Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82C36296B6C811EFB738499D762E951A.roa
File: 82C36296B6C811EFB738499D762E951A.roa (raw, json)
Hash identifier: LNLmoL5wWBfzPxOljbX23jqakWkz7TqgmdhH0DxjfuE=
Subject key identifier: 89:88:62:54:56:73:17:B6:EF:F1:F1:5E:89:3F:A2:C1:AA:BB:5A:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011A1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82C36296B6C811EFB738499D762E951A.roa
Signing time: Tue 10 Dec 2024 07:29:38 +0000
ROA not before: Tue 10 Dec 2024 07:29:34 +0000
ROA not after: Tue 09 Dec 2025 07:29:34 +0000
asID: 214449
IP address blocks: 154.209.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72220 (0x11a1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 10 07:29:34 2024 GMT
Not After : Dec 9 07:29:34 2025 GMT
Subject: CN=6757ede1-659e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:da:35:a5:97:56:06:ea:cd:11:04:92:72:
1e:f6:5c:42:c8:39:a1:c7:a0:09:01:27:2c:fa:29:
8e:1d:86:92:08:68:ec:e2:92:29:d4:98:b6:51:41:
65:44:7f:2e:34:b0:45:47:ad:d3:05:25:d3:9e:b9:
48:a3:35:3d:d5:87:79:5e:a4:8e:9b:a5:4b:e5:61:
d6:cc:e0:cc:0e:61:f5:47:de:a3:58:b1:62:c1:af:
31:c3:b7:fc:69:db:36:88:26:56:02:08:55:d4:af:
80:75:a6:a4:c8:7b:2e:e7:9c:20:58:cb:6d:b8:ea:
ec:33:20:dd:8c:56:ef:d3:f8:c3:6b:e5:4f:c5:57:
91:e4:d7:e5:8e:98:90:fe:75:5f:09:20:c5:72:57:
83:9f:7c:cb:13:03:fa:86:b4:d1:ea:f6:53:1a:a4:
3a:ae:51:29:28:96:ce:67:ac:80:37:7a:7a:37:49:
fd:1b:ab:ed:e5:6a:40:0b:52:e6:cf:02:9c:cc:57:
cf:96:0a:25:08:73:50:b3:c2:68:c9:72:2c:c6:8f:
0f:ce:0a:b9:74:58:ff:b1:8b:31:c1:34:56:e7:65:
b3:19:ba:c8:36:ec:89:ca:c3:56:74:4d:0d:81:0d:
c8:91:08:1d:81:b7:c5:0f:ee:ea:ac:0e:42:4a:47:
50:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:88:62:54:56:73:17:B6:EF:F1:F1:5E:89:3F:A2:C1:AA:BB:5A:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82C36296B6C811EFB738499D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.134.0/24
Signature Algorithm: sha256WithRSAEncryption
21:96:57:7d:25:c4:11:e1:b8:6a:ab:f7:00:fd:69:f5:06:ac:
07:64:7b:bb:8e:a0:a4:3b:56:77:9b:34:cd:12:9a:b3:f4:78:
ef:c0:5e:31:74:08:c1:50:36:4d:d4:46:3c:e1:c2:86:c0:fb:
a3:49:90:76:99:b1:fa:41:7e:e7:0f:5b:33:73:50:9c:0d:d6:
bd:c2:5d:57:56:56:1e:a7:5c:7c:e8:6f:f9:97:3e:cf:e5:77:
fe:42:5e:2f:a4:1d:bf:9b:4a:bf:0e:59:3b:ba:fd:71:ba:f0:
14:b3:2c:5c:31:89:3c:b6:d0:1d:f5:2b:d9:6d:46:de:a5:b7:
b5:ab:3c:65:15:1e:49:4b:a0:b9:c5:42:50:dc:b7:55:ac:76:
41:87:ae:04:97:1c:68:bb:1a:db:93:0a:24:67:6f:a9:5f:5e:
97:6f:4a:93:a1:ff:20:d1:5d:80:4b:10:8c:86:c3:f8:b1:e1:
24:d0:fd:18:25:e4:12:a1:bf:87:cc:b9:e3:71:61:f2:8a:af:
82:c1:50:a0:5b:3d:41:5b:ce:b5:3a:74:9d:1a:76:d4:bf:18:
61:26:5f:9e:86:51:18:54:1f:38:02:a9:12:60:38:81:88:e6:
fe:8c:28:97:bd:24:ef:ac:e5:74:b9:c2:56:74:df:e3:d7:aa:
0a:2f:6d:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARocMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjEwMDcyOTM0WhcNMjUxMjA5MDcyOTM0WjAYMRYw
FAYDVQQDEw02NzU3ZWRlMS02NTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs7HaNaWXVgbqzREEknIe9lxCyDmhx6AJAScs+imOHYaSCGjs4pIp1Ji2
UUFlRH8uNLBFR63TBSXTnrlIozU91Yd5XqSOm6VL5WHWzODMDmH1R96jWLFiwa8x
w7f8ads2iCZWAghV1K+AdaakyHsu55wgWMttuOrsMyDdjFbv0/jDa+VPxVeR5Nfl
jpiQ/nVfCSDFcleDn3zLEwP6hrTR6vZTGqQ6rlEpKJbOZ6yAN3p6N0n9G6vt5WpA
C1LmzwKczFfPlgolCHNQs8JoyXIsxo8Pzgq5dFj/sYsxwTRW52WzGbrINuyJysNW
dE0NgQ3IkQgdgbfFD+7qrA5CSkdQLQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFImI
YlRWcxe27/HxXok/osGqu1oNMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MkMzNjI5NkI2QzgxMUVGQjczODQ5OUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtGGMA0GCSqGSIb3DQEB
CwUAA4IBAQAhlld9JcQR4bhqq/cA/Wn1BqwHZHu7jqCkO1Z3mzTNEpqz9HjvwF4x
dAjBUDZN1EY84cKGwPujSZB2mbH6QX7nD1szc1CcDda9wl1XVlYep1x86G/5lz7P
5Xf+Ql4vpB2/m0q/Dlk7uv1xuvAUsyxcMYk8ttAd9SvZbUbepbe1qzxlFR5JS6C5
xUJQ3LdVrHZBh64ElxxouxrbkwokZ2+pX16Xb0qTof8g0V2ASxCMhsP4seEk0P0Y
JeQSob+HzLnjcWHyiq+CwVCgWz1BW861OnSdGnbUvxhhJl+ehlEYVB84AqkSYDiB
iOb+jCiXvSTvrOV0ucJWdN/j16oKL23P
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:27:47 2025 by rpki-client