Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34BDC1B2D2E411EF8758768C762E951A.roa
File: 34BDC1B2D2E411EF8758768C762E951A.roa (raw, json)
Hash identifier: WFCB/Uz5jq/tfHold7B8o3kOazrh0W9QYfezdL/vHmE=
Subject key identifier: 44:41:03:F1:F3:7B:A1:11:69:0E:70:FE:5D:40:B7:E8:85:1C:5C:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34BDC1B2D2E411EF8758768C762E951A.roa
Signing time: Wed 15 Jan 2025 01:58:25 +0000
ROA not before: Wed 15 Jan 2025 01:58:21 +0000
ROA not after: Sat 03 Jan 2026 01:58:21 +0000
asID: 984
IP address blocks: 154.211.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80772 (0x13b84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 01:58:21 2025 GMT
Not After : Jan 3 01:58:21 2026 GMT
Subject: CN=67871641-e1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:38:fd:87:d5:24:a9:a8:ab:10:54:23:27:
de:7b:3d:cb:d0:70:e2:cd:d0:05:85:b4:db:b2:a0:
e2:11:43:a4:2c:bb:5c:28:45:94:1d:7c:41:74:1b:
92:14:d7:75:ae:cf:ca:1a:fd:5c:36:83:78:99:5d:
a7:a2:5b:93:a4:b7:a1:f5:b7:01:b6:5b:43:b1:56:
1d:1a:3c:75:58:25:b2:8d:5f:5a:0f:a5:8b:7a:9f:
60:68:2a:ff:c9:1b:0b:62:e0:0e:a7:dd:57:66:fb:
e2:33:00:e9:ee:b7:e7:76:39:70:c1:93:29:49:9d:
e6:b4:b5:f8:40:33:36:8f:c2:3c:af:38:9c:ac:6c:
eb:1a:64:12:9d:b4:5d:6f:1b:0b:72:87:ad:b1:15:
68:9b:b4:c7:d5:92:02:ea:95:f1:3d:79:81:e5:f4:
9f:8a:d9:8c:eb:b5:ff:03:ea:9b:60:8c:16:db:df:
36:30:fe:0e:1e:e3:2f:38:d9:68:3b:b1:7f:d9:05:
91:9a:7f:10:4a:2a:a3:48:64:37:08:49:58:60:0b:
5e:83:1e:e0:1c:ff:01:2a:12:f1:8c:de:96:ff:38:
16:83:6c:59:01:da:9c:c1:e1:a7:17:08:5c:bd:a5:
07:d6:c6:5c:9e:0d:72:73:10:1a:81:39:91:fa:b3:
13:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:41:03:F1:F3:7B:A1:11:69:0E:70:FE:5D:40:B7:E8:85:1C:5C:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34BDC1B2D2E411EF8758768C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.134.0/24
Signature Algorithm: sha256WithRSAEncryption
07:72:fe:60:73:4a:3d:5a:1e:b8:9c:f5:27:84:81:e9:87:35:
47:28:95:14:2a:de:bc:43:4a:e5:3e:a6:12:a5:51:01:59:fe:
82:1c:81:0d:13:92:b4:e6:08:be:eb:03:ca:0f:44:08:18:6b:
d1:25:0c:38:ab:bf:b4:1f:16:b0:24:95:7d:4b:64:f4:97:6b:
e8:50:ee:95:26:b4:9f:a7:6b:5c:ef:89:71:ae:8a:35:25:d0:
5d:93:b6:ce:76:8b:1f:7c:a1:e6:ce:47:95:94:2a:64:f1:35:
49:ab:4c:1d:04:ff:16:29:95:27:1e:22:93:30:d4:1c:be:4f:
03:30:44:39:45:cd:d7:2b:6b:8e:9f:be:a6:04:61:ec:70:10:
b4:02:53:3a:3a:c2:67:5a:54:39:95:c7:f5:4f:f9:6d:5f:48:
2b:48:d5:36:61:90:c9:05:af:38:78:a5:d8:71:21:ae:05:7f:
12:61:d0:90:32:7b:44:84:ba:a3:d1:59:d0:ec:59:2b:73:ed:
28:76:72:b1:2a:20:dc:03:eb:a8:85:11:ec:7e:2d:0f:10:ee:
e0:9e:87:26:40:ff:cf:6a:6a:67:1b:5e:c6:59:15:17:09:94:
57:43:2b:17:83:c5:e3:7b:50:49:ad:fa:ea:16:dc:e1:f0:80:
1d:2a:e6:04
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATuEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE1MDE1ODIxWhcNMjYwMTAzMDE1ODIxWjAYMRYw
FAYDVQQDEw02Nzg3MTY0MS1lMWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3Fc4/YfVJKmoqxBUIyfeez3L0HDizdAFhbTbsqDiEUOkLLtcKEWUHXxB
dBuSFNd1rs/KGv1cNoN4mV2noluTpLeh9bcBtltDsVYdGjx1WCWyjV9aD6WLep9g
aCr/yRsLYuAOp91XZvviMwDp7rfndjlwwZMpSZ3mtLX4QDM2j8I8rzicrGzrGmQS
nbRdbxsLcoetsRVom7TH1ZIC6pXxPXmB5fSfitmM67X/A+qbYIwW2982MP4OHuMv
ONloO7F/2QWRmn8QSiqjSGQ3CElYYAtegx7gHP8BKhLxjN6W/zgWg2xZAdqcweGn
FwhcvaUH1sZcng1ycxAagTmR+rMTCwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFERB
A/Hze6ERaQ5w/l1At+iFHFzXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNEJEQzFCMkQyRTQxMUVGODc1ODc2OEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtOGMA0GCSqGSIb3DQEB
CwUAA4IBAQAHcv5gc0o9Wh64nPUnhIHphzVHKJUUKt68Q0rlPqYSpVEBWf6CHIEN
E5K05gi+6wPKD0QIGGvRJQw4q7+0HxawJJV9S2T0l2voUO6VJrSfp2tc74lxroo1
JdBdk7bOdosffKHmzkeVlCpk8TVJq0wdBP8WKZUnHiKTMNQcvk8DMEQ5Rc3XK2uO
n76mBGHscBC0AlM6OsJnWlQ5lcf1T/ltX0grSNU2YZDJBa84eKXYcSGuBX8SYdCQ
MntEhLqj0VnQ7Fkrc+0odnKxKiDcA+uohRHsfi0PEO7gnocmQP/PampnG17GWRUX
CZRXQysXg8Xje1BJrfrqFtzh8IAdKuYE
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:27 2025 by rpki-client