Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6CBF898DFEA11EFB75E17A3762E951A.roa
File: E6CBF898DFEA11EFB75E17A3762E951A.roa (raw, json)
Hash identifier: Sb5R2Wo7FhXdzkjb69rY/eYvL2NREgXr8FeQC92bXjg=
Subject key identifier: BD:D4:20:C0:37:D5:B9:C7:FF:64:A2:F4:FA:A4:04:F6:C7:92:01:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DF7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6CBF898DFEA11EFB75E17A3762E951A.roa
Signing time: Fri 31 Jan 2025 15:49:06 +0000
ROA not before: Fri 31 Jan 2025 15:49:02 +0000
ROA not after: Sat 03 Jan 2026 15:49:02 +0000
asID: 40065
IP address blocks: 154.212.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85495 (0x14df7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 31 15:49:02 2025 GMT
Not After : Jan 3 15:49:02 2026 GMT
Subject: CN=679cf0f2-0bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:7a:0d:6d:15:ef:db:27:bf:10:a5:cb:35:
1d:b9:7b:78:b2:1d:4f:d0:a5:79:e0:8a:e3:63:bd:
27:18:bf:89:b2:60:bb:87:bb:33:54:79:e9:fa:d1:
fa:09:e9:75:21:e8:eb:7e:b5:f2:66:26:bc:98:13:
ed:07:2c:71:6f:3a:76:77:3f:cd:d5:ac:a9:a6:8f:
6e:2f:ac:37:b1:e9:65:9b:62:91:b5:55:74:4d:12:
c8:b4:02:2b:8c:b3:33:7e:d9:4f:df:92:e8:d1:d9:
68:b4:dc:06:94:12:87:a1:d4:3f:ad:57:44:2c:cf:
03:f5:c3:7d:cb:b4:8f:f3:46:7c:a7:bc:ca:31:99:
f2:c0:4e:d9:36:33:39:53:5f:2f:76:08:3e:eb:65:
46:36:69:ef:a0:e1:71:c9:80:bd:7d:5f:fa:45:41:
3b:8f:bc:e2:9d:7a:38:2b:0c:2d:8b:c8:dc:9d:7e:
b2:d6:dc:f8:0f:d6:2e:fd:1d:83:fd:51:d5:77:57:
78:ca:be:88:2b:0f:2c:75:c7:c2:2a:6d:e0:77:01:
ea:d8:e2:be:12:6e:af:44:8d:67:dc:25:f4:95:95:
2c:e6:89:ea:8a:7d:6d:29:e4:b6:62:fa:3c:12:47:
06:60:e5:21:71:b2:ff:5f:8e:f0:2a:a9:c3:a3:ac:
6a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D4:20:C0:37:D5:B9:C7:FF:64:A2:F4:FA:A4:04:F6:C7:92:01:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6CBF898DFEA11EFB75E17A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.1.0/24
Signature Algorithm: sha256WithRSAEncryption
66:3a:43:7e:bf:6f:d1:ad:d8:6a:12:bf:e5:e5:eb:4c:d9:d2:
9c:17:9e:5a:34:cb:a3:29:04:61:84:e6:43:7a:a3:a5:82:48:
4a:c6:15:74:3c:50:ac:8a:9a:04:50:cd:9b:26:3b:a0:39:f6:
4c:63:05:f9:7e:1c:7b:66:e7:40:6b:e7:ae:33:73:62:18:d6:
31:92:f8:f4:3d:dc:08:3a:68:29:e2:00:54:fd:b6:39:8f:ad:
e6:d2:ba:97:ec:6d:a9:be:cf:56:d2:f5:98:b8:df:c8:87:58:
6d:89:ee:a8:1d:d7:05:7f:e2:95:9f:d2:63:3f:62:ee:f5:f4:
07:da:a1:2c:a6:9b:77:70:04:f0:e3:8d:9d:61:1b:24:8e:3c:
a4:be:38:e7:49:08:d8:15:5c:66:47:b3:63:1d:3b:19:bf:04:
7c:2d:b4:91:b4:04:c0:78:1b:85:ff:29:ae:05:ec:c0:0b:cd:
66:c8:4a:d6:aa:1f:a8:10:f4:1a:38:d8:7f:cb:98:f8:ef:18:
43:d9:b5:1f:f7:25:d6:ec:b0:34:5c:ff:af:4b:48:16:db:44:
58:0f:4e:0f:df:5d:71:af:47:f6:4b:cc:cb:4c:3e:c3:29:00:
12:99:28:5d:68:f0:8d:d9:87:f2:a2:21:3f:df:2c:74:45:8b:
7e:32:80:6b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU33MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTMxMTU0OTAyWhcNMjYwMTAzMTU0OTAyWjAYMRYw
FAYDVQQDEw02NzljZjBmMi0wYmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzEF6DW0V79snvxClyzUduXt4sh1P0KV54IrjY70nGL+JsmC7h7szVHnp
+tH6Cel1IejrfrXyZia8mBPtByxxbzp2dz/N1ayppo9uL6w3sellm2KRtVV0TRLI
tAIrjLMzftlP35Lo0dlotNwGlBKHodQ/rVdELM8D9cN9y7SP80Z8p7zKMZnywE7Z
NjM5U18vdgg+62VGNmnvoOFxyYC9fV/6RUE7j7zinXo4Kwwti8jcnX6y1tz4D9Yu
/R2D/VHVd1d4yr6IKw8sdcfCKm3gdwHq2OK+Em6vRI1n3CX0lZUs5onqin1tKeS2
Yvo8EkcGYOUhcbL/X47wKqnDo6xqDwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL3U
IMA31bnH/2Si9PqkBPbHkgHKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNkNCRjg5OERGRUExMUVGQjc1RTE3QTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtQBMA0GCSqGSIb3DQEB
CwUAA4IBAQBmOkN+v2/RrdhqEr/l5etM2dKcF55aNMujKQRhhOZDeqOlgkhKxhV0
PFCsipoEUM2bJjugOfZMYwX5fhx7ZudAa+euM3NiGNYxkvj0PdwIOmgp4gBU/bY5
j63m0rqX7G2pvs9W0vWYuN/Ih1htie6oHdcFf+KVn9JjP2Lu9fQH2qEsppt3cATw
442dYRskjjykvjjnSQjYFVxmR7NjHTsZvwR8LbSRtATAeBuF/ymuBezAC81myErW
qh+oEPQaONh/y5j47xhD2bUf9yXW7LA0XP+vS0gW20RYD04P311xr0f2S8zLTD7D
KQASmShdaPCN2YfyoiE/3yx0RYt+MoBr
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:29 2025 by rpki-client