Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47989C28DFE911EF95C77E99762E951A.roa
File: 47989C28DFE911EF95C77E99762E951A.roa (raw, json)
Hash identifier: 99TvKeOMRLyY+qH4jinU6j3xr0j6xQseLVb0udqGmsg=
Subject key identifier: CE:79:3F:A1:71:27:73:73:A8:A6:C2:DE:EE:46:4A:B2:D8:E4:5B:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DF1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47989C28DFE911EF95C77E99762E951A.roa
Signing time: Fri 31 Jan 2025 15:37:29 +0000
ROA not before: Fri 31 Jan 2025 15:37:25 +0000
ROA not after: Wed 05 Feb 2025 15:37:25 +0000
asID: 39600
IP address blocks: 154.84.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85489 (0x14df1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 15:37:25 2025 GMT
Not After : Feb 5 15:37:25 2025 GMT
Subject: CN=679cee39-9b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:0d:12:d2:d6:62:85:af:99:9e:b4:bb:fc:
5b:db:23:93:58:f6:da:eb:dd:2b:9b:ae:da:da:f9:
a9:7c:73:95:bb:a2:d8:f5:e5:5c:63:70:c6:2d:b3:
af:aa:9b:f6:df:7d:81:e4:9b:1e:94:76:b7:3e:2e:
4a:ef:44:6a:63:d8:aa:90:b5:73:80:3f:9e:41:30:
42:fd:84:26:e0:cc:6f:9e:f5:e3:a8:61:59:ec:13:
88:d8:c9:80:35:6f:e9:83:be:31:0c:fd:1d:bc:d7:
44:f6:0c:81:1f:c8:0a:4d:ee:56:02:0f:fa:3b:31:
30:3c:5b:d9:2d:ca:9d:b1:45:d0:fc:e9:95:ef:9e:
6d:f6:90:d1:36:9e:46:7f:ce:6d:7b:89:2a:ea:3f:
af:ab:1a:f3:83:76:07:ef:be:9e:b5:c1:02:07:2e:
32:b3:9e:e1:e1:9a:16:5e:07:11:2a:e1:d7:83:3c:
e8:aa:1b:10:3d:d8:ec:09:da:ba:9c:25:71:ba:60:
88:d3:75:c6:f5:e2:8b:38:50:8c:38:77:ce:ee:8a:
52:08:7f:09:ee:90:2f:4a:11:76:f1:8d:e8:9e:26:
72:5b:8b:1e:42:39:d1:57:f7:d2:cc:93:ce:7d:59:
96:68:07:89:5f:b9:7c:89:2b:6b:6f:2e:6b:19:32:
a2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:79:3F:A1:71:27:73:73:A8:A6:C2:DE:EE:46:4A:B2:D8:E4:5B:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47989C28DFE911EF95C77E99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.151.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:0d:d8:42:34:83:52:9d:94:8e:84:ca:07:0c:98:5e:17:d1:
c5:32:09:03:76:ce:f3:b5:64:81:c9:cb:5d:89:07:ea:b0:65:
b1:f8:3a:22:65:11:ac:cc:bc:5c:1c:97:b3:cb:ca:f2:4c:03:
48:84:a3:c3:98:c4:93:9c:01:ec:01:3b:48:19:9d:32:ae:d8:
60:1f:e4:53:61:73:75:fc:ab:89:f4:b7:22:63:a9:ec:83:b8:
e4:1c:a5:9a:66:2e:c0:2d:90:00:9c:f6:63:03:da:26:18:de:
15:7c:d9:9b:a3:8f:e6:57:e9:e4:9f:c0:6a:89:8e:9d:dd:d8:
8d:9a:2c:be:09:3a:fd:1f:b1:e9:b1:42:53:77:ee:0f:c8:22:
6a:a5:f9:6e:e8:37:74:d6:8b:ec:37:98:07:f5:1e:05:30:91:
3c:8f:65:fb:74:b3:86:20:43:38:98:7d:ce:39:92:eb:e1:90:
4b:6a:7a:0b:2b:24:21:0d:98:b6:23:9a:47:e1:f4:67:a4:16:
04:73:78:53:d5:0f:41:91:ec:90:0d:71:70:39:26:f3:36:62:
fb:ed:03:78:08:b2:d9:4c:67:8d:69:3d:ef:48:02:7a:5c:24:
31:1d:68:37:17:90:36:39:ee:d5:14:6a:35:34:38:d3:5b:41:
68:e7:82:fa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU3xMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTMxMTUzNzI1WhcNMjUwMjA1MTUzNzI1WjAYMRYw
FAYDVQQDEw02NzljZWUzOS05Yjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs4ENEtLWYoWvmZ60u/xb2yOTWPba690rm67a2vmpfHOVu6LY9eVcY3DG
LbOvqpv2332B5JselHa3Pi5K70RqY9iqkLVzgD+eQTBC/YQm4MxvnvXjqGFZ7BOI
2MmANW/pg74xDP0dvNdE9gyBH8gKTe5WAg/6OzEwPFvZLcqdsUXQ/OmV755t9pDR
Np5Gf85te4kq6j+vqxrzg3YH776etcECBy4ys57h4ZoWXgcRKuHXgzzoqhsQPdjs
Cdq6nCVxumCI03XG9eKLOFCMOHfO7opSCH8J7pAvShF28Y3oniZyW4seQjnRV/fS
zJPOfVmWaAeJX7l8iStrby5rGTKiwwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM55
P6FxJ3NzqKbC3u5GSrLY5FuBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80Nzk4OUMyOERGRTkxMUVGOTVDNzdFOTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlSXMA0GCSqGSIb3DQEB
CwUAA4IBAQC2DdhCNINSnZSOhMoHDJheF9HFMgkDds7ztWSByctdiQfqsGWx+Doi
ZRGszLxcHJezy8ryTANIhKPDmMSTnAHsATtIGZ0yrthgH+RTYXN1/KuJ9LciY6ns
g7jkHKWaZi7ALZAAnPZjA9omGN4VfNmbo4/mV+nkn8BqiY6d3diNmiy+CTr9H7Hp
sUJTd+4PyCJqpflu6Dd01ovsN5gH9R4FMJE8j2X7dLOGIEM4mH3OOZLr4ZBLanoL
KyQhDZi2I5pH4fRnpBYEc3hT1Q9BkeyQDXFwOSbzNmL77QN4CLLZTGeNaT3vSAJ6
XCQxHWg3F5A2Oe7VFGo1NDjTW0Fo54L6
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:32:27 2025 by rpki-client