Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50D14CAEB21C11EFB41F7CB7762E951A.roa
File: 50D14CAEB21C11EFB41F7CB7762E951A.roa (raw, json)
Hash identifier: S/cN9+MUQZQMtwg1gYFFnEnRUhqIyVCW4HvbDyP2m0U=
Subject key identifier: 7B:57:3A:79:D6:70:90:78:61:BB:BA:F1:00:DC:25:96:23:FF:B2:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50D14CAEB21C11EFB41F7CB7762E951A.roa
Signing time: Wed 04 Dec 2024 08:46:56 +0000
ROA not before: Wed 04 Dec 2024 08:46:52 +0000
ROA not after: Sat 01 Feb 2025 08:46:52 +0000
asID: 138915
IP address blocks: 154.94.66.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71668 (0x117f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 08:46:52 2024 GMT
Not After : Feb 1 08:46:52 2025 GMT
Subject: CN=67501700-786d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:62:9d:da:9f:e6:34:de:c8:a5:b9:99:29:
fa:1d:67:fa:53:3d:4a:4d:63:33:11:e3:3c:f5:42:
fb:dd:f1:85:b3:fa:1c:d3:a5:7a:ce:97:86:74:d2:
35:0f:5b:a6:de:c4:c7:30:7f:ed:d0:18:93:87:a6:
b1:2e:d1:2b:35:cb:b7:94:21:62:49:71:ad:f1:c3:
49:db:89:c9:b2:81:bc:4f:3c:04:54:fe:c4:2b:80:
c6:70:40:8d:6c:7c:f9:b3:89:69:f0:e7:b0:64:d9:
a4:45:58:67:4f:2e:ea:bd:51:82:ac:62:b4:99:eb:
71:11:a0:89:a6:79:3c:94:15:a3:57:b9:38:a1:e8:
71:bc:81:d2:40:88:2d:f4:88:82:86:1f:05:e6:a9:
a9:41:9c:9e:2e:df:62:fc:7b:68:87:9f:37:dc:d5:
9f:c0:a3:17:a7:df:bc:95:1e:92:50:6d:9d:72:af:
85:9b:b1:1a:87:5c:65:65:07:1b:68:31:ed:42:17:
ec:28:bb:45:7a:48:d2:ac:00:6c:b5:0b:0a:18:cd:
ea:32:ac:0b:8b:2c:2b:d8:01:39:34:7d:95:31:27:
10:69:f3:31:22:83:45:98:ad:85:3c:32:6a:8a:29:
99:70:4f:cc:20:8b:15:ed:20:70:5d:81:0d:fd:62:
d1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:57:3A:79:D6:70:90:78:61:BB:BA:F1:00:DC:25:96:23:FF:B2:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50D14CAEB21C11EFB41F7CB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.66.0/23
Signature Algorithm: sha256WithRSAEncryption
03:4d:ff:02:40:48:44:5e:84:e7:96:e1:e0:0d:f7:3f:41:81:
73:e6:aa:d7:d5:f2:4b:17:6c:43:8a:8a:80:83:0a:79:ce:59:
0d:ad:15:f6:d0:7a:4f:b5:96:b5:59:d8:00:0d:b8:b6:c6:61:
ad:c2:e8:bd:b7:89:5d:f0:61:ca:7c:31:c9:a9:84:59:19:28:
ac:66:67:d6:09:c3:1f:3f:f1:39:58:d3:f2:97:89:47:2a:4e:
ad:a6:80:61:b2:96:e9:f3:1b:85:66:ae:bf:d3:a6:58:3f:f9:
6e:63:5d:59:6e:85:20:ac:cf:ea:0c:56:fa:ca:8f:f6:2a:b9:
20:16:c7:ff:b9:c3:e7:0f:92:bf:94:56:a0:09:fd:9d:32:53:
fa:aa:4e:9a:09:51:f2:74:6a:b0:87:5b:ad:7f:dd:46:cd:8b:
cd:09:1a:9a:75:ee:4a:25:f8:c8:fc:2c:b6:bb:c8:af:88:dd:
e0:03:9d:00:0a:40:99:1e:58:57:b0:33:be:20:f2:8d:05:65:
85:af:19:1b:26:9d:c3:c8:9d:4a:ce:fc:bc:9a:49:05:f9:b0:
bd:58:28:70:4b:b8:84:b0:d1:c9:90:36:fe:d2:d6:ef:69:97:
c0:72:2f:c1:36:40:16:b2:97:0d:7c:85:85:f8:cb:4f:78:22:
74:88:02:74
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARf0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjA0MDg0NjUyWhcNMjUwMjAxMDg0NjUyWjAYMRYw
FAYDVQQDEw02NzUwMTcwMC03ODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqzdindqf5jTeyKW5mSn6HWf6Uz1KTWMzEeM89UL73fGFs/oc06V6zpeG
dNI1D1um3sTHMH/t0BiTh6axLtErNcu3lCFiSXGt8cNJ24nJsoG8TzwEVP7EK4DG
cECNbHz5s4lp8OewZNmkRVhnTy7qvVGCrGK0metxEaCJpnk8lBWjV7k4oehxvIHS
QIgt9IiChh8F5qmpQZyeLt9i/Htoh5833NWfwKMXp9+8lR6SUG2dcq+Fm7Eah1xl
ZQcbaDHtQhfsKLtFekjSrABstQsKGM3qMqwLiywr2AE5NH2VMScQafMxIoNFmK2F
PDJqiimZcE/MIIsV7SBwXYEN/WLRiQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHtX
OnnWcJB4Ybu68QDcJZYj/7KZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MEQxNENBRUIyMUMxMUVGQjQxRjdDQjc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBml5CMA0GCSqGSIb3DQEB
CwUAA4IBAQADTf8CQEhEXoTnluHgDfc/QYFz5qrX1fJLF2xDioqAgwp5zlkNrRX2
0HpPtZa1WdgADbi2xmGtwui9t4ld8GHKfDHJqYRZGSisZmfWCcMfP/E5WNPyl4lH
Kk6tpoBhspbp8xuFZq6/06ZYP/luY11ZboUgrM/qDFb6yo/2KrkgFsf/ucPnD5K/
lFagCf2dMlP6qk6aCVHydGqwh1utf91GzYvNCRqade5KJfjI/Cy2u8iviN3gA50A
CkCZHlhXsDO+IPKNBWWFrxkbJp3DyJ1Kzvy8mkkF+bC9WChwS7iEsNHJkDb+0tbv
aZfAci/BNkAWspcNfIWF+MtPeCJ0iAJ0
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:59:44 2025 by rpki-client