Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B7679CCDB3411EFBA79885D762E951A.roa
File: 5B7679CCDB3411EFBA79885D762E951A.roa (raw, json)
Hash identifier: NaS8LZ4mJHWG8a04DshTU7+zYHswQ0e7fjIk936Zbds=
Subject key identifier: 7D:96:FF:33:48:3F:31:FC:2A:3F:3F:87:A3:B1:B8:08:23:09:ED:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B7679CCDB3411EFBA79885D762E951A.roa
Signing time: Sat 25 Jan 2025 15:52:19 +0000
ROA not before: Sat 25 Jan 2025 15:52:15 +0000
ROA not after: Fri 07 Mar 2025 15:52:15 +0000
asID: 138915
IP address blocks: 154.223.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84500 (0x14a14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 15:52:15 2025 GMT
Not After : Mar 7 15:52:15 2025 GMT
Subject: CN=679508b3-a4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5f:9d:36:1d:42:45:9a:1f:e8:27:3d:a8:dd:
1f:ff:8e:01:02:cf:3f:97:04:36:ec:5f:25:ba:1b:
14:8d:1c:4a:58:8c:31:35:8b:ce:43:d6:89:12:62:
5f:a5:f5:ec:33:4c:18:13:16:33:1a:19:c1:86:4e:
34:c2:6b:35:3c:bd:40:ba:68:58:15:07:2b:69:aa:
ec:2b:27:15:ba:aa:be:98:96:b7:94:33:5f:9f:b4:
56:3d:87:e3:9e:ee:f7:08:53:5e:2e:27:e0:50:c7:
d1:0d:e3:11:8f:c2:8f:c2:2e:92:ba:49:69:1c:42:
e2:f1:f5:73:ba:1a:04:8e:bc:c7:7a:67:cf:84:39:
cc:90:bd:4c:89:00:a6:0f:cc:43:35:ca:c7:55:45:
f2:52:a1:52:f9:56:2f:d9:71:b5:46:b0:48:3c:91:
ec:09:01:73:79:50:91:ee:40:a2:db:11:89:10:9d:
77:8c:63:c8:78:71:55:85:82:74:08:ac:1b:fd:5f:
01:e3:c2:28:40:41:1d:fd:a2:6a:4b:02:a5:33:65:
e5:25:83:19:cf:45:e8:fb:bf:8c:e0:77:96:94:e6:
4d:19:49:00:34:84:9b:95:93:3b:24:c2:cb:c7:15:
73:ce:28:25:9e:9a:eb:3e:5f:9c:c5:3d:d6:77:25:
27:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:96:FF:33:48:3F:31:FC:2A:3F:3F:87:A3:B1:B8:08:23:09:ED:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B7679CCDB3411EFBA79885D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.45.0/24
Signature Algorithm: sha256WithRSAEncryption
45:65:5f:e9:22:55:33:e3:72:5d:d1:ae:20:b8:bd:14:f0:55:
71:e0:56:ad:e5:a3:69:48:30:d7:28:ff:53:df:94:1c:71:1a:
74:22:46:cc:bc:c1:43:95:7d:6f:f9:15:cf:df:0f:e9:71:01:
45:1a:a6:11:25:a4:c2:34:3f:37:31:b3:30:e6:75:e3:0d:90:
b4:c0:48:d4:68:ac:c6:0b:ea:58:16:65:f3:f0:dd:7a:71:3c:
0f:df:6a:11:df:14:78:70:f7:22:e5:29:17:df:69:29:9d:5d:
5b:c0:7b:a1:6b:75:8d:7f:5a:c9:ef:2f:a9:ab:e5:f6:d4:da:
46:a7:38:a8:26:7d:82:dd:ee:23:29:d2:cc:c2:01:92:e4:3b:
09:5a:27:83:21:43:31:ec:83:fb:36:0d:66:17:3d:4e:75:aa:
6e:ca:77:42:65:2a:a2:09:78:c6:18:9f:4e:fa:4b:10:0a:18:
f1:65:62:25:1b:96:ba:f5:46:1b:a7:74:e4:43:67:57:46:65:
4f:49:db:d9:de:90:15:df:b5:0f:ae:cd:ea:75:3a:e8:b6:0b:
d7:cf:2b:01:0b:56:46:87:90:ce:0f:72:91:ff:31:19:9e:4b:
5c:1c:a6:99:7a:4d:f4:21:e5:05:3e:a5:b0:3a:4b:0f:07:67:
ea:bc:f0:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUoUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI1MTU1MjE1WhcNMjUwMzA3MTU1MjE1WjAYMRYw
FAYDVQQDEw02Nzk1MDhiMy1hNGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3F+dNh1CRZof6Cc9qN0f/44BAs8/lwQ27F8luhsUjRxKWIwxNYvOQ9aJ
EmJfpfXsM0wYExYzGhnBhk40wms1PL1AumhYFQcraarsKycVuqq+mJa3lDNfn7RW
PYfjnu73CFNeLifgUMfRDeMRj8KPwi6SuklpHELi8fVzuhoEjrzHemfPhDnMkL1M
iQCmD8xDNcrHVUXyUqFS+VYv2XG1RrBIPJHsCQFzeVCR7kCi2xGJEJ13jGPIeHFV
hYJ0CKwb/V8B48IoQEEd/aJqSwKlM2XlJYMZz0Xo+7+M4HeWlOZNGUkANISblZM7
JMLLxxVzziglnprrPl+cxT3WdyUndwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFH2W
/zNIPzH8Kj8/h6OxuAgjCe2rMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81Qjc2NzlDQ0RCMzQxMUVGQkE3OTg4NUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8tMA0GCSqGSIb3DQEB
CwUAA4IBAQBFZV/pIlUz43Jd0a4guL0U8FVx4Fat5aNpSDDXKP9T35QccRp0IkbM
vMFDlX1v+RXP3w/pcQFFGqYRJaTCND83MbMw5nXjDZC0wEjUaKzGC+pYFmXz8N16
cTwP32oR3xR4cPci5SkX32kpnV1bwHuha3WNf1rJ7y+pq+X21NpGpzioJn2C3e4j
KdLMwgGS5DsJWieDIUMx7IP7Ng1mFz1OdapuyndCZSqiCXjGGJ9O+ksQChjxZWIl
G5a69UYbp3TkQ2dXRmVPSdvZ3pAV37UPrs3qdTrotgvXzysBC1ZGh5DOD3KR/zEZ
nktcHKaZek30IeUFPqWwOksPB2fqvPD0
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:11:43 2025 by rpki-client