Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30B813C6D8C811EFAC185B82762E951A.roa
File: 30B813C6D8C811EFAC185B82762E951A.roa (raw, json)
Hash identifier: MixSgPbAQEH6yph6IFtQcSN03jrDJKyB81nuy7l2wFk=
Subject key identifier: F3:DE:26:C6:44:9A:4B:08:E4:60:60:06:86:D4:35:1B:A0:9F:7D:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F90
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30B813C6D8C811EFAC185B82762E951A.roa
Signing time: Wed 22 Jan 2025 13:52:59 +0000
ROA not before: Wed 22 Jan 2025 13:52:56 +0000
ROA not after: Tue 01 Apr 2025 13:52:56 +0000
asID: 63139
IP address blocks: 154.93.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81808 (0x13f90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 13:52:56 2025 GMT
Not After : Apr 1 13:52:56 2025 GMT
Subject: CN=6790f83b-e50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ea:35:02:a3:85:4e:b1:3c:09:cd:2c:f3:cc:
63:9e:3d:ed:21:d0:6b:ce:4a:09:f9:56:31:9a:37:
a7:26:b3:4c:25:2f:9f:fa:ab:96:e6:b7:d7:13:b1:
65:36:3b:2d:c1:98:b7:f2:95:f2:ce:69:92:ee:b9:
b6:d4:ee:e5:8b:0a:5e:18:5d:ec:3a:c0:48:de:8a:
a1:23:48:84:09:7e:4b:db:30:8a:e1:93:41:8a:2f:
2a:54:49:35:18:b7:61:33:d6:12:8a:48:26:75:91:
65:5b:8f:c8:bc:ee:32:4a:d8:7f:ed:ee:39:16:8c:
b0:21:ca:8f:f9:e1:05:40:6c:eb:1a:3d:f3:47:62:
c5:d5:d2:59:61:35:21:09:66:52:8b:e7:d9:dc:16:
ff:a6:34:db:75:21:b0:89:07:6a:11:cf:81:73:e4:
35:e3:1a:49:a8:48:ff:9d:b1:23:dd:0c:89:43:fa:
d7:5a:46:bf:3e:9a:8a:31:f1:90:0a:82:db:57:f2:
d2:f0:c4:12:4e:74:fe:7b:a9:cb:c7:3a:c9:d0:71:
6e:b5:d9:59:25:6e:3c:4d:7e:04:f9:8a:8d:94:0b:
db:b1:c1:66:0b:10:ce:8b:6c:bf:51:f6:39:27:3c:
8b:4b:9f:e4:22:9f:63:df:e2:16:57:ba:0b:07:41:
14:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DE:26:C6:44:9A:4B:08:E4:60:60:06:86:D4:35:1B:A0:9F:7D:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30B813C6D8C811EFAC185B82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.77.0/24
Signature Algorithm: sha256WithRSAEncryption
63:53:9a:b7:fb:fd:94:15:7c:ac:42:2f:37:ee:1b:c4:ce:cf:
82:b9:3d:5a:f7:91:01:21:84:3c:0f:4e:e0:e6:13:97:a0:29:
28:dc:4a:0c:f4:8d:01:55:85:72:2a:73:61:4c:b9:f4:e6:6e:
ef:50:3a:fe:9d:37:f9:00:f8:3e:c8:2b:27:20:4b:d0:d6:9a:
02:37:67:35:49:c8:c8:65:b4:e0:7a:f8:d7:d0:b8:10:fa:41:
6a:c3:3f:93:cc:90:b2:9e:04:4f:04:db:ef:c9:19:92:7f:ba:
3e:4d:00:1b:c2:97:24:e7:25:0c:cb:d7:86:e2:84:75:77:61:
ac:d2:81:82:e5:2f:d9:6a:86:89:2a:1b:b7:f7:00:b0:a0:bd:
45:ea:71:51:e1:db:64:53:89:69:33:e7:4b:86:11:29:18:8b:
00:de:e6:1c:e1:a6:ae:e5:ed:2c:c2:56:dd:a6:3d:53:9f:1a:
42:1d:2e:a4:f9:00:da:59:f7:f0:a1:c0:71:1b:50:33:46:88:
13:bf:03:b1:a0:a5:82:41:31:f1:c0:54:98:ac:dc:09:e4:07:
85:c4:50:cb:11:79:4a:12:09:14:13:ac:ff:27:4d:e6:0c:45:
3a:67:e6:51:f2:ac:0c:43:ec:40:71:16:e1:09:b1:a9:b8:ac:
a5:09:ef:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT+QMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMTM1MjU2WhcNMjUwNDAxMTM1MjU2WjAYMRYw
FAYDVQQDEw02NzkwZjgzYi1lNTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4uo1AqOFTrE8Cc0s88xjnj3tIdBrzkoJ+VYxmjenJrNMJS+f+quW5rfX
E7FlNjstwZi38pXyzmmS7rm21O7liwpeGF3sOsBI3oqhI0iECX5L2zCK4ZNBii8q
VEk1GLdhM9YSikgmdZFlW4/IvO4ySth/7e45FoywIcqP+eEFQGzrGj3zR2LF1dJZ
YTUhCWZSi+fZ3Bb/pjTbdSGwiQdqEc+Bc+Q14xpJqEj/nbEj3QyJQ/rXWka/PpqK
MfGQCoLbV/LS8MQSTnT+e6nLxzrJ0HFutdlZJW48TX4E+YqNlAvbscFmCxDOi2y/
UfY5JzyLS5/kIp9j3+IWV7oLB0EUzwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPPe
JsZEmksI5GBgBobUNRugn31aMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMEI4MTNDNkQ4QzgxMUVGQUMxODVCODI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml1NMA0GCSqGSIb3DQEB
CwUAA4IBAQBjU5q3+/2UFXysQi837hvEzs+CuT1a95EBIYQ8D07g5hOXoCko3EoM
9I0BVYVyKnNhTLn05m7vUDr+nTf5APg+yCsnIEvQ1poCN2c1ScjIZbTgevjX0LgQ
+kFqwz+TzJCyngRPBNvvyRmSf7o+TQAbwpck5yUMy9eG4oR1d2Gs0oGC5S/ZaoaJ
Khu39wCwoL1F6nFR4dtkU4lpM+dLhhEpGIsA3uYc4aau5e0swlbdpj1TnxpCHS6k
+QDaWffwocBxG1AzRogTvwOxoKWCQTHxwFSYrNwJ5AeFxFDLEXlKEgkUE6z/J03m
DEU6Z+ZR8qwMQ+xAcRbhCbGpuKylCe9x
-----END CERTIFICATE-----
Generated at Sat Apr 12 04:59:32 2025 by rpki-client