Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FE08380CDB811EF8E402F49762E951A.roa
File: 3FE08380CDB811EF8E402F49762E951A.roa (raw, json)
Hash identifier: NrWANx1WHkUNPKFJoGm0U4+n/lwoa4Emuf087iEwAZM=
Subject key identifier: A8:D6:11:F5:0F:EE:FB:E2:F4:38:E6:1A:E0:D3:05:2F:70:73:16:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0136C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FE08380CDB811EF8E402F49762E951A.roa
Signing time: Wed 08 Jan 2025 12:01:10 +0000
ROA not before: Wed 08 Jan 2025 12:01:01 +0000
ROA not after: Tue 16 Dec 2025 12:01:01 +0000
asID: 984
IP address blocks: 154.200.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79560 (0x136c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 12:01:01 2025 GMT
Not After : Dec 16 12:01:01 2025 GMT
Subject: CN=677e6906-955d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b1:55:c6:37:d0:bf:bf:fd:75:61:56:36:26:
14:e1:32:23:67:2d:43:fe:53:35:12:13:53:95:8e:
65:10:3d:7e:3b:32:1b:2c:f5:89:ce:ea:f6:52:f0:
6a:7d:d8:bf:00:30:76:de:04:d1:e4:56:1f:e8:11:
96:c3:53:91:7a:7a:5d:37:7b:87:4e:73:03:b8:51:
6d:3f:e2:88:1e:79:f8:fc:0e:28:c5:e5:cf:cd:31:
c5:5d:26:3b:0a:0e:b9:ec:1a:d6:29:4a:95:5c:eb:
60:f6:44:aa:9e:3a:e7:4e:a0:bb:97:45:31:51:da:
9c:92:ce:e2:5f:05:9a:3f:df:0f:22:65:e5:e4:bc:
1c:3f:75:b9:d9:0f:ba:68:37:3b:47:e3:3a:52:61:
b0:1f:d2:09:15:d1:e0:50:d6:82:90:f3:8a:7a:75:
a3:da:fa:d5:ec:d6:91:33:07:56:17:d9:cd:13:a8:
92:6b:bb:9d:12:d7:bd:fb:df:3e:6d:38:e2:c2:c5:
62:ed:b8:ee:cf:db:7e:cb:cd:89:dc:86:32:e4:21:
a4:05:b4:3b:7f:40:e1:e6:8d:f4:ec:41:e2:cd:4f:
22:d9:04:6b:99:b7:51:84:a3:ae:6d:97:2a:db:03:
78:1d:1a:7b:8a:a9:f0:5f:38:da:2d:d9:45:8f:27:
fc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D6:11:F5:0F:EE:FB:E2:F4:38:E6:1A:E0:D3:05:2F:70:73:16:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FE08380CDB811EF8E402F49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.173.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ef:05:25:17:ee:52:14:1d:1f:b6:6c:97:26:36:72:65:3a:
50:de:83:a2:a9:cc:2f:58:5a:ea:0e:93:80:73:06:86:6b:5e:
e5:05:4f:09:f7:50:a4:5c:e5:ff:c3:59:6c:78:fd:9f:7c:be:
cc:3a:14:45:a2:08:25:f4:98:d8:bb:49:da:fc:b3:e2:21:1f:
02:7b:6a:45:81:c3:c9:c1:80:d7:f9:c4:e5:ae:8d:34:b1:0e:
2b:5d:b1:ec:df:f5:9e:c7:84:ef:ea:18:7f:3d:7b:12:d1:87:
18:a5:ce:5d:49:2a:b5:d4:b0:7c:0a:dd:2f:bf:89:6e:38:ac:
06:2b:cd:33:52:d8:2a:3f:75:2c:8b:a3:77:44:1c:ef:7c:b7:
64:e7:0a:d7:ca:64:2b:41:0e:9c:17:41:4b:f5:91:78:28:16:
a2:90:a2:8a:89:7d:22:70:4b:e4:e2:4c:66:2b:9a:72:e6:ef:
2d:35:87:9d:80:45:6b:b0:8a:30:aa:07:6a:5f:10:72:86:a4:
0e:5e:35:9e:56:c4:86:fb:58:15:13:23:28:a7:79:cd:6f:77:
ca:ca:a0:ba:12:fe:5a:73:66:24:d2:ec:86:0d:bf:5e:77:a2:
e1:b5:0b:45:5e:08:d0:79:d0:f6:b0:49:e7:5d:bc:56:89:5a:
d4:e8:19:99
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATbIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA4MTIwMTAxWhcNMjUxMjE2MTIwMTAxWjAYMRYw
FAYDVQQDEw02NzdlNjkwNi05NTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0LFVxjfQv7/9dWFWNiYU4TIjZy1D/lM1EhNTlY5lED1+OzIbLPWJzur2
UvBqfdi/ADB23gTR5FYf6BGWw1ORenpdN3uHTnMDuFFtP+KIHnn4/A4oxeXPzTHF
XSY7Cg657BrWKUqVXOtg9kSqnjrnTqC7l0UxUdqcks7iXwWaP98PImXl5LwcP3W5
2Q+6aDc7R+M6UmGwH9IJFdHgUNaCkPOKenWj2vrV7NaRMwdWF9nNE6iSa7udEte9
+98+bTjiwsVi7bjuz9t+y82J3IYy5CGkBbQ7f0Dh5o307EHizU8i2QRrmbdRhKOu
bZcq2wN4HRp7iqnwXzjaLdlFjyf8yQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKjW
EfUP7vvi9DjmGuDTBS9wcxZMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zRkUwODM4MENEQjgxMUVGOEU0MDJGNDk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsitMA0GCSqGSIb3DQEB
CwUAA4IBAQB87wUlF+5SFB0ftmyXJjZyZTpQ3oOiqcwvWFrqDpOAcwaGa17lBU8J
91CkXOX/w1lseP2ffL7MOhRFoggl9JjYu0na/LPiIR8Ce2pFgcPJwYDX+cTlro00
sQ4rXbHs3/Wex4Tv6hh/PXsS0YcYpc5dSSq11LB8Ct0vv4luOKwGK80zUtgqP3Us
i6N3RBzvfLdk5wrXymQrQQ6cF0FL9ZF4KBaikKKKiX0icEvk4kxmK5py5u8tNYed
gEVrsIowqgdqXxByhqQOXjWeVsSG+1gVEyMop3nNb3fKyqC6Ev5ac2Yk0uyGDb9e
d6LhtQtFXgjQedD2sEnnXbxWiVrU6BmZ
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:31:00 2025 by rpki-client