Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F6E23C0D57811EF9F97924A762E951A.roa
File: 0F6E23C0D57811EF9F97924A762E951A.roa (raw, json)
Hash identifier: 3Nngb8hYlrS1B+HZjZvNYQF34xXYBN9uOG45yvsOReE=
Subject key identifier: DF:45:EE:FC:E5:E2:21:89:B7:71:75:35:83:F7:47:1D:4A:39:38:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DD8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F6E23C0D57811EF9F97924A762E951A.roa
Signing time: Sat 18 Jan 2025 08:41:50 +0000
ROA not before: Sat 18 Jan 2025 08:41:47 +0000
ROA not after: Sat 22 Feb 2025 08:41:47 +0000
asID: 55020
IP address blocks: 154.89.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81368 (0x13dd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 08:41:47 2025 GMT
Not After : Feb 22 08:41:47 2025 GMT
Subject: CN=678b694e-651e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:85:1c:b7:d7:ec:a4:6f:76:80:bb:b1:52:
ff:be:5b:db:f9:49:f1:6c:66:62:a8:4c:ad:94:4b:
33:7c:84:52:88:ec:46:af:30:14:9f:5d:56:c7:77:
60:29:e9:5e:cd:35:54:b8:b9:79:91:24:36:1b:47:
9b:f6:69:14:d8:5a:a8:b6:03:bd:d0:c9:57:72:4b:
4f:c3:77:6b:ac:58:ef:1b:18:19:47:78:65:2f:a6:
51:ef:ad:78:09:27:43:d5:99:f3:b2:ca:08:06:4e:
30:32:52:dd:8f:af:0e:ab:05:8f:63:f7:70:88:f7:
16:3d:46:e2:e2:8c:f5:c9:84:23:a2:eb:b8:77:9e:
87:e8:92:d4:b3:68:c6:b5:07:19:30:71:5f:d4:d3:
55:4e:91:5b:21:7c:bb:d3:62:d5:5e:62:86:b2:6b:
d8:98:1f:b0:5b:ff:bd:48:69:4b:b9:3e:0c:35:36:
61:b2:d4:32:84:bb:be:cb:09:97:da:da:5f:a5:69:
28:19:68:ad:6b:a7:64:77:f7:a2:2b:cb:64:9a:b2:
5e:12:8e:ec:a9:88:8d:8f:cb:ee:a8:65:23:01:50:
65:c2:35:a7:ff:37:0c:40:cd:0e:06:ca:8e:b5:d0:
d6:0d:40:27:c1:14:7b:36:3c:e1:2a:19:de:55:4e:
13:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:45:EE:FC:E5:E2:21:89:B7:71:75:35:83:F7:47:1D:4A:39:38:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F6E23C0D57811EF9F97924A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.192.0/20
Signature Algorithm: sha256WithRSAEncryption
9a:14:67:55:1f:3c:8f:a5:d7:d7:7d:6d:e6:80:a0:8d:88:aa:
3f:dc:98:50:6e:31:c7:dc:7b:cb:28:ab:c1:d0:bb:2c:ff:41:
bd:35:db:e3:37:79:30:60:15:7e:c9:de:92:fe:48:40:d4:1f:
1e:46:61:d9:e6:8a:ab:4b:7e:18:71:66:d0:7c:d8:78:42:3a:
a9:73:e3:ec:18:46:38:a0:51:09:39:c1:2b:1f:16:3c:4c:42:
09:2c:fb:c5:91:5f:49:92:6e:9e:f4:89:72:a4:80:ab:5d:c3:
e6:a4:f8:2a:a4:52:b9:da:8c:fd:72:a7:c5:7e:ef:c6:b9:cb:
8b:f9:81:4c:e1:10:c9:b4:90:54:c8:e6:92:ea:7e:1d:26:e0:
fb:95:8f:4a:08:30:17:bb:b0:a5:bf:a7:c2:20:55:c4:bc:19:
99:d2:79:9c:91:8f:f0:68:5b:22:dd:5f:15:30:4f:4a:bb:8e:
a6:ab:1f:f0:d7:dd:38:6c:d4:da:73:81:dd:55:72:c5:78:3c:
6a:a8:6d:5e:fe:f0:3e:27:9f:b1:19:ab:c4:d0:b5:6d:58:2e:
4b:89:9f:e7:17:d2:2f:01:e7:32:92:91:89:e9:01:1d:88:10:
dd:b7:d4:af:79:95:43:28:ad:88:10:48:12:05:f5:b4:c6:ef:
ce:4c:d7:1a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT3YMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE4MDg0MTQ3WhcNMjUwMjIyMDg0MTQ3WjAYMRYw
FAYDVQQDEw02NzhiNjk0ZS02NTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvsCFHLfX7KRvdoC7sVL/vlvb+UnxbGZiqEytlEszfIRSiOxGrzAUn11W
x3dgKelezTVUuLl5kSQ2G0eb9mkU2FqotgO90MlXcktPw3drrFjvGxgZR3hlL6ZR
7614CSdD1ZnzssoIBk4wMlLdj68OqwWPY/dwiPcWPUbi4oz1yYQjouu4d56H6JLU
s2jGtQcZMHFf1NNVTpFbIXy702LVXmKGsmvYmB+wW/+9SGlLuT4MNTZhstQyhLu+
ywmX2tpfpWkoGWita6dkd/eiK8tkmrJeEo7sqYiNj8vuqGUjAVBlwjWn/zcMQM0O
BsqOtdDWDUAnwRR7NjzhKhneVU4T9wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN9F
7vzl4iGJt3F1NYP3Rx1KOTh0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wRjZFMjNDMEQ1NzgxMUVGOUY5NzkyNEE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmlnAMA0GCSqGSIb3DQEB
CwUAA4IBAQCaFGdVHzyPpdfXfW3mgKCNiKo/3JhQbjHH3HvLKKvB0Lss/0G9Ndvj
N3kwYBV+yd6S/khA1B8eRmHZ5oqrS34YcWbQfNh4Qjqpc+PsGEY4oFEJOcErHxY8
TEIJLPvFkV9Jkm6e9IlypICrXcPmpPgqpFK52oz9cqfFfu/GucuL+YFM4RDJtJBU
yOaS6n4dJuD7lY9KCDAXu7Clv6fCIFXEvBmZ0nmckY/waFsi3V8VME9Ku46mqx/w
1904bNTac4HdVXLFeDxqqG1e/vA+J5+xGavE0LVtWC5LiZ/nF9IvAecykpGJ6QEd
iBDdt9SveZVDKK2IEEgSBfW0xu/OTNca
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:02 2025 by rpki-client