Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78BAF0F6BEDA11EFA5284159762E951A.roa
File: 78BAF0F6BEDA11EFA5284159762E951A.roa (raw, json)
Hash identifier: gwD2WsZOY2UrX+/dhgSiOEEpwGOI8cn5IoT3QCHwysw=
Subject key identifier: B3:F1:87:8C:0E:6E:EA:B6:0F:EF:17:2E:23:49:7D:25:82:23:76:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78BAF0F6BEDA11EFA5284159762E951A.roa
Signing time: Fri 20 Dec 2024 13:58:21 +0000
ROA not before: Fri 20 Dec 2024 13:58:17 +0000
ROA not after: Sun 02 Feb 2025 13:58:17 +0000
asID: 49505
IP address blocks: 154.209.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72994 (0x11d22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 13:58:17 2024 GMT
Not After : Feb 2 13:58:17 2025 GMT
Subject: CN=676577fd-d9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:bb:77:7e:49:69:e0:80:46:07:e1:d5:55:
8d:87:e3:8b:7c:0b:90:86:bb:a3:57:70:98:10:f2:
65:9d:f5:cb:c9:14:3e:6a:ab:02:ce:a1:97:68:e8:
ae:94:b5:9d:65:44:a6:ac:5c:f4:26:9e:4b:44:86:
44:e0:3a:10:a4:f1:81:08:ef:6b:ad:a1:4e:a9:39:
35:6c:48:59:ac:51:7d:66:67:cc:9f:f7:4e:7f:a5:
01:bf:7d:f1:e8:63:c1:6b:ed:c6:28:1e:c8:17:69:
fd:09:e6:21:51:d4:ee:a7:4d:1c:d6:aa:c8:ed:55:
a3:e0:fa:42:8d:6e:87:9f:bc:e1:f6:d9:8e:2e:ea:
3c:29:10:80:e5:20:24:d7:e1:4a:15:53:65:cf:fc:
19:61:33:f7:ae:c8:60:c9:0f:a1:e2:b5:97:93:70:
33:d0:67:ee:b7:6e:0b:f7:fb:02:59:7a:b5:2e:d5:
11:ea:e6:ca:df:c0:f3:4d:ac:db:1d:56:1a:be:72:
f9:e6:bd:f2:85:c5:e7:60:ae:00:58:bb:74:7c:86:
59:4c:44:5e:3f:27:2a:0d:05:ef:eb:57:fa:8e:c3:
5a:0b:5e:46:96:bb:73:51:f2:a4:f2:60:62:e8:8f:
c1:af:f3:42:19:38:21:53:19:22:f7:32:46:7d:93:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F1:87:8C:0E:6E:EA:B6:0F:EF:17:2E:23:49:7D:25:82:23:76:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78BAF0F6BEDA11EFA5284159762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.208.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:b5:c9:42:97:03:14:33:de:1e:31:69:f4:5f:a3:ff:5f:93:
63:a0:76:ce:18:76:5b:be:4f:5c:20:d5:d7:87:b3:af:01:e8:
1d:3a:c9:55:c2:a4:53:a8:6e:2f:10:f9:ed:a4:7e:bb:0e:0a:
78:77:a2:77:68:cd:19:53:8c:d7:a8:f4:87:54:15:30:f5:c4:
0b:5e:a2:c7:79:1b:93:ff:67:29:4f:0c:7b:b6:66:1b:40:97:
0a:cc:ce:3c:49:61:5d:25:cd:cb:81:53:7b:15:a4:c8:f3:80:
d7:f2:78:cd:03:41:46:ee:ca:22:ed:18:2a:32:20:2e:de:17:
5e:db:22:be:86:ae:4c:95:d6:cb:52:fe:83:41:bb:92:1f:8b:
2b:6e:58:33:d3:0f:67:8c:ee:51:94:cb:f3:91:d8:25:e3:91:
f0:8f:6c:3e:4b:cd:be:52:68:c9:80:42:f0:fb:52:83:8c:88:
1d:53:9f:e3:61:50:b1:ab:a7:ec:c6:b8:07:6d:f2:1a:10:c3:
6b:41:9a:77:c0:f6:02:c0:fb:95:de:72:c2:1c:22:18:d4:a0:
da:7a:1a:af:06:ee:aa:50:ef:22:bd:97:be:62:49:09:40:b9:
6e:8b:9d:98:7b:4a:89:03:25:c7:33:19:c5:b8:eb:1f:82:7a:
cc:1d:5a:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR0iMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIwMTM1ODE3WhcNMjUwMjAyMTM1ODE3WjAYMRYw
FAYDVQQDEw02NzY1NzdmZC1kOWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuAe7d35JaeCARgfh1VWNh+OLfAuQhrujV3CYEPJlnfXLyRQ+aqsCzqGX
aOiulLWdZUSmrFz0Jp5LRIZE4DoQpPGBCO9rraFOqTk1bEhZrFF9ZmfMn/dOf6UB
v33x6GPBa+3GKB7IF2n9CeYhUdTup00c1qrI7VWj4PpCjW6Hn7zh9tmOLuo8KRCA
5SAk1+FKFVNlz/wZYTP3rshgyQ+h4rWXk3Az0Gfut24L9/sCWXq1LtUR6ubK38Dz
TazbHVYavnL55r3yhcXnYK4AWLt0fIZZTERePycqDQXv61f6jsNaC15GlrtzUfKk
8mBi6I/Br/NCGTghUxki9zJGfZNG1wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLPx
h4wObuq2D+8XLiNJfSWCI3a4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OEJBRjBGNkJFREExMUVGQTUyODQxNTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmtHQMA0GCSqGSIb3DQEB
CwUAA4IBAQButclClwMUM94eMWn0X6P/X5NjoHbOGHZbvk9cINXXh7OvAegdOslV
wqRTqG4vEPntpH67Dgp4d6J3aM0ZU4zXqPSHVBUw9cQLXqLHeRuT/2cpTwx7tmYb
QJcKzM48SWFdJc3LgVN7FaTI84DX8njNA0FG7soi7RgqMiAu3hde2yK+hq5MldbL
Uv6DQbuSH4srblgz0w9njO5RlMvzkdgl45Hwj2w+S82+UmjJgELw+1KDjIgdU5/j
YVCxq6fsxrgHbfIaEMNrQZp3wPYCwPuV3nLCHCIY1KDaehqvBu6qUO8ivZe+YkkJ
QLlui52Ye0qJAyXHMxnFuOsfgnrMHVqH
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:59:08 2025 by rpki-client