:12:ae:d5:71:6f:c3:4e:d0:02:
de:f2:20:97:d1:97:2a:51:44:96:49:d5:90:0d:f6:8a:e9:41:
06:b6:6e:f9:80:06:69:b2:f8:c4:f8:2a:42:4d:62:e1:84:c3:
96:9e:6a:6a:f8:f3:09:02:6e:a4:dd:93:78:7c:6f:e9:fa:51:
36:03:7c:de:ce:73:07:37:09:17:1a:19:57:e8:bf:0b:37:25:
02:c8:6c:0e:e9:6e:3c:44:83:f3:30:81:71:07:4a:ba:9e:de:
48:a7:be:71:0b:74:43:c9:86:52:3c:28:a4:d0:83:c3:f5:43:
28:15:f6:f0:51:0d:ed:94:32:38:d8:47:19:98:5b:30:04:ba:
fd:b6:65:9b:9f:26:b5:77:55:2e:13:f7:90:ad:d1:3b:fb:2b:
63:ff:8d:8c:a7:d3:3b:d5:f5:ac:3c:bd:6d:0f:6b:5e:eb:9e:
b7:3c:dc:e3
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0VBODBBRjExMC8GA1UEBRMoQzY3QzYyMzExMjA5NDEyMzU1ODFENTk0MjU2NUFC
Rjc0MTlEQ0VDQzAeFw0yNDA5MDkxMDE5NTBaFw0zNDA5MDkxMDE5NTBaMBgxFjAU
BgNVBAMTDTY2ZGVjYmNhLTVlOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDASyM0oJFSqo3THaxgQdcA81cK1TTnyvKkCx9QujQFctcaxL8PWAywur99
8eBHIBflRJAalNbwpweldKSioHumnVBeHL62NKgQJ+5aQtcxvzI6Bc661bEIt1Nw
xMn9JBJ2IS80aq527nguNhB4NCQ3gsUHaaOgNrAHrUHQTmwc13ObA9kux16+/k6S
5PFL1t46qW/iM8FkighzfEDm/fYjpNhIqPlVEA/AJo1T60JxnuFnXxVUV3GDVWnH
V2HRxC+EBjOcIKWZifpgBLAnrC88AS9qhLLK3NOPstqE4rKSZv+3WGHyQZZ4QBaK
faID6B6s9/w4om3kDAmlh3wjGhpfAgMBAAGjggKtMIICqTAdBgNVHQ4EFgQUcnly
NuEuYQAOnRDbswdG/Z4gwRIwHwYDVR0jBBgwFoAUxnxiMRIJQSNVgdWUJWWr90Gd
zswwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNFQTgwLzIzRDU0QjI4REREQTExRUQ4NjUzMkUwRDMwNkQ4QzFEL3hueGlN
UklKUVNOVmdkV1VKV1dyOTBHZHpzdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3hueGlNUklKUVNOVmdkV1VKV1dyOTBHZHpzdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNFQTgwLzIzRDU0QjI4REREQTExRUQ4NjUzMkUwRDMw
NkQ4QzFELzBFMzVGMDVFNkU5NTExRUZCNDA2MjI0Nzc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwJwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEBZp3YAMEAJp3bDANBgkq
hkiG9w0BAQsFAAOCAQEAr6K89hoRfPQlxVCbxlE8H8/D6VMfvzWlZBgGVkvD2NT8
tsCZnQ2wf3R+9w0x+AswkGfcOs/rtAvano9Y94PI9iVEU569rhC9puX4P2BGpXTh
Eq7VcW/DTtAC3vIgl9GXKlFElknVkA32iulBBrZu+YAGabL4xPgqQk1i4YTDlp5q
avjzCQJupN2TeHxv6fpRNgN83s5zBzcJFxoZV+i/CzclAshsDuluPESD8zCBcQdK
up7eSKe+cQt0Q8mGUjwopNCDw/VDKBX28FEN7ZQyONhHGZhbMAS6/bZlm58mtXdV
LhP3kK3RO/srY/+NjKfTO9X1rDy9bQ9rXuuetzzc4w==
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:02:51 2025 by rpki-client