Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81AF8BA0C29E11EFB49EE8B2762E951A.roa
File: 81AF8BA0C29E11EFB49EE8B2762E951A.roa (raw, json)
Hash identifier: 7EziSJtyFqDnpM53Dk6KwpUsJWG2Cc9nA9LK+QVF+IM=
Subject key identifier: CF:B3:BF:05:CD:B0:0D:AE:6F:66:7D:4F:9A:27:D1:34:46:D5:39:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012520
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81AF8BA0C29E11EFB49EE8B2762E951A.roa
Signing time: Wed 25 Dec 2024 08:59:11 +0000
ROA not before: Wed 25 Dec 2024 08:59:07 +0000
ROA not after: Sun 09 Feb 2025 08:59:07 +0000
asID: 63139
IP address blocks: 154.223.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75040 (0x12520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 08:59:07 2024 GMT
Not After : Feb 9 08:59:07 2025 GMT
Subject: CN=676bc95f-e045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:14:f7:4b:29:04:d6:9e:31:c7:1e:8b:14:
15:44:52:3b:b8:8f:ea:aa:dd:45:db:fc:12:67:d0:
5a:9b:d6:fe:b5:ce:fd:6d:54:bf:af:2e:08:4d:4a:
1c:20:eb:09:56:b0:db:dc:63:a2:3d:c6:a6:b2:7d:
ec:9d:21:7b:a4:45:27:64:be:1a:31:db:6e:de:9d:
c9:64:2d:6f:bf:13:df:5e:74:eb:67:1c:7c:42:96:
ab:90:e4:fd:09:a0:b0:4c:fa:07:f4:3b:f3:f5:16:
14:c5:cc:98:33:55:8a:d0:ce:17:ac:0a:42:bb:6c:
8b:80:19:dc:99:bc:74:83:51:8e:b7:2b:52:44:8f:
4f:58:f7:f2:38:04:13:53:5a:43:10:51:f9:77:7c:
34:6b:a7:c0:fe:5f:ba:46:27:70:51:7a:7c:9c:88:
71:9a:19:11:b7:bd:54:ca:63:fe:37:cc:15:72:3c:
bc:0e:b6:93:09:b7:38:93:76:34:59:60:61:c2:dd:
e3:c0:13:b3:1d:f4:36:ce:80:2e:2b:06:63:26:5f:
47:46:26:5b:0f:9a:a5:9e:cb:c8:ef:fe:2c:cb:92:
5f:5d:1f:de:a2:9e:35:e3:7e:be:b4:ad:97:79:e6:
8e:89:0e:43:24:af:53:b7:c8:c8:63:85:7d:ba:d6:
f9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B3:BF:05:CD:B0:0D:AE:6F:66:7D:4F:9A:27:D1:34:46:D5:39:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81AF8BA0C29E11EFB49EE8B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.36.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:96:a0:b4:d6:ba:53:d7:5c:91:ac:7e:96:d7:df:44:70:7d:
09:21:6b:b2:41:15:8a:1f:be:13:14:ac:11:05:be:a4:69:2a:
e4:6b:75:d4:e4:99:49:90:a0:b7:1d:94:8d:30:df:ad:20:73:
62:ab:da:3c:f9:c6:72:aa:37:e3:71:b7:71:b7:79:16:4c:ec:
d5:90:14:e9:66:f4:a7:46:60:b5:79:6d:67:ab:64:cd:9e:fd:
3c:23:c6:7b:ad:28:3c:29:47:25:ee:2e:15:da:15:72:05:b2:
b0:64:d2:37:82:f4:1a:d8:48:ec:13:2a:61:1b:ac:1c:6a:66:
52:fb:83:f2:51:c1:f4:05:40:2b:fb:ac:b5:f0:fc:26:c2:26:
80:ba:c8:eb:2a:81:c0:69:81:ae:49:e1:13:d5:d4:ed:2e:26:
4e:6e:ef:f3:c8:51:de:87:76:8c:dd:58:5b:35:8c:c7:b9:91:
71:b5:9f:d5:d8:f6:c4:1e:07:50:85:c7:2e:3f:70:2d:0d:72:
48:26:8a:16:33:42:a2:6b:df:a8:59:98:b3:35:f7:5c:f7:14:
2e:6e:38:e3:f5:dc:13:16:da:67:8f:ff:35:36:ab:6a:9b:ee:
6f:75:5d:11:cf:d1:ab:20:e2:32:42:a6:1d:c9:df:c2:07:f6:
54:b3:f4:8a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASUgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDg1OTA3WhcNMjUwMjA5MDg1OTA3WjAYMRYw
FAYDVQQDEw02NzZiYzk1Zi1lMDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv78U90spBNaeMcceixQVRFI7uI/qqt1F2/wSZ9Bam9b+tc79bVS/ry4I
TUocIOsJVrDb3GOiPcamsn3snSF7pEUnZL4aMdtu3p3JZC1vvxPfXnTrZxx8Qpar
kOT9CaCwTPoH9Dvz9RYUxcyYM1WK0M4XrApCu2yLgBncmbx0g1GOtytSRI9PWPfy
OAQTU1pDEFH5d3w0a6fA/l+6RidwUXp8nIhxmhkRt71UymP+N8wVcjy8DraTCbc4
k3Y0WWBhwt3jwBOzHfQ2zoAuKwZjJl9HRiZbD5qlnsvI7/4sy5JfXR/eop41436+
tK2XeeaOiQ5DJK9Tt8jIY4V9utb5oQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM+z
vwXNsA2ub2Z9T5on0TRG1Tk1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MUFGOEJBMEMyOUUxMUVGQjQ5RUU4QjI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8kMA0GCSqGSIb3DQEB
CwUAA4IBAQCtlqC01rpT11yRrH6W199EcH0JIWuyQRWKH74TFKwRBb6kaSrka3XU
5JlJkKC3HZSNMN+tIHNiq9o8+cZyqjfjcbdxt3kWTOzVkBTpZvSnRmC1eW1nq2TN
nv08I8Z7rSg8KUcl7i4V2hVyBbKwZNI3gvQa2EjsEyphG6wcamZS+4PyUcH0BUAr
+6y18PwmwiaAusjrKoHAaYGuSeET1dTtLiZObu/zyFHeh3aM3VhbNYzHuZFxtZ/V
2PbEHgdQhccuP3AtDXJIJooWM0Kia9+oWZizNfdc9xQubjjj9dwTFtpnj/81Nqtq
m+5vdV0Rz9GrIOIyQqYdyd/CB/ZUs/SK
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:56:37 2025 by rpki-client