Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E3A0CB2F61811EF97069177762E951A.roa
File: 8E3A0CB2F61811EF97069177762E951A.roa (raw, json)
Hash identifier: bBR894v6Hnv96GW9fLGplQabmYMN2o6r8v5jePTBeoc=
Subject key identifier: 4D:90:51:16:4B:86:A5:1A:DB:29:5C:49:8B:7E:C3:A4:18:BA:11:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E3A0CB2F61811EF97069177762E951A.roa
Signing time: Fri 28 Feb 2025 21:11:20 +0000
ROA not before: Fri 28 Feb 2025 21:11:16 +0000
ROA not after: Sun 13 Apr 2025 21:11:16 +0000
asID: 138915
IP address blocks: 154.206.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93223 (0x16c27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 21:11:16 2025 GMT
Not After : Apr 13 21:11:16 2025 GMT
Subject: CN=67c22678-6d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1c:f3:1c:ab:06:9a:ae:f3:70:91:ad:c0:a4:
82:02:8d:6e:85:a6:d0:fe:25:ca:d6:66:28:7a:c8:
8f:42:4c:a4:3b:27:85:48:ba:e8:7c:5a:d2:21:2f:
58:8b:81:4b:2d:0c:b1:f8:c7:08:3c:f7:36:fc:c6:
85:81:0b:00:2a:33:af:d5:fd:a3:8e:ca:4a:9c:f6:
a5:97:bd:52:52:b5:d4:22:58:dd:77:7d:53:a0:d9:
1e:53:c8:9a:92:15:59:75:7e:47:03:15:43:9c:a3:
a3:ff:0d:a9:54:3e:e5:4f:cb:2b:3b:f7:a6:15:0f:
0f:7f:dc:af:9e:b0:da:5b:8c:b5:89:94:48:a8:24:
ca:57:74:30:db:57:2d:5d:d7:d6:a2:87:e3:27:c8:
ba:26:8f:bd:4a:03:ff:0a:e6:89:0a:25:51:93:b8:
59:d8:15:dc:76:0d:1e:3c:61:09:a6:70:8e:c1:6a:
02:85:e4:a7:19:b6:4e:34:98:b4:9c:0b:1b:5c:72:
1a:b7:12:81:0d:d8:79:b7:f9:bd:99:02:c0:86:74:
52:4d:02:31:3a:9b:35:c8:38:de:67:4a:be:1a:d0:
06:ff:a4:be:c5:bd:f1:a5:75:7d:26:13:ba:59:3b:
4a:eb:87:20:06:69:d2:78:e3:a4:bf:fa:9c:b8:38:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:90:51:16:4B:86:A5:1A:DB:29:5C:49:8B:7E:C3:A4:18:BA:11:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E3A0CB2F61811EF97069177762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.106.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:e8:3c:39:fc:73:2e:05:42:e2:fb:05:90:a4:73:b4:ff:48:
68:2c:84:fa:21:62:81:c0:80:ea:db:87:9f:a5:ed:80:e7:57:
f2:16:90:6a:10:4f:4f:21:0f:3d:57:8d:33:82:c4:4d:90:c7:
f5:f0:9d:91:ff:54:41:b6:a6:fb:95:ed:91:dc:e8:0f:48:69:
58:ba:28:9f:f9:4e:fe:08:d5:94:40:c0:1f:af:ab:3c:48:65:
bf:d4:11:78:be:a5:9e:8c:3d:a2:74:0c:dd:c1:e8:3c:30:d5:
5e:a8:3c:2a:63:d1:58:92:8a:75:a4:60:b7:4c:5a:c2:ce:d1:
c6:fd:58:81:8e:43:62:7e:1a:52:68:50:89:dd:54:d5:87:8a:
bd:2e:a4:97:3e:3b:b0:3d:0f:18:b4:ee:ad:62:b6:c3:be:9e:
9a:fd:cb:39:2b:b9:53:4c:11:45:25:b7:30:dd:a1:28:6e:2c:
49:91:80:3b:18:14:26:4a:b6:50:cb:f0:5d:4a:55:40:aa:23:
20:86:f3:5b:50:27:6f:09:87:d0:d0:e8:ff:dc:ea:a9:e2:97:
d4:f3:1d:5e:f1:1a:4f:81:16:3e:4c:dc:ee:88:6d:7e:ad:16:
80:a7:2a:40:42:48:40:8e:11:b8:16:48:8d:35:9f:b4:1a:a1:
28:b3:3a:dc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWwnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MjExMTE2WhcNMjUwNDEzMjExMTE2WjAYMRYw
FAYDVQQDEw02N2MyMjY3OC02ZDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAkxzzHKsGmq7zcJGtwKSCAo1uhabQ/iXK1mYoesiPQkykOyeFSLrofFrS
IS9Yi4FLLQyx+McIPPc2/MaFgQsAKjOv1f2jjspKnPall71SUrXUIljdd31ToNke
U8iakhVZdX5HAxVDnKOj/w2pVD7lT8srO/emFQ8Pf9yvnrDaW4y1iZRIqCTKV3Qw
21ctXdfWoofjJ8i6Jo+9SgP/CuaJCiVRk7hZ2BXcdg0ePGEJpnCOwWoCheSnGbZO
NJi0nAsbXHIatxKBDdh5t/m9mQLAhnRSTQIxOps1yDjeZ0q+GtAG/6S+xb3xpXV9
JhO6WTtK64cgBmnSeOOkv/qcuDjErwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE2Q
URZLhqUa2ylcSYt+w6QYuhF3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RTNBMENCMkY2MTgxMUVGOTcwNjkxNzc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms5qMA0GCSqGSIb3DQEB
CwUAA4IBAQAu6Dw5/HMuBULi+wWQpHO0/0hoLIT6IWKBwIDq24efpe2A51fyFpBq
EE9PIQ89V40zgsRNkMf18J2R/1RBtqb7le2R3OgPSGlYuiif+U7+CNWUQMAfr6s8
SGW/1BF4vqWejD2idAzdweg8MNVeqDwqY9FYkop1pGC3TFrCztHG/ViBjkNifhpS
aFCJ3VTVh4q9LqSXPjuwPQ8YtO6tYrbDvp6a/cs5K7lTTBFFJbcw3aEobixJkYA7
GBQmSrZQy/BdSlVAqiMghvNbUCdvCYfQ0Oj/3Oqp4pfU8x1e8RpPgRY+TNzuiG1+
rRaApypAQkhAjhG4FkiNNZ+0GqEoszrc
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:06 2025 by rpki-client