Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0180A0A6DAF711EFB5ED1943762E951A.roa
File: 0180A0A6DAF711EFB5ED1943762E951A.roa (raw, json)
Hash identifier: sIoNdgx+rxmyX5AT9I/KV5WN0pm2h4y0ZpBQ69uIJig=
Subject key identifier: EF:06:38:FF:B7:58:FF:D1:2D:46:9A:D5:A7:83:E7:02:F4:FF:F1:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0180A0A6DAF711EFB5ED1943762E951A.roa
Signing time: Sat 25 Jan 2025 08:33:09 +0000
ROA not before: Sat 25 Jan 2025 08:33:05 +0000
ROA not after: Sun 30 Mar 2025 08:33:05 +0000
asID: 63139
IP address blocks: 154.94.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84219 (0x148fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 08:33:05 2025 GMT
Not After : Mar 30 08:33:05 2025 GMT
Subject: CN=6794a1c5-7cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:aa:54:71:68:1e:c8:ad:48:58:5a:19:f2:
ed:d4:29:29:b6:06:20:57:f6:e8:2c:fa:38:6b:19:
32:e4:fe:26:b9:b7:c4:d2:8c:bf:4d:0f:64:1e:4d:
de:85:f6:49:5c:b1:4c:c8:33:99:68:ee:5f:f4:53:
60:9e:1d:0d:17:fe:8e:a0:2e:c0:7f:62:1b:82:79:
2a:f1:63:4d:c4:3e:4f:a1:ab:a9:ab:90:61:14:bc:
f2:f7:97:e6:2b:23:76:20:75:1f:de:46:83:4e:60:
ef:b1:92:20:b4:77:e4:4e:fe:33:69:65:d7:77:7e:
e7:94:fc:02:eb:2d:4b:3e:3a:4a:42:12:82:5a:52:
45:50:a1:fb:b6:53:21:d2:ae:a4:59:14:02:92:50:
62:fa:f4:65:87:d7:79:7e:25:a5:a1:49:ce:07:21:
78:7a:ee:89:3e:cf:df:7d:83:05:b9:91:b1:8a:dc:
3d:79:63:80:b0:7d:6f:58:6f:d3:88:9f:3d:99:53:
09:03:e1:4b:d8:8f:d9:af:25:93:93:da:01:ab:81:
f1:af:ee:1f:a0:bf:48:16:72:8e:b6:bf:84:7b:fd:
3c:ca:b2:c3:0c:80:4e:c8:37:94:03:50:c4:4b:9a:
c2:ea:b0:18:10:80:71:c9:7b:71:6b:88:ab:61:2f:
1e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:06:38:FF:B7:58:FF:D1:2D:46:9A:D5:A7:83:E7:02:F4:FF:F1:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0180A0A6DAF711EFB5ED1943762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.104.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:28:6e:1c:25:ef:50:77:d8:40:1e:50:d3:f4:b1:36:d1:57:
e8:b6:0e:ad:ab:f0:95:43:0b:d9:49:68:f3:5a:ec:39:ca:61:
ee:f6:e7:20:4f:a6:ba:0e:93:da:10:5e:b6:83:7b:07:cf:65:
e5:d1:8a:83:b1:6c:28:c0:91:c6:24:76:af:2a:39:b0:c3:03:
68:a4:59:85:3b:f3:39:5b:1f:4a:bc:8c:37:22:90:6c:ee:71:
c2:a6:c0:f7:b9:d5:65:22:c6:df:e8:d9:d1:e0:42:b5:20:61:
53:15:24:a1:9c:e0:4a:69:44:7d:aa:ae:25:c7:ff:98:72:62:
48:34:13:8b:72:54:fd:68:f8:23:87:63:e3:28:8f:7c:2b:88:
1c:1b:46:89:ab:dc:15:98:88:1b:94:4d:28:84:c5:d4:66:1d:
43:04:e5:d6:1f:71:af:bb:26:b8:bf:6d:21:e4:d4:a8:0c:3d:
80:a5:0c:cd:fd:a2:67:99:b8:7d:04:8e:a3:d2:3a:26:15:41:
3f:5f:86:06:57:eb:b0:83:f9:d4:2d:fe:a0:48:fb:b4:7c:41:
64:94:1a:9b:d6:55:99:dd:0a:b8:30:d1:14:02:4b:a1:3f:be:
e7:84:bc:be:0b:a5:c0:28:a4:ff:e9:a9:26:b6:eb:09:49:f7:
e9:fb:a4:99
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUj7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI1MDgzMzA1WhcNMjUwMzMwMDgzMzA1WjAYMRYw
FAYDVQQDEw02Nzk0YTFjNS03Y2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwGKqVHFoHsitSFhaGfLt1CkptgYgV/boLPo4axky5P4mubfE0oy/TQ9k
Hk3ehfZJXLFMyDOZaO5f9FNgnh0NF/6OoC7Af2Ibgnkq8WNNxD5Poaupq5BhFLzy
95fmKyN2IHUf3kaDTmDvsZIgtHfkTv4zaWXXd37nlPwC6y1LPjpKQhKCWlJFUKH7
tlMh0q6kWRQCklBi+vRlh9d5fiWloUnOByF4eu6JPs/ffYMFuZGxitw9eWOAsH1v
WG/TiJ89mVMJA+FL2I/ZryWTk9oBq4Hxr+4foL9IFnKOtr+Ee/08yrLDDIBOyDeU
A1DES5rC6rAYEIBxyXtxa4irYS8e6wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFO8G
OP+3WP/RLUaa1aeD5wL0//FlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMTgwQTBBNkRBRjcxMUVGQjVFRDE5NDM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5oMA0GCSqGSIb3DQEB
CwUAA4IBAQCMKG4cJe9Qd9hAHlDT9LE20Vfotg6tq/CVQwvZSWjzWuw5ymHu9ucg
T6a6DpPaEF62g3sHz2Xl0YqDsWwowJHGJHavKjmwwwNopFmFO/M5Wx9KvIw3IpBs
7nHCpsD3udVlIsbf6NnR4EK1IGFTFSShnOBKaUR9qq4lx/+YcmJINBOLclT9aPgj
h2PjKI98K4gcG0aJq9wVmIgblE0ohMXUZh1DBOXWH3Gvuya4v20h5NSoDD2ApQzN
/aJnmbh9BI6j0jomFUE/X4YGV+uwg/nULf6gSPu0fEFklBqb1lWZ3Qq4MNEUAkuh
P77nhLy+C6XAKKT/6akmtusJSffp+6SZ
-----END CERTIFICATE-----
Generated at Sat Apr 12 04:59:35 2025 by rpki-client