Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63989812CF3411EFB51AF441762E951A.roa
File: 63989812CF3411EFB51AF441762E951A.roa (raw, json)
Hash identifier: MRfIH0OygB5fcoCUBAh3BKOBEdzPkRpKK0QBljA7y+w=
Subject key identifier: 4C:11:0A:20:42:41:A0:EA:E1:87:CD:29:08:E1:5A:70:6E:B0:A5:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63989812CF3411EFB51AF441762E951A.roa
Signing time: Fri 10 Jan 2025 09:22:19 +0000
ROA not before: Fri 10 Jan 2025 09:22:15 +0000
ROA not after: Fri 07 Feb 2025 09:22:15 +0000
asID: 5065
IP address blocks: 154.94.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80353 (0x139e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 09:22:15 2025 GMT
Not After : Feb 7 09:22:15 2025 GMT
Subject: CN=6780e6cb-8220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:85:33:7b:41:59:1e:18:08:da:c2:3c:4d:
49:4a:9c:49:15:b2:94:9b:a2:a9:7b:a9:d4:73:2b:
7a:36:7a:fd:a7:5b:1e:4c:d5:64:29:39:5e:61:5e:
2b:84:b8:86:4d:22:c9:30:36:5b:62:a9:02:70:e8:
94:60:46:db:ed:dd:ea:6a:e5:4f:8f:2a:88:52:38:
98:76:fc:63:21:d7:42:b3:7f:62:99:44:f3:92:fc:
90:15:8d:48:f6:95:f5:d6:53:f4:a3:5c:94:dd:47:
19:0c:16:68:aa:f1:0e:fa:59:a1:3f:87:33:db:2e:
45:82:38:f3:da:c3:ac:c6:60:f9:f2:bb:53:23:b0:
a9:d1:65:d3:e0:38:41:60:7d:7e:0c:55:f5:46:4f:
f5:f6:87:f4:0e:18:c2:4a:b2:13:d4:f2:14:4c:c5:
95:31:85:d7:38:8e:bf:da:d5:3c:4b:aa:2f:a1:5f:
19:18:08:f3:b4:a0:ab:e7:5a:fe:04:9c:dd:a4:87:
55:54:a4:84:ae:e4:54:cd:6b:c7:12:9a:99:6e:4d:
7d:a1:7c:8e:ce:11:84:0c:2a:d5:68:de:1b:d5:cd:
53:cf:02:c2:19:4c:48:4b:64:c7:1a:e6:3d:3e:2e:
b0:4f:b6:9e:ea:f1:7e:0d:13:79:18:ae:0d:1e:9b:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:11:0A:20:42:41:A0:EA:E1:87:CD:29:08:E1:5A:70:6E:B0:A5:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63989812CF3411EFB51AF441762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.32.0/24
Signature Algorithm: sha256WithRSAEncryption
31:25:33:78:26:04:b3:29:fc:cf:14:7e:40:f9:5d:d1:88:1e:
1c:2f:3b:07:58:e1:a5:18:3e:d6:a0:ef:4f:73:db:f4:f7:c3:
75:51:bd:42:48:cb:95:80:2e:18:06:0f:07:e2:65:3d:6d:6d:
55:1c:a3:b4:8e:f3:a9:dc:eb:cf:ec:d2:36:b6:60:59:3d:54:
bf:71:75:fc:8b:c5:fe:69:59:08:37:b6:36:ac:40:78:64:5f:
9d:f8:73:91:80:e7:31:3b:6c:06:25:da:2d:bb:5d:3e:61:a4:
da:ff:ed:2f:3f:aa:54:55:a0:97:fd:17:74:a5:51:05:29:d4:
a9:40:ce:0e:88:8e:a1:50:92:6b:ee:2c:d1:bc:b8:c2:a9:b2:
7b:bf:01:5b:9a:c0:6e:7d:a1:78:b2:7f:18:40:ba:4a:b7:d5:
24:7e:73:f2:88:99:01:62:f5:4e:44:9f:e9:f8:93:1b:80:d1:
70:6c:82:b3:98:f7:0a:a7:89:a4:6a:d0:b4:84:e1:b7:df:87:
63:4f:ae:4b:2c:a9:3a:eb:4a:9f:33:c6:da:dc:e1:d5:cf:74:
56:e1:8f:8b:0e:07:e4:cc:2c:b9:1c:77:89:b3:e7:5a:73:f3:
af:72:fc:51:d0:dd:90:4e:3f:29:d5:89:f2:d4:99:12:47:c8:
b1:3b:3e:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATnhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTEwMDkyMjE1WhcNMjUwMjA3MDkyMjE1WjAYMRYw
FAYDVQQDEw02NzgwZTZjYi04MjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw5aFM3tBWR4YCNrCPE1JSpxJFbKUm6Kpe6nUcyt6Nnr9p1seTNVkKTle
YV4rhLiGTSLJMDZbYqkCcOiUYEbb7d3qauVPjyqIUjiYdvxjIddCs39imUTzkvyQ
FY1I9pX11lP0o1yU3UcZDBZoqvEO+lmhP4cz2y5Fgjjz2sOsxmD58rtTI7Cp0WXT
4DhBYH1+DFX1Rk/19of0DhjCSrIT1PIUTMWVMYXXOI6/2tU8S6ovoV8ZGAjztKCr
51r+BJzdpIdVVKSEruRUzWvHEpqZbk19oXyOzhGEDCrVaN4b1c1TzwLCGUxIS2TH
GuY9Pi6wT7ae6vF+DRN5GK4NHpuz7wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEwR
CiBCQaDq4YfNKQjhWnBusKXKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82Mzk4OTgxMkNGMzQxMUVGQjUxQUY0NDE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml4gMA0GCSqGSIb3DQEB
CwUAA4IBAQAxJTN4JgSzKfzPFH5A+V3RiB4cLzsHWOGlGD7WoO9Pc9v098N1Ub1C
SMuVgC4YBg8H4mU9bW1VHKO0jvOp3OvP7NI2tmBZPVS/cXX8i8X+aVkIN7Y2rEB4
ZF+d+HORgOcxO2wGJdotu10+YaTa/+0vP6pUVaCX/Rd0pVEFKdSpQM4OiI6hUJJr
7izRvLjCqbJ7vwFbmsBufaF4sn8YQLpKt9UkfnPyiJkBYvVORJ/p+JMbgNFwbIKz
mPcKp4mkatC0hOG334djT65LLKk660qfM8ba3OHVz3RW4Y+LDgfkzCy5HHeJs+da
c/OvcvxR0N2QTj8p1Yny1JkSR8ixOz4d
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:48 2025 by rpki-client