Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79681062E2D711EFA520CB5D762E951A.roa
File: 79681062E2D711EFA520CB5D762E951A.roa (raw, json)
Hash identifier: U1345pliST90ygXj+q6ItVyXfld3v0PyedQrWQL6+gc=
Subject key identifier: 61:FC:4F:A7:C3:FA:5C:58:39:1B:BD:5B:E1:6F:D2:B8:C6:03:4E:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79681062E2D711EFA520CB5D762E951A.roa
Signing time: Tue 04 Feb 2025 09:07:36 +0000
ROA not before: Tue 04 Feb 2025 09:07:32 +0000
ROA not after: Wed 30 Apr 2025 09:07:32 +0000
asID: 18229
IP address blocks: 154.210.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86214 (0x150c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 09:07:32 2025 GMT
Not After : Apr 30 09:07:32 2025 GMT
Subject: CN=67a1d8d7-89e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:9a:9a:d2:8e:7c:ce:6a:0e:25:23:2d:83:
1b:15:83:a8:93:b4:53:ee:e5:41:4f:c2:7a:c9:43:
d3:27:ae:ea:b5:7e:6e:bc:f9:9e:30:dc:4a:e4:ef:
ef:20:d3:c8:80:8e:a8:f4:1b:1d:fa:b0:c8:d7:0e:
ed:1b:68:c8:e3:40:dc:fa:79:fa:34:9a:01:ea:de:
18:b4:90:3f:ed:a5:08:47:a0:7e:5b:5f:ad:d8:0a:
1a:0f:91:ec:b9:d7:65:80:eb:61:58:c0:26:fe:01:
f0:56:16:c4:7e:00:34:91:bf:4b:9e:43:f8:cb:93:
16:5e:73:a2:2f:9c:e3:64:21:70:fa:53:de:b8:35:
45:f8:e9:fc:09:d4:4f:cb:31:82:87:f2:9e:d4:c5:
4a:9e:1b:35:b0:b1:9a:ea:26:e2:3c:82:88:75:4b:
9b:ff:1b:de:b6:4d:35:a5:fc:0a:04:ba:63:02:90:
ab:54:b3:8c:2d:e2:b8:48:de:88:46:39:28:7f:67:
94:57:2e:86:be:0a:df:b6:64:f1:c2:de:14:67:f6:
73:54:54:18:7c:c8:7a:64:aa:26:4f:dc:a2:c6:dc:
8d:9f:10:5b:73:ae:a9:d6:4b:a4:56:d7:64:30:1a:
2e:4a:34:fb:8f:a2:ee:7d:c0:6f:59:9d:f9:67:f3:
45:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FC:4F:A7:C3:FA:5C:58:39:1B:BD:5B:E1:6F:D2:B8:C6:03:4E:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79681062E2D711EFA520CB5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.212.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:e1:37:ab:af:b6:5e:4d:9b:68:cc:05:bb:6b:69:6a:48:78:
e0:f3:ec:8f:6b:44:75:ef:a4:f5:f0:7b:80:eb:2e:be:b5:4e:
e0:0b:97:85:f8:0f:8b:b3:4e:53:b5:a5:2e:96:50:f1:68:db:
37:be:d7:50:9a:98:d0:fc:7d:28:f0:37:14:f9:be:6d:0f:5b:
58:7c:7e:af:c2:37:6c:32:5b:3a:12:c8:9b:0d:57:7e:3e:45:
d6:07:ab:c4:3e:78:56:d1:4e:63:e4:3f:5f:a7:0b:ab:22:03:
de:7c:c8:75:3f:84:41:58:d7:ae:62:2e:e7:b4:4f:ff:5a:0b:
8b:fa:ce:15:09:bb:bd:91:12:94:86:41:01:9c:06:fc:84:4d:
8e:9c:e2:e7:cd:5a:9d:22:e2:51:a9:ec:ee:d4:b0:4f:1c:05:
e7:b3:f6:12:33:60:d5:33:57:68:b1:55:d8:06:18:8e:f4:38:
b3:8c:68:4d:5c:bb:47:08:39:fd:66:91:cb:e4:fa:d3:2d:d9:
f1:3a:0c:e7:65:9e:f1:50:c7:71:5d:90:ae:ff:c6:07:bf:1a:
dd:c1:eb:c8:9e:3b:33:38:dd:51:bc:8f:cc:5a:f3:fa:21:e3:
ce:5c:7f:e9:92:15:98:45:33:b7:b7:92:16:99:50:a6:79:62:
70:ce:14:fe
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVDGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjA0MDkwNzMyWhcNMjUwNDMwMDkwNzMyWjAYMRYw
FAYDVQQDEw02N2ExZDhkNy04OWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAysaamtKOfM5qDiUjLYMbFYOok7RT7uVBT8J6yUPTJ67qtX5uvPmeMNxK
5O/vINPIgI6o9Bsd+rDI1w7tG2jI40Dc+nn6NJoB6t4YtJA/7aUIR6B+W1+t2Aoa
D5HsuddlgOthWMAm/gHwVhbEfgA0kb9LnkP4y5MWXnOiL5zjZCFw+lPeuDVF+On8
CdRPyzGCh/Ke1MVKnhs1sLGa6ibiPIKIdUub/xvetk01pfwKBLpjApCrVLOMLeK4
SN6IRjkof2eUVy6GvgrftmTxwt4UZ/ZzVFQYfMh6ZKomT9yixtyNnxBbc66p1kuk
VtdkMBouSjT7j6LufcBvWZ35Z/NFMQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGH8
T6fD+lxYORu9W+Fv0rjGA051MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OTY4MTA2MkUyRDcxMUVGQTUyMENCNUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtLUMA0GCSqGSIb3DQEB
CwUAA4IBAQDU4Terr7ZeTZtozAW7a2lqSHjg8+yPa0R176T18HuA6y6+tU7gC5eF
+A+Ls05TtaUullDxaNs3vtdQmpjQ/H0o8DcU+b5tD1tYfH6vwjdsMls6EsibDVd+
PkXWB6vEPnhW0U5j5D9fpwurIgPefMh1P4RBWNeuYi7ntE//WguL+s4VCbu9kRKU
hkEBnAb8hE2OnOLnzVqdIuJRqezu1LBPHAXns/YSM2DVM1dosVXYBhiO9DizjGhN
XLtHCDn9ZpHL5PrTLdnxOgznZZ7xUMdxXZCu/8YHvxrdwevInjszON1RvI/MWvP6
IePOXH/pkhWYRTO3t5IWmVCmeWJwzhT+
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:55:31 2025 by rpki-client