Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B5807C6DAFC11EF89A72866762E951A.roa
File: 6B5807C6DAFC11EF89A72866762E951A.roa (raw, json)
Hash identifier: Ytnchp82CmL41tBReYMGEVrcaSndFR87qjv6n8G6taw=
Subject key identifier: E7:7E:AA:55:DF:EB:6E:F7:19:9E:B2:34:1A:7F:CC:86:6B:1D:C5:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01491B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B5807C6DAFC11EF89A72866762E951A.roa
Signing time: Sat 25 Jan 2025 09:11:54 +0000
ROA not before: Sat 25 Jan 2025 09:11:50 +0000
ROA not after: Sun 30 Mar 2025 09:11:50 +0000
asID: 63139
IP address blocks: 154.94.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84251 (0x1491b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 09:11:50 2025 GMT
Not After : Mar 30 09:11:50 2025 GMT
Subject: CN=6794aada-9623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:33:75:56:1b:a0:9c:b3:c7:12:55:30:89:
63:4c:c5:a5:91:18:2b:2c:a7:66:cd:b3:1e:df:96:
9a:d0:28:03:57:6c:fc:18:d9:1c:74:93:14:46:96:
15:1e:79:c8:c0:2c:2e:9b:e8:02:8e:d9:04:a0:48:
e7:dc:cf:be:e3:d4:ba:2e:2a:ed:98:1c:a7:6e:f7:
c8:02:9c:7b:6a:ce:9f:05:aa:49:8f:e7:38:f3:81:
0f:cf:86:8b:d9:39:fc:a0:73:56:cf:c3:9b:3c:8b:
72:91:34:39:48:2f:9c:b6:7a:76:da:f2:29:1e:ff:
ec:54:99:65:e3:de:5a:2c:1f:23:8c:0a:70:f6:19:
44:b4:03:3c:9b:6d:c8:cc:2a:43:38:d5:a3:45:d0:
00:8d:3a:9b:f9:2e:1d:41:ec:39:62:16:8d:cc:df:
84:1e:ef:f8:6a:a3:3f:7f:7c:23:83:c0:62:0c:3f:
62:7c:9a:cf:02:3c:ee:de:44:a2:e6:ad:1b:ec:19:
c1:72:72:36:b9:29:09:14:f9:6a:f1:33:9d:c1:9f:
1c:0d:35:ce:04:2c:75:4f:dc:ad:ad:29:4f:64:73:
4e:e2:6a:b0:d5:45:96:7a:37:00:86:c6:5c:17:84:
79:a6:5a:ca:78:9c:79:c8:3b:b2:56:5f:39:38:d9:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7E:AA:55:DF:EB:6E:F7:19:9E:B2:34:1A:7F:CC:86:6B:1D:C5:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B5807C6DAFC11EF89A72866762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:01:6e:98:25:4b:8b:5c:89:d5:07:2b:5c:57:cc:fe:3b:a3:
b9:ac:cd:76:45:76:db:f6:0b:90:46:65:5b:79:c1:30:67:2d:
15:0e:56:6e:22:7f:d0:b6:e5:93:d5:5c:34:e2:90:35:7f:55:
b6:17:90:bb:23:5a:72:a7:c1:4d:f1:ae:bd:0c:4e:0d:84:b3:
fc:58:08:46:8d:32:83:ba:ac:2d:f3:7f:53:46:e8:c6:09:50:
bf:ec:8f:ce:6a:1c:3f:53:bf:73:1b:d8:09:28:5a:fe:d2:65:
6d:b9:8c:34:29:54:5c:d7:c9:db:c8:c1:21:db:44:46:d9:e2:
b9:06:a7:a6:12:f0:f2:7e:fb:5e:d4:1a:34:17:cc:1b:af:27:
01:e0:97:d1:6f:aa:d3:9d:a8:66:b1:83:cf:14:80:19:31:a0:
fd:41:ea:82:53:f6:d5:ff:24:0d:53:b7:b4:37:d3:38:16:86:
c2:ae:a0:de:96:a1:a6:1a:a9:b1:2c:0a:c4:49:a3:8a:23:14:
49:c9:3f:6a:df:b5:ce:d7:76:df:99:4d:2a:78:bd:46:bc:62:
a2:33:08:06:80:48:cd:b9:3e:bb:d0:98:85:79:81:0f:93:26:
5e:bd:f4:e9:75:36:fb:27:26:5b:c4:54:ba:46:69:41:7b:5e:
ac:bd:31:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUkbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI1MDkxMTUwWhcNMjUwMzMwMDkxMTUwWjAYMRYw
FAYDVQQDEw02Nzk0YWFkYS05NjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2AUzdVYboJyzxxJVMIljTMWlkRgrLKdmzbMe35aa0CgDV2z8GNkcdJMU
RpYVHnnIwCwum+gCjtkEoEjn3M++49S6LirtmBynbvfIApx7as6fBapJj+c484EP
z4aL2Tn8oHNWz8ObPItykTQ5SC+ctnp22vIpHv/sVJll495aLB8jjApw9hlEtAM8
m23IzCpDONWjRdAAjTqb+S4dQew5YhaNzN+EHu/4aqM/f3wjg8BiDD9ifJrPAjzu
3kSi5q0b7BnBcnI2uSkJFPlq8TOdwZ8cDTXOBCx1T9ytrSlPZHNO4mqw1UWWejcA
hsZcF4R5plrKeJx5yDuyVl85ONlj+QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOd+
qlXf6273GZ6yNBp/zIZrHcXKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QjU4MDdDNkRBRkMxMUVGODlBNzI4NjY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml54MA0GCSqGSIb3DQEB
CwUAA4IBAQALAW6YJUuLXInVBytcV8z+O6O5rM12RXbb9guQRmVbecEwZy0VDlZu
In/QtuWT1Vw04pA1f1W2F5C7I1pyp8FN8a69DE4NhLP8WAhGjTKDuqwt839TRujG
CVC/7I/Oahw/U79zG9gJKFr+0mVtuYw0KVRc18nbyMEh20RG2eK5BqemEvDyfvte
1Bo0F8wbrycB4JfRb6rTnahmsYPPFIAZMaD9QeqCU/bV/yQNU7e0N9M4FobCrqDe
lqGmGqmxLArESaOKIxRJyT9q37XO13bfmU0qeL1GvGKiMwgGgEjNuT670JiFeYEP
kyZevfTpdTb7JyZbxFS6RmlBe16svTGV
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:01:45 2025 by rpki-client