Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/816994DCF61111EFA8E02849762E951A.roa
File: 816994DCF61111EFA8E02849762E951A.roa (raw, json)
Hash identifier: vHmTzM6Mc1QLYpPLuDgCEvUvoXayrovff4Z1pqzvfBM=
Subject key identifier: 56:77:20:7C:C9:8E:DB:8A:F1:72:D0:45:24:82:6E:E5:9D:82:D6:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016BF3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/816994DCF61111EFA8E02849762E951A.roa
Signing time: Fri 28 Feb 2025 20:20:52 +0000
ROA not before: Fri 28 Feb 2025 20:20:48 +0000
ROA not after: Sun 13 Apr 2025 20:20:48 +0000
asID: 138915
IP address blocks: 154.206.84.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93171 (0x16bf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 20:20:48 2025 GMT
Not After : Apr 13 20:20:48 2025 GMT
Subject: CN=67c21aa4-c69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:39:99:15:85:a7:33:74:70:05:70:17:97:
f1:a8:da:3b:f8:cf:28:ff:8e:c7:6d:28:87:52:72:
1d:4f:de:bc:be:28:15:ff:c0:f1:ef:38:44:ae:3d:
4c:c9:70:2c:3b:f7:cb:08:a4:97:4b:57:be:da:c1:
82:36:02:b1:95:50:0a:11:c5:de:ba:47:32:ee:b9:
58:2b:68:82:a2:d5:df:1b:31:4e:d4:f8:5c:c9:f9:
a2:18:fb:03:15:c9:cd:2e:ab:24:1d:6e:5a:fc:7a:
79:b5:da:11:4c:8d:d6:94:5c:9d:bb:5a:a7:87:09:
22:de:16:9e:da:69:da:5c:75:5c:00:31:8b:02:e3:
73:2d:f4:02:37:86:6e:01:79:ec:11:5e:82:54:7e:
96:42:5e:56:5b:f7:cf:95:f1:4a:7a:f3:15:7b:ad:
32:33:26:a7:0a:3d:a9:ec:f6:64:a5:83:fe:b0:5a:
72:46:66:a4:45:b3:cc:8e:fb:38:63:31:02:95:b2:
a5:cf:19:2c:20:e3:1a:0d:11:df:fb:a7:27:1b:ff:
ee:38:2a:a3:c8:92:e0:93:16:70:d1:b4:aa:50:d2:
b5:84:7c:c2:fa:24:a9:a0:06:11:8a:83:58:79:04:
f9:f1:df:c0:b2:3b:8c:85:35:5b:9d:4b:9e:d5:ff:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:77:20:7C:C9:8E:DB:8A:F1:72:D0:45:24:82:6E:E5:9D:82:D6:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/816994DCF61111EFA8E02849762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.84.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:7a:b2:be:f4:3a:fa:4e:a7:e0:2b:e7:13:fd:ab:a7:ce:a0:
57:cb:e1:cb:6a:08:84:d2:2e:8c:74:ef:b1:61:7c:68:e5:c1:
d1:a1:d2:fe:e5:90:e0:e5:4e:b1:1e:6d:5a:77:4f:61:39:5d:
04:24:29:d1:5c:9f:15:0a:a0:8c:e6:0e:7c:4f:c6:aa:0e:b9:
ff:1c:e9:b5:10:4e:84:f0:a8:d2:cf:db:e4:05:09:9f:26:54:
c0:f4:c5:d5:e1:c6:58:34:a3:4e:7e:d3:99:0a:18:d1:24:bb:
e4:fd:c5:38:db:e7:d6:51:dd:ef:70:ae:2b:89:7f:02:e2:99:
df:62:af:2d:6c:2c:8b:60:6b:15:39:66:e7:fa:d0:02:17:53:
87:26:3b:62:eb:27:81:53:98:95:71:1c:9b:13:5a:ef:80:91:
c1:d5:24:35:69:f0:d4:c7:32:5c:28:ad:a5:64:63:4d:f6:5b:
64:ce:0b:2f:bb:d3:c2:6b:d7:77:7f:5f:24:4f:57:b5:97:05:
d8:0a:c6:66:02:35:a9:d7:3e:5e:dd:28:f7:b9:ad:88:3a:c0:
8e:80:af:f0:8f:96:3d:71:ed:35:1e:b0:03:99:da:27:7c:fc:
aa:eb:0d:2d:74:76:1d:3e:d6:96:e7:cd:f5:dc:d6:79:b0:b3:
db:6d:49:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWvzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MjAyMDQ4WhcNMjUwNDEzMjAyMDQ4WjAYMRYw
FAYDVQQDEw02N2MyMWFhNC1jNjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoPs5mRWFpzN0cAVwF5fxqNo7+M8o/47HbSiHUnIdT968vigV/8Dx7zhE
rj1MyXAsO/fLCKSXS1e+2sGCNgKxlVAKEcXeukcy7rlYK2iCotXfGzFO1Phcyfmi
GPsDFcnNLqskHW5a/Hp5tdoRTI3WlFydu1qnhwki3hae2mnaXHVcADGLAuNzLfQC
N4ZuAXnsEV6CVH6WQl5WW/fPlfFKevMVe60yMyanCj2p7PZkpYP+sFpyRmakRbPM
jvs4YzEClbKlzxksIOMaDRHf+6cnG//uOCqjyJLgkxZw0bSqUNK1hHzC+iSpoAYR
ioNYeQT58d/AsjuMhTVbnUue1f8mawIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFZ3
IHzJjtuK8XLQRSSCbuWdgtZNMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MTY5OTREQ0Y2MTExMUVGQThFMDI4NDk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms5UMA0GCSqGSIb3DQEB
CwUAA4IBAQCrerK+9Dr6TqfgK+cT/aunzqBXy+HLagiE0i6MdO+xYXxo5cHRodL+
5ZDg5U6xHm1ad09hOV0EJCnRXJ8VCqCM5g58T8aqDrn/HOm1EE6E8KjSz9vkBQmf
JlTA9MXV4cZYNKNOftOZChjRJLvk/cU42+fWUd3vcK4riX8C4pnfYq8tbCyLYGsV
OWbn+tACF1OHJjti6yeBU5iVcRybE1rvgJHB1SQ1afDUxzJcKK2lZGNN9ltkzgsv
u9PCa9d3f18kT1e1lwXYCsZmAjWp1z5e3Sj3ua2IOsCOgK/wj5Y9ce01HrADmdon
fPyq6w0tdHYdPtaW58313NZ5sLPbbUkv
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:06 2025 by rpki-client