Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E60851CC36111EFAA356C85762E951A.roa
File: 2E60851CC36111EFAA356C85762E951A.roa (raw, json)
Hash identifier: VD7BjzEvynW60F1YW+fUEq/JomXT1EStH83KeJRUA1g=
Subject key identifier: 6F:2F:72:48:0B:AE:A3:BB:94:27:92:EF:AF:78:08:42:AC:00:25:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012656
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E60851CC36111EFAA356C85762E951A.roa
Signing time: Thu 26 Dec 2024 08:12:43 +0000
ROA not before: Thu 26 Dec 2024 08:12:39 +0000
ROA not after: Tue 04 Mar 2025 08:12:39 +0000
asID: 63139
IP address blocks: 154.94.64.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75350 (0x12656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 08:12:39 2024 GMT
Not After : Mar 4 08:12:39 2025 GMT
Subject: CN=676d0ffb-6663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:f4:0a:15:e3:76:63:04:9e:e0:c6:eb:28:
c0:b1:08:93:66:3a:4b:c0:3a:0a:5a:1f:18:3b:c3:
35:04:5d:eb:f2:c1:a7:9b:7c:62:cc:ec:ee:07:3d:
75:dd:30:88:3a:87:93:c9:3e:51:42:aa:14:dd:f2:
01:48:e3:58:be:62:e8:1d:b1:aa:72:b2:03:95:9e:
bc:eb:7e:e3:a0:d0:fa:34:4c:53:85:5a:12:34:52:
2c:3f:2b:38:08:cd:57:e0:17:39:15:8f:3c:57:66:
65:40:30:1e:15:da:ca:2a:b3:f2:d3:e1:68:42:95:
4e:b6:4e:1e:c1:f7:3d:2d:d8:b4:fd:ca:f7:06:84:
4b:05:4d:c4:92:6f:84:a6:6e:c5:d0:5a:15:b7:0e:
28:05:47:6d:d2:e3:39:52:d1:68:4b:b2:86:73:35:
f4:e1:4f:2c:66:72:88:52:54:d2:bc:37:c2:35:72:
b4:83:bc:38:c1:07:7a:98:ed:c5:a5:aa:d5:28:e4:
a4:33:1d:a2:1e:84:ce:2f:90:4b:fc:05:bf:9e:e4:
15:17:39:ba:4c:ce:17:ee:d2:4e:41:e0:6a:49:9f:
d1:cf:d9:62:a2:ac:71:c0:31:76:47:7a:f9:91:47:
ce:68:0a:14:a0:71:25:e7:99:4d:9d:ac:67:b1:f5:
e4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2F:72:48:0B:AE:A3:BB:94:27:92:EF:AF:78:08:42:AC:00:25:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E60851CC36111EFAA356C85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.64.0/23
Signature Algorithm: sha256WithRSAEncryption
69:f6:c5:1a:de:76:7a:2d:0f:1f:a9:f4:8e:6f:89:06:37:b0:
d9:0f:73:c0:99:53:25:60:03:03:23:7f:1b:b6:3a:89:e2:08:
26:91:cb:d3:2e:d8:34:85:cd:78:ad:49:46:3e:37:fd:4e:85:
83:03:99:35:77:53:df:f5:7a:44:4b:c9:e6:39:63:a2:6f:57:
47:14:ad:40:0a:50:d5:a5:66:9f:1a:ad:34:dd:f0:54:47:5d:
f6:66:53:43:ad:f3:03:2f:70:09:2e:f9:d5:60:4c:29:e3:e0:
a6:f1:ff:9c:d7:af:e1:0d:a1:6f:b5:0f:e5:da:9c:db:b0:c2:
e0:10:43:6c:21:8f:00:e7:3f:22:ec:79:36:4a:0f:64:69:7c:
88:93:a6:5f:5a:e3:e3:fb:16:a1:d9:e4:c7:10:e6:e6:bf:c7:
ef:0b:ab:a2:6c:9d:6b:fd:6f:f8:83:5f:70:de:20:03:9f:ea:
0e:3b:74:44:08:43:b2:42:ef:f0:23:cd:8d:6f:30:00:7e:e5:
41:8a:dc:c4:69:26:3a:f5:59:06:bb:38:f3:c3:86:47:3b:9d:
3f:cd:34:d1:72:21:77:44:ad:21:aa:77:ac:34:33:c8:40:f7:
90:59:6c:16:cc:c0:7a:7b:9c:47:e2:83:d1:63:92:71:c2:d9:
9a:ac:5e:d8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASZWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDgxMjM5WhcNMjUwMzA0MDgxMjM5WjAYMRYw
FAYDVQQDEw02NzZkMGZmYi02NjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1A30ChXjdmMEnuDG6yjAsQiTZjpLwDoKWh8YO8M1BF3r8sGnm3xizOzu
Bz113TCIOoeTyT5RQqoU3fIBSONYvmLoHbGqcrIDlZ68637joND6NExThVoSNFIs
Pys4CM1X4Bc5FY88V2ZlQDAeFdrKKrPy0+FoQpVOtk4ewfc9Ldi0/cr3BoRLBU3E
km+Epm7F0FoVtw4oBUdt0uM5UtFoS7KGczX04U8sZnKIUlTSvDfCNXK0g7w4wQd6
mO3FparVKOSkMx2iHoTOL5BL/AW/nuQVFzm6TM4X7tJOQeBqSZ/Rz9lioqxxwDF2
R3r5kUfOaAoUoHEl55lNnaxnsfXkYQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFG8v
ckgLrqO7lCeS7694CEKsACWxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRTYwODUxQ0MzNjExMUVGQUEzNTZDODU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBml5AMA0GCSqGSIb3DQEB
CwUAA4IBAQBp9sUa3nZ6LQ8fqfSOb4kGN7DZD3PAmVMlYAMDI38btjqJ4ggmkcvT
Ltg0hc14rUlGPjf9ToWDA5k1d1Pf9XpES8nmOWOib1dHFK1AClDVpWafGq003fBU
R132ZlNDrfMDL3AJLvnVYEwp4+Cm8f+c16/hDaFvtQ/l2pzbsMLgEENsIY8A5z8i
7Hk2Sg9kaXyIk6ZfWuPj+xah2eTHEObmv8fvC6uibJ1r/W/4g19w3iADn+oOO3RE
CEOyQu/wI82NbzAAfuVBitzEaSY69VkGuzjzw4ZHO50/zTTRciF3RK0hqnesNDPI
QPeQWWwWzMB6e5xH4oPRY5JxwtmarF7Y
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:34:59 2025 by rpki-client