Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3D11BE4E2D811EF9A2E1265762E951A.roa
File: B3D11BE4E2D811EF9A2E1265762E951A.roa (raw, json)
Hash identifier: p9TsKZk1mLfkxj72lzacH23AtZDuT0/w/WmVViWQSQM=
Subject key identifier: C9:BA:FA:59:EF:0D:7C:72:CF:A5:20:74:C2:0C:5D:DA:5B:DF:29:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3D11BE4E2D811EF9A2E1265762E951A.roa
Signing time: Tue 04 Feb 2025 09:16:23 +0000
ROA not before: Tue 04 Feb 2025 09:16:19 +0000
ROA not after: Wed 30 Apr 2025 09:16:19 +0000
asID: 18229
IP address blocks: 154.210.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86220 (0x150cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 09:16:19 2025 GMT
Not After : Apr 30 09:16:19 2025 GMT
Subject: CN=67a1dae7-5f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:fe:b6:76:8c:d1:2e:e3:18:81:b2:e3:81:
bb:62:5a:b0:63:7e:8d:40:8d:8d:ef:ba:d9:f6:2d:
ca:1e:ff:99:3e:3f:32:ff:be:ad:13:61:39:0d:e9:
8f:3a:a3:47:aa:70:3a:30:e7:14:d8:d2:14:92:7e:
3b:39:6c:d2:cd:92:65:5a:f8:6d:87:ee:91:d7:9c:
ea:cf:72:bb:ec:30:cb:80:cc:7f:de:b3:5d:cf:ee:
54:45:db:1e:41:57:7d:c2:8f:c6:30:dd:fa:6d:7b:
a3:70:80:89:1a:57:84:38:ac:02:a5:03:7c:1a:8c:
47:89:1d:8b:06:4a:28:d2:8f:5f:17:18:24:d7:3e:
3a:8a:e8:fa:a7:f3:eb:ef:6c:6b:f2:0c:a8:1b:5d:
83:c3:51:17:98:de:5b:e7:40:0c:24:0d:9a:82:99:
1f:91:7f:8c:37:7f:19:be:8c:28:aa:de:56:ef:4e:
20:11:f4:19:03:29:3a:65:28:f4:67:4b:8d:ca:38:
37:98:7e:a0:05:c3:0a:38:d4:22:96:b0:99:b3:85:
b5:60:58:2d:a9:19:72:f1:7d:ea:68:84:21:e7:71:
30:20:47:0c:6d:11:99:3e:b4:ee:c1:43:77:4f:1b:
08:aa:6f:c6:b1:ae:d9:54:ba:11:49:f9:73:27:a4:
b6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BA:FA:59:EF:0D:7C:72:CF:A5:20:74:C2:0C:5D:DA:5B:DF:29:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3D11BE4E2D811EF9A2E1265762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.216.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:8f:2f:22:24:a5:43:59:85:b2:e6:a4:00:7d:b8:45:9c:d2:
fb:66:ea:3d:4c:13:5e:22:c4:48:89:f2:4c:0a:87:0d:e8:d6:
d9:cd:aa:66:a7:4b:68:48:51:8f:48:34:c7:ce:9f:ce:d9:d8:
a2:e9:32:f3:fa:68:26:ed:d8:c2:f9:66:bd:7d:5e:88:7f:97:
f3:b2:28:c1:cd:7d:e0:33:8c:4d:71:fc:6c:1a:fb:5b:13:15:
4c:48:c6:ff:96:4c:f6:9b:2e:78:cb:22:7b:94:b4:46:3d:a8:
ba:91:7b:b7:cb:d6:0d:ba:56:56:a8:34:05:5f:78:08:bc:c0:
40:b1:e0:8d:10:0e:5b:61:29:22:8d:e5:c7:03:31:e4:39:97:
85:e7:a3:ed:d1:5b:6b:47:08:b6:1b:86:3d:91:76:48:10:b3:
a5:1c:c2:d0:08:cb:ed:02:9b:c2:d0:3c:14:01:59:fd:f5:4c:
20:82:fc:ae:99:90:20:98:5b:ec:f5:72:4d:45:50:45:f5:99:
9a:26:5f:25:90:a1:45:fb:e2:8c:df:8b:ea:55:f6:0e:4f:19:
e1:79:16:c2:a0:f8:36:44:9e:4b:c1:ea:73:20:8e:6d:b4:dd:
8f:5a:92:75:d6:3a:5d:b7:71:cf:7b:15:a8:bf:a7:31:ff:71:
5f:c4:89:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVDMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjA0MDkxNjE5WhcNMjUwNDMwMDkxNjE5WjAYMRYw
FAYDVQQDEw02N2ExZGFlNy01ZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0DT+tnaM0S7jGIGy44G7YlqwY36NQI2N77rZ9i3KHv+ZPj8y/76tE2E5
DemPOqNHqnA6MOcU2NIUkn47OWzSzZJlWvhth+6R15zqz3K77DDLgMx/3rNdz+5U
RdseQVd9wo/GMN36bXujcICJGleEOKwCpQN8GoxHiR2LBkoo0o9fFxgk1z46iuj6
p/Pr72xr8gyoG12Dw1EXmN5b50AMJA2agpkfkX+MN38Zvowoqt5W704gEfQZAyk6
ZSj0Z0uNyjg3mH6gBcMKONQilrCZs4W1YFgtqRly8X3qaIQh53EwIEcMbRGZPrTu
wUN3TxsIqm/Gsa7ZVLoRSflzJ6S2IQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMm6
+lnvDXxyz6UgdMIMXdpb3ynTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CM0QxMUJFNEUyRDgxMUVGOUEyRTEyNjU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtLYMA0GCSqGSIb3DQEB
CwUAA4IBAQDKjy8iJKVDWYWy5qQAfbhFnNL7Zuo9TBNeIsRIifJMCocN6NbZzapm
p0toSFGPSDTHzp/O2dii6TLz+mgm7djC+Wa9fV6If5fzsijBzX3gM4xNcfxsGvtb
ExVMSMb/lkz2my54yyJ7lLRGPai6kXu3y9YNulZWqDQFX3gIvMBAseCNEA5bYSki
jeXHAzHkOZeF56Pt0VtrRwi2G4Y9kXZIELOlHMLQCMvtApvC0DwUAVn99Uwggvyu
mZAgmFvs9XJNRVBF9ZmaJl8lkKFF++KM34vqVfYOTxnheRbCoPg2RJ5LwepzII5t
tN2PWpJ11jpdt3HPexWov6cx/3FfxIkz
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:55:15 2025 by rpki-client