Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34C46A7CF47611EF8A1514BF762E951A.roa
File: 34C46A7CF47611EF8A1514BF762E951A.roa (raw, json)
Hash identifier: ghc0Se6DtRE6oCaT7JyKI7CX6XHVflm1+g4eBwi5Cg8=
Subject key identifier: 32:45:0C:9E:D3:EE:57:69:AD:2E:14:00:AD:AB:E9:23:E7:CA:E9:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016589
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34C46A7CF47611EF8A1514BF762E951A.roa
Signing time: Wed 26 Feb 2025 19:16:40 +0000
ROA not before: Wed 26 Feb 2025 19:16:36 +0000
ROA not after: Sat 19 Feb 2028 19:16:36 +0000
asID: 17561
IP address blocks: 154.218.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91529 (0x16589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:16:36 2025 GMT
Not After : Feb 19 19:16:36 2028 GMT
Subject: CN=67bf6898-b376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:69:dd:e8:3e:49:76:2f:06:2c:eb:05:6f:8d:
6c:75:39:3b:eb:10:ab:d9:35:06:e4:d6:dd:b3:45:
e7:92:96:2e:2b:05:32:b1:e8:76:e1:22:18:ca:52:
2f:59:fa:92:51:d4:84:6e:6b:4f:88:40:11:a7:f3:
f7:1f:7c:a9:81:fc:e7:11:bd:91:e6:60:16:d9:78:
14:e4:e4:76:a0:61:19:60:b6:c1:16:82:4d:c7:9f:
ab:1e:f4:66:6e:04:1c:c2:1d:7c:34:36:d4:31:2c:
13:9d:d8:a9:aa:e6:85:c2:b5:63:6a:ae:02:d2:98:
b0:ab:d8:e6:0a:13:1d:dc:f7:0c:08:37:0e:7e:be:
c5:39:3c:4f:2e:85:14:d1:7c:94:ff:28:bd:31:07:
e5:2e:ef:65:fe:10:24:c4:ef:df:47:5d:ef:38:99:
7e:92:bf:5a:38:e6:5a:51:3e:cc:3a:72:8e:21:e8:
bf:e0:91:74:23:bc:32:0e:68:34:9b:a6:7e:21:d5:
4d:fe:09:20:57:0a:57:15:4d:b1:4e:ec:8f:33:e9:
4a:4a:4d:71:63:b2:50:d5:28:75:0c:a3:8b:21:6e:
62:5f:ec:4a:96:46:93:ef:48:41:94:89:c9:5f:90:
90:6b:ea:9f:9a:e8:c7:d6:65:ef:6a:27:6c:ae:d2:
ef:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:45:0C:9E:D3:EE:57:69:AD:2E:14:00:AD:AB:E9:23:E7:CA:E9:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34C46A7CF47611EF8A1514BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.40.0/24
Signature Algorithm: sha256WithRSAEncryption
74:75:f0:7f:cd:ec:51:27:ed:0d:6c:56:26:ce:b8:d5:9d:6b:
86:a8:32:54:16:c7:97:d2:33:39:6d:3f:e9:c6:4c:04:97:0d:
79:b3:53:06:dd:a2:f4:80:10:f7:69:e1:d6:a9:69:e6:c0:19:
dd:93:1f:c4:8e:24:b6:e7:62:da:73:70:b0:27:5c:cf:ff:9f:
b1:e6:53:42:47:38:38:40:27:93:d6:a2:5a:8f:93:26:c3:eb:
84:e6:9d:99:03:90:09:5f:e7:99:60:86:2f:d4:78:63:52:cc:
b4:c5:2b:b1:f3:e2:74:a3:0e:4a:6b:ec:a5:eb:5d:a7:99:60:
44:49:b0:c9:bf:4d:26:5f:05:47:e8:4c:08:80:70:fb:cb:77:
0c:61:79:dc:7b:61:e1:38:12:b2:2d:84:f8:94:fc:4f:2c:71:
bf:87:82:86:b9:4d:ba:f3:56:ac:f8:04:9e:cb:2c:c7:48:60:
da:33:c3:34:fc:0f:73:ec:b0:20:e0:1d:9c:7f:a6:c9:cb:17:
f5:b9:6e:e1:47:a6:17:da:aa:96:d0:10:48:f6:6a:19:47:a0:
3c:95:e9:58:e2:2e:70:32:c7:44:3c:80:b7:ab:38:15:2e:b8:
7a:5e:89:97:f1:dd:a4:76:30:cc:56:36:36:77:b5:55:dc:d5:
27:53:9f:32
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWWJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTkxNjM2WhcNMjgwMjE5MTkxNjM2WjAYMRYw
FAYDVQQDEw02N2JmNjg5OC1iMzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8Gnd6D5Jdi8GLOsFb41sdTk76xCr2TUG5Nbds0XnkpYuKwUyseh24SIY
ylIvWfqSUdSEbmtPiEARp/P3H3ypgfznEb2R5mAW2XgU5OR2oGEZYLbBFoJNx5+r
HvRmbgQcwh18NDbUMSwTndipquaFwrVjaq4C0piwq9jmChMd3PcMCDcOfr7FOTxP
LoUU0XyU/yi9MQflLu9l/hAkxO/fR13vOJl+kr9aOOZaUT7MOnKOIei/4JF0I7wy
Dmg0m6Z+IdVN/gkgVwpXFU2xTuyPM+lKSk1xY7JQ1Sh1DKOLIW5iX+xKlkaT70hB
lInJX5CQa+qfmujH1mXvaidsrtLvhQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDJF
DJ7T7ldprS4UAK2r6SPnyuldMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNEM0NkE3Q0Y0NzYxMUVGOEExNTE0QkY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtooMA0GCSqGSIb3DQEB
CwUAA4IBAQB0dfB/zexRJ+0NbFYmzrjVnWuGqDJUFseX0jM5bT/pxkwElw15s1MG
3aL0gBD3aeHWqWnmwBndkx/EjiS252Lac3CwJ1zP/5+x5lNCRzg4QCeT1qJaj5Mm
w+uE5p2ZA5AJX+eZYIYv1HhjUsy0xSux8+J0ow5Ka+yl612nmWBESbDJv00mXwVH
6EwIgHD7y3cMYXnce2HhOBKyLYT4lPxPLHG/h4KGuU2681as+ASeyyzHSGDaM8M0
/A9z7LAg4B2cf6bJyxf1uW7hR6YX2qqW0BBI9moZR6A8lelY4i5wMsdEPIC3qzgV
Lrh6XomX8d2kdjDMVjY2d7VV3NUnU58y
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:58 2025 by rpki-client