Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A19130ADFEB11EFA7E157A5762E951A.roa
File: 3A19130ADFEB11EFA7E157A5762E951A.roa (raw, json)
Hash identifier: sOKkPiAblRZK1m9as4JGDYjuJlSoQCpOjHYsVoLpqlo=
Subject key identifier: E6:EC:61:30:DF:51:7D:8D:3A:1A:13:55:84:08:CB:3A:2D:6C:5A:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DF9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A19130ADFEB11EFA7E157A5762E951A.roa
Signing time: Fri 31 Jan 2025 15:51:26 +0000
ROA not before: Fri 31 Jan 2025 15:51:22 +0000
ROA not after: Sat 03 Jan 2026 15:51:22 +0000
asID: 40065
IP address blocks: 154.214.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85497 (0x14df9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 31 15:51:22 2025 GMT
Not After : Jan 3 15:51:22 2026 GMT
Subject: CN=679cf17e-022a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:2d:36:cd:79:5d:cb:26:ca:45:e9:36:cf:
7a:00:d1:fa:a0:0a:dd:a2:3b:79:7a:1e:e3:0b:be:
6f:6b:7d:41:f0:e8:82:7d:42:59:e7:d4:7f:ec:1e:
75:e1:aa:d4:df:1d:0c:ff:ac:34:ed:40:f2:66:aa:
f0:33:94:1a:53:0a:e2:65:37:55:62:91:57:b0:57:
81:da:13:90:2e:dc:bb:c3:c3:7b:08:2b:01:5c:86:
6e:85:ef:33:11:88:b9:ba:fa:91:dc:db:2e:8e:0b:
a4:23:82:00:e7:d5:f8:e7:d1:e9:bc:9b:91:14:8f:
1c:95:68:d6:ee:88:a3:b1:d4:59:89:fe:ec:83:95:
89:aa:7d:fc:ec:36:74:13:01:ca:9b:51:f3:b5:5c:
da:92:67:7d:19:7a:07:41:3f:4e:41:49:5d:cc:09:
89:bf:ee:25:ab:df:01:1c:6e:27:d7:1e:dc:da:9d:
34:e2:14:b6:6c:ee:98:5f:29:9c:8a:2a:d5:c8:8e:
45:69:84:e0:53:ed:e2:cb:c4:71:3d:a7:8f:90:f9:
44:7d:b3:e1:61:44:89:6a:25:d2:6c:a8:1d:0b:b9:
fb:9d:ec:24:59:b2:0a:a3:53:f3:2d:f1:e3:f2:0f:
cd:a1:08:69:35:9a:f2:54:67:54:9f:71:5f:5d:67:
90:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EC:61:30:DF:51:7D:8D:3A:1A:13:55:84:08:CB:3A:2D:6C:5A:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A19130ADFEB11EFA7E157A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.8.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:dc:ac:2f:2a:60:d0:e9:f3:b2:7a:62:17:30:b7:fc:2e:ea:
59:bf:9d:79:d0:fa:15:76:aa:36:65:bd:0d:dd:b6:14:86:bc:
12:68:93:35:6c:ed:bb:0b:47:d8:da:6c:25:ad:a2:8e:b5:52:
7d:23:53:e8:96:de:63:64:57:af:6e:f7:e1:c2:a5:8b:9d:ef:
3d:4e:37:9a:6d:c4:d2:60:0c:95:d9:ca:ff:b5:45:cf:c8:ec:
eb:d3:79:45:df:1f:27:c3:c6:58:b4:4a:e7:67:57:56:d8:15:
58:54:a8:1c:d2:14:52:31:df:a5:d4:aa:db:0c:1b:11:f7:21:
9d:36:eb:16:64:11:f0:04:04:2d:2d:fe:55:e7:c6:c0:54:f6:
46:fe:fd:38:5e:b4:ae:a4:e0:26:4e:43:1c:6c:30:60:0d:3d:
b5:98:b3:60:49:14:5e:08:18:f5:3e:2f:28:d2:3e:11:a6:01:
47:56:bc:b2:45:9e:89:81:42:9b:34:cf:08:98:f2:85:4a:67:
94:e0:3a:01:2e:30:9f:80:20:ac:1e:b3:4c:53:11:a1:c0:e1:
0a:50:e0:c0:1b:37:57:e8:75:29:07:0d:6b:41:96:b4:4d:86:
f1:7a:30:ac:72:97:c0:da:77:7e:86:e2:50:79:ae:26:7e:df:
d4:c2:c0:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU35MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTMxMTU1MTIyWhcNMjYwMTAzMTU1MTIyWjAYMRYw
FAYDVQQDEw02NzljZjE3ZS0wMjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx1stNs15XcsmykXpNs96ANH6oArdojt5eh7jC75va31B8OiCfUJZ59R/
7B514arU3x0M/6w07UDyZqrwM5QaUwriZTdVYpFXsFeB2hOQLty7w8N7CCsBXIZu
he8zEYi5uvqR3NsujgukI4IA59X459HpvJuRFI8clWjW7oijsdRZif7sg5WJqn38
7DZ0EwHKm1HztVzakmd9GXoHQT9OQUldzAmJv+4lq98BHG4n1x7c2p004hS2bO6Y
XymciirVyI5FaYTgU+3iy8RxPaePkPlEfbPhYUSJaiXSbKgdC7n7newkWbIKo1Pz
LfHj8g/NoQhpNZryVGdUn3FfXWeQHwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFObs
YTDfUX2NOhoTVYQIyzotbFowMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQTE5MTMwQURGRUIxMUVGQTdFMTU3QTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmtYIMA0GCSqGSIb3DQEB
CwUAA4IBAQBv3KwvKmDQ6fOyemIXMLf8LupZv5150PoVdqo2Zb0N3bYUhrwSaJM1
bO27C0fY2mwlraKOtVJ9I1Polt5jZFevbvfhwqWLne89TjeabcTSYAyV2cr/tUXP
yOzr03lF3x8nw8ZYtErnZ1dW2BVYVKgc0hRSMd+l1KrbDBsR9yGdNusWZBHwBAQt
Lf5V58bAVPZG/v04XrSupOAmTkMcbDBgDT21mLNgSRReCBj1Pi8o0j4RpgFHVryy
RZ6JgUKbNM8ImPKFSmeU4DoBLjCfgCCsHrNMUxGhwOEKUODAGzdX6HUpBw1rQZa0
TYbxejCscpfA2nd+huJQea4mft/UwsCa
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:38:38 2025 by rpki-client