Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/797AA4E8B21C11EF882560BA762E951A.roa
File: 797AA4E8B21C11EF882560BA762E951A.roa (raw, json)
Hash identifier: RZ1kZ6Jdurt091eCBjY1ZuUwSd6MZIu22DG3Q/8M1GI=
Subject key identifier: 50:C3:E7:11:5A:8C:93:7A:79:E6:56:2A:1F:5C:7E:15:82:AB:DD:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/797AA4E8B21C11EF882560BA762E951A.roa
Signing time: Wed 04 Dec 2024 08:48:04 +0000
ROA not before: Wed 04 Dec 2024 08:48:00 +0000
ROA not after: Sat 01 Feb 2025 08:48:00 +0000
asID: 138915
IP address blocks: 154.94.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71670 (0x117f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 08:48:00 2024 GMT
Not After : Feb 1 08:48:00 2025 GMT
Subject: CN=67501744-38fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:59:aa:a1:33:49:e2:d6:55:22:20:a1:cf:
b7:f3:f1:0d:f5:bc:6f:3c:79:08:ca:be:8c:1c:df:
ac:5e:1e:67:eb:71:0c:60:ca:ec:fe:0d:b7:1c:65:
af:5e:df:3a:66:ff:4c:62:6d:63:49:c6:e7:75:68:
42:04:e7:65:48:2b:f5:70:c0:f6:ae:56:06:9c:a0:
c5:88:6d:6d:5a:2e:4d:c2:f7:de:77:88:ab:4e:56:
20:bf:41:44:fb:ef:6e:b4:e7:8d:96:2f:9b:c8:07:
fc:c1:45:9b:37:91:50:46:3a:77:89:0b:c1:8a:8b:
34:e7:71:38:e8:ad:3f:38:e1:15:8c:5a:e1:58:e7:
e6:91:3d:a6:14:ae:28:80:cc:e1:e9:d8:4d:29:40:
6b:ba:ea:0b:88:ef:df:2b:63:88:9e:ed:b6:20:da:
bd:03:9f:a1:b0:4d:67:9a:0e:37:bb:52:ba:86:55:
99:dc:fe:07:6a:28:83:7d:4b:e7:fd:98:45:cd:ef:
05:f6:89:c9:01:a9:a8:83:b5:a7:bf:ba:20:a1:61:
f8:32:fc:58:2b:ea:8b:49:a3:fa:73:8c:41:01:e9:
a5:cc:ba:66:2c:96:90:28:bf:b3:cb:7e:ea:c1:f1:
e5:ad:ae:42:6a:a3:bc:81:4d:15:9c:36:85:2f:ca:
a8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C3:E7:11:5A:8C:93:7A:79:E6:56:2A:1F:5C:7E:15:82:AB:DD:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/797AA4E8B21C11EF882560BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.125.0/24
Signature Algorithm: sha256WithRSAEncryption
33:e2:fe:f0:5b:99:cb:7b:c5:cf:f6:40:c1:1b:de:11:29:d9:
4d:e1:31:83:74:9c:3e:7c:e9:20:df:3f:70:42:51:ff:72:d8:
04:15:cb:8c:de:2a:53:db:03:78:ee:da:de:c9:95:5d:45:db:
6a:ee:14:21:23:10:1f:a4:5e:5a:96:e5:5e:9e:38:e6:70:d1:
e5:7c:39:11:7c:a3:01:b0:db:56:17:38:fb:84:c5:83:19:03:
db:d2:ce:5a:81:89:49:e5:1d:2c:11:c6:9f:02:37:03:60:16:
f2:a0:f3:fe:57:ef:db:ec:6b:4b:58:4e:b0:66:52:40:3f:2c:
15:9b:fd:30:90:a8:17:03:3f:a8:49:24:ee:b9:12:2b:27:33:
cb:9e:76:92:0e:73:93:df:6c:52:bc:67:65:a8:41:cf:f3:7d:
fe:41:ce:53:a8:a1:88:6c:6a:c0:f7:6f:98:0d:8f:61:ee:89:
a4:f9:27:22:ee:ef:10:13:ce:e3:e0:43:8f:bb:a3:c6:8a:8f:
fb:12:4e:7d:38:cf:bf:62:0f:29:a6:6d:ac:3e:fa:41:1b:1e:
19:2f:e5:a8:9f:cf:ce:22:74:52:ff:e8:75:cd:2a:6a:a0:49:
94:97:00:ed:a7:6e:ef:b5:f1:d9:2e:60:0d:01:4d:1f:d4:d7:
bf:a3:e6:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARf2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjA0MDg0ODAwWhcNMjUwMjAxMDg0ODAwWjAYMRYw
FAYDVQQDEw02NzUwMTc0NC0zOGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAseNZqqEzSeLWVSIgoc+38/EN9bxvPHkIyr6MHN+sXh5n63EMYMrs/g23
HGWvXt86Zv9MYm1jScbndWhCBOdlSCv1cMD2rlYGnKDFiG1tWi5Nwvfed4irTlYg
v0FE++9utOeNli+byAf8wUWbN5FQRjp3iQvBios053E46K0/OOEVjFrhWOfmkT2m
FK4ogMzh6dhNKUBruuoLiO/fK2OInu22INq9A5+hsE1nmg43u1K6hlWZ3P4HaiiD
fUvn/ZhFze8F9onJAamog7Wnv7ogoWH4MvxYK+qLSaP6c4xBAemlzLpmLJaQKL+z
y37qwfHlra5CaqO8gU0VnDaFL8qojQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFDD
5xFajJN6eeZWKh9cfhWCq922MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OTdBQTRFOEIyMUMxMUVGODgyNTYwQkE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml59MA0GCSqGSIb3DQEB
CwUAA4IBAQAz4v7wW5nLe8XP9kDBG94RKdlN4TGDdJw+fOkg3z9wQlH/ctgEFcuM
3ipT2wN47treyZVdRdtq7hQhIxAfpF5aluVenjjmcNHlfDkRfKMBsNtWFzj7hMWD
GQPb0s5agYlJ5R0sEcafAjcDYBbyoPP+V+/b7GtLWE6wZlJAPywVm/0wkKgXAz+o
SSTuuRIrJzPLnnaSDnOT32xSvGdlqEHP833+Qc5TqKGIbGrA92+YDY9h7omk+Sci
7u8QE87j4EOPu6PGio/7Ek59OM+/Yg8ppm2sPvpBGx4ZL+Won8/OInRS/+h1zSpq
oEmUlwDtp27vtfHZLmANAU0f1Ne/o+bn
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:20:48 2025 by rpki-client