Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46D98C82AD5A11EF877CA6B2762E951A.roa
File: 46D98C82AD5A11EF877CA6B2762E951A.roa (raw, json)
Hash identifier: OF+g/DjI+JcUtCDd5R2jz/6RJ0H9bjxBUoRxSjTdpZg=
Subject key identifier: D1:3F:D7:30:E9:C7:AF:38:3D:D2:6D:D6:43:83:73:F4:B8:87:A2:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0114DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46D98C82AD5A11EF877CA6B2762E951A.roa
Signing time: Thu 28 Nov 2024 07:27:52 +0000
ROA not before: Thu 28 Nov 2024 07:27:48 +0000
ROA not after: Tue 11 Feb 2025 07:27:48 +0000
asID: 5650
IP address blocks: 154.205.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70877 (0x114dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 28 07:27:48 2024 GMT
Not After : Feb 11 07:27:48 2025 GMT
Subject: CN=67481b78-eeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:71:ee:61:70:d1:c6:2e:80:2f:d0:17:b0:57:
4a:67:7b:81:b0:cd:ae:47:37:ef:9d:b7:5f:68:19:
16:17:e4:4d:b1:d5:da:93:a0:41:1a:4d:4e:55:84:
bd:91:35:01:4d:af:1d:35:ac:69:ea:3f:ee:e6:a0:
11:d8:da:a0:0c:d0:f7:59:1e:71:42:ee:be:03:b8:
40:d4:b3:57:fb:75:ec:de:97:fd:61:32:a6:72:29:
79:7f:c7:f5:7f:09:1e:30:fa:e0:3b:21:de:3b:b2:
ce:a0:c5:a1:4f:ab:b8:c5:09:97:ce:b2:64:75:f3:
f7:61:b8:7a:04:84:d2:86:ab:78:b7:0e:6d:d5:f6:
17:b3:ea:25:8b:06:68:71:7a:cf:63:e3:50:67:57:
0a:83:fc:21:c1:5b:03:8e:1b:0a:c9:01:43:e3:70:
35:39:91:98:81:45:f5:5f:a0:88:3e:65:01:67:ca:
12:52:09:36:1b:ce:ae:46:ce:1f:3a:5b:dd:81:b4:
bd:41:39:bb:dc:36:9d:af:70:c5:ef:c3:5f:50:70:
e2:61:4a:84:2a:a4:c0:85:a9:36:66:67:28:95:7b:
81:45:77:a9:13:05:63:b3:51:9a:6f:2f:fd:e3:8b:
9a:f8:4f:80:de:90:bb:4b:26:95:e7:ec:ad:76:de:
b2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3F:D7:30:E9:C7:AF:38:3D:D2:6D:D6:43:83:73:F4:B8:87:A2:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46D98C82AD5A11EF877CA6B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.176.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:cf:8b:b1:03:34:70:8d:5d:ae:a6:7f:e1:6c:46:24:36:f4:
b4:bf:4b:fb:73:6b:e9:f6:17:e4:15:ce:91:f7:07:91:3b:30:
fe:43:5e:7e:be:6a:1e:52:44:2a:9c:3f:87:ce:36:52:96:26:
e0:c0:29:c7:62:48:a0:15:6f:8f:07:ec:3d:28:1d:88:87:e2:
7d:0e:2d:97:a1:18:1d:5e:38:ab:eb:11:21:a1:c7:e3:54:2a:
1a:8c:4a:0f:b9:a1:0f:a0:6f:c8:ba:d2:e1:b0:84:25:07:b8:
01:e4:6c:44:0a:54:9c:71:36:65:46:b7:94:2d:3c:f4:2f:f0:
26:6d:45:73:62:e5:eb:79:7e:d2:b8:e9:7b:a5:23:7b:e4:5a:
77:1e:86:93:6e:d5:75:46:6a:9e:f6:14:87:f4:ce:00:4f:7d:
6b:46:aa:ba:9c:f9:2d:e7:d9:6d:73:dc:29:fd:c8:82:7b:c2:
79:72:20:69:20:96:77:96:be:02:a5:56:ff:e6:7c:b9:f2:49:
fa:34:8e:62:5c:af:30:bd:fd:e9:8d:2a:a7:20:67:5e:18:e0:
1d:32:68:71:d3:10:6b:66:60:14:08:d2:b7:a1:8b:83:17:49:
8e:f2:7e:37:40:20:40:0f:d5:ac:00:01:98:04:25:c1:a4:23:
53:4d:36:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARTdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTI4MDcyNzQ4WhcNMjUwMjExMDcyNzQ4WjAYMRYw
FAYDVQQDEw02NzQ4MWI3OC1lZWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6nHuYXDRxi6AL9AXsFdKZ3uBsM2uRzfvnbdfaBkWF+RNsdXak6BBGk1O
VYS9kTUBTa8dNaxp6j/u5qAR2NqgDND3WR5xQu6+A7hA1LNX+3Xs3pf9YTKmcil5
f8f1fwkeMPrgOyHeO7LOoMWhT6u4xQmXzrJkdfP3Ybh6BITShqt4tw5t1fYXs+ol
iwZocXrPY+NQZ1cKg/whwVsDjhsKyQFD43A1OZGYgUX1X6CIPmUBZ8oSUgk2G86u
Rs4fOlvdgbS9QTm73Dadr3DF78NfUHDiYUqEKqTAhak2ZmcolXuBRXepEwVjs1Ga
by/944ua+E+A3pC7SyaV5+ytdt6yowIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNE/
1zDpx684PdJt1kODc/S4h6JxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NkQ5OEM4MkFENUExMUVGODc3Q0E2QjI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCms2wMA0GCSqGSIb3DQEB
CwUAA4IBAQCOz4uxAzRwjV2upn/hbEYkNvS0v0v7c2vp9hfkFc6R9weROzD+Q15+
vmoeUkQqnD+HzjZSlibgwCnHYkigFW+PB+w9KB2Ih+J9Di2XoRgdXjir6xEhocfj
VCoajEoPuaEPoG/IutLhsIQlB7gB5GxEClSccTZlRreULTz0L/AmbUVzYuXreX7S
uOl7pSN75Fp3HoaTbtV1Rmqe9hSH9M4AT31rRqq6nPkt59ltc9wp/ciCe8J5ciBp
IJZ3lr4CpVb/5ny58kn6NI5iXK8wvf3pjSqnIGdeGOAdMmhx0xBrZmAUCNK3oYuD
F0mO8n43QCBAD9WsAAGYBCXBpCNTTTah
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:15:00 2025 by rpki-client