Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E485A7EDB2711EF978DB385762E951A.roa
File: 5E485A7EDB2711EF978DB385762E951A.roa (raw, json)
Hash identifier: 4KYn492n051NxyeCsZkaE40u9L9pP3+JkAp6OSZLv/Q=
Subject key identifier: A6:55:60:EB:F3:E8:D0:94:03:27:EB:07:95:43:CE:16:14:CE:3E:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E485A7EDB2711EF978DB385762E951A.roa
Signing time: Sat 25 Jan 2025 14:19:20 +0000
ROA not before: Sat 25 Jan 2025 14:19:17 +0000
ROA not after: Wed 26 Feb 2025 14:19:17 +0000
asID: 55933
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84435 (0x149d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 14:19:17 2025 GMT
Not After : Feb 26 14:19:17 2025 GMT
Subject: CN=6794f2e8-b1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:43:b8:2c:4b:c7:97:04:f7:33:3b:4f:b1:
b2:14:87:c7:b6:99:75:2e:e2:4c:47:d9:29:11:dc:
c3:4a:5e:a8:22:2f:54:48:76:cf:75:66:50:06:00:
27:d7:73:38:e0:ca:97:49:1d:7a:1e:b1:a3:21:6a:
f6:3c:c9:32:7a:d1:6e:6e:d1:da:c0:f5:b9:35:5a:
34:00:09:e3:b6:ff:bf:6c:b9:c6:99:b6:ce:9f:c8:
a1:15:b6:28:7a:c5:ef:d6:65:26:dc:31:6c:c0:d2:
08:eb:a5:11:a6:7d:67:10:3b:52:09:b2:97:5b:70:
e5:c1:df:6c:38:d3:c9:6c:f4:25:1f:17:54:84:a2:
55:7f:be:71:5e:16:bc:15:28:de:d3:6e:5f:8c:97:
ee:7d:b9:7f:c9:cb:56:d4:64:c7:0f:c7:e5:d1:9a:
95:87:b6:52:a3:55:14:5b:ed:74:30:53:74:b1:59:
7e:40:ff:da:cd:b4:0f:b4:77:e6:64:f2:3d:77:50:
a7:e2:06:68:65:79:c1:91:d4:87:80:07:d3:90:3a:
0a:0c:f1:8d:46:62:a0:46:68:67:c2:c7:0a:6e:e1:
8b:9c:ee:44:fe:3e:c7:20:ce:2e:04:50:e9:0a:d7:
ce:44:e2:6c:77:db:9d:6a:2d:e3:43:f2:d6:4b:90:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:55:60:EB:F3:E8:D0:94:03:27:EB:07:95:43:CE:16:14:CE:3E:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E485A7EDB2711EF978DB385762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:b7:22:7f:f3:4a:5a:c1:e9:4f:28:e5:dd:13:7a:4f:f7:73:
9f:6a:54:23:bb:10:f3:e3:99:e9:5a:47:d1:e2:08:ac:fe:f9:
70:c0:39:f9:06:3c:47:27:3b:c9:4f:82:3f:da:d7:ce:ac:d6:
3c:68:cc:1f:68:43:da:14:be:a2:a1:dc:29:3d:cc:af:54:ce:
7a:37:5b:7d:b5:01:cb:84:63:93:cc:41:4b:0a:3d:1e:d3:c6:
79:83:df:86:dd:67:a1:1a:f0:a0:98:78:aa:79:75:00:17:06:
01:12:90:f6:3e:c7:3f:43:06:9c:86:40:bc:66:f2:28:0c:68:
e0:88:69:a5:83:12:85:05:d1:de:d8:1f:03:11:f6:3e:0a:c3:
1c:c5:83:99:42:e9:8d:0c:01:e1:62:7b:c4:28:b5:c4:a9:76:
b5:c2:32:27:5d:4a:44:8f:c1:2f:3c:28:11:61:50:21:dd:db:
8f:a3:a3:af:8d:8e:c4:6d:75:ff:ce:56:67:c9:9b:1f:1e:5a:
92:84:08:df:89:23:f5:e7:b8:62:85:41:de:fa:72:53:6e:56:
b4:97:00:e3:70:1f:5b:07:36:58:ae:38:1a:65:59:f4:84:29:
c0:7e:6f:4e:a8:87:ef:ff:2f:49:05:02:ae:a5:36:24:0e:39:
47:39:eb:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUnTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI1MTQxOTE3WhcNMjUwMjI2MTQxOTE3WjAYMRYw
FAYDVQQDEw02Nzk0ZjJlOC1iMWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwTBDuCxLx5cE9zM7T7GyFIfHtpl1LuJMR9kpEdzDSl6oIi9USHbPdWZQ
BgAn13M44MqXSR16HrGjIWr2PMkyetFubtHawPW5NVo0AAnjtv+/bLnGmbbOn8ih
FbYoesXv1mUm3DFswNII66URpn1nEDtSCbKXW3Dlwd9sONPJbPQlHxdUhKJVf75x
Xha8FSje025fjJfufbl/yctW1GTHD8fl0ZqVh7ZSo1UUW+10MFN0sVl+QP/azbQP
tHfmZPI9d1Cn4gZoZXnBkdSHgAfTkDoKDPGNRmKgRmhnwscKbuGLnO5E/j7HIM4u
BFDpCtfOROJsd9udai3jQ/LWS5DY/QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKZV
YOvz6NCUAyfrB5VDzhYUzj4zMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RTQ4NUE3RURCMjcxMUVGOTc4REIzODU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmslAMA0GCSqGSIb3DQEB
CwUAA4IBAQB7tyJ/80pawelPKOXdE3pP93OfalQjuxDz45npWkfR4gis/vlwwDn5
BjxHJzvJT4I/2tfOrNY8aMwfaEPaFL6iodwpPcyvVM56N1t9tQHLhGOTzEFLCj0e
08Z5g9+G3WehGvCgmHiqeXUAFwYBEpD2Psc/QwachkC8ZvIoDGjgiGmlgxKFBdHe
2B8DEfY+CsMcxYOZQumNDAHhYnvEKLXEqXa1wjInXUpEj8EvPCgRYVAh3duPo6Ov
jY7EbXX/zlZnyZsfHlqShAjfiSP157hihUHe+nJTbla0lwDjcB9bBzZYrjgaZVn0
hCnAfm9OqIfv/y9JBQKupTYkDjlHOeta
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:22:29 2025 by rpki-client