Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/865E0BC8BB7711EF8B5BF791762E951A.roa
File: 865E0BC8BB7711EF8B5BF791762E951A.roa (raw, json)
Hash identifier: qLcN5dgsgywdHgAayMXrTiS4Yl8AQA8zOmoHrH6JCKE=
Subject key identifier: D3:74:ED:74:7D:97:B8:36:B4:18:10:68:15:14:13:E2:20:DC:58:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011B88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/865E0BC8BB7711EF8B5BF791762E951A.roa
Signing time: Mon 16 Dec 2024 06:32:30 +0000
ROA not before: Mon 16 Dec 2024 06:32:27 +0000
ROA not after: Tue 04 Mar 2025 06:32:27 +0000
asID: 142403
IP address blocks: 154.221.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72584 (0x11b88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 16 06:32:27 2024 GMT
Not After : Mar 4 06:32:27 2025 GMT
Subject: CN=675fc97e-30c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:75:aa:01:21:3b:c7:ec:5c:23:ac:df:46:6b:
30:75:da:a4:a9:6e:93:fb:7f:d2:8f:a8:89:99:29:
23:82:0c:30:25:39:8a:e0:06:18:89:67:5b:35:60:
a1:ed:31:35:6e:77:ad:ea:b7:0e:1e:be:9b:c2:3c:
13:59:81:d5:a2:67:aa:d5:1d:07:0e:e5:09:95:45:
92:34:46:f0:94:8a:0f:73:bc:74:90:c1:ef:de:23:
ca:61:7e:42:da:ca:45:70:c0:d1:89:11:36:49:0d:
59:aa:ae:08:1e:eb:01:d6:dc:c4:aa:07:91:a5:72:
94:60:0d:c8:3c:c7:37:6e:c8:c6:93:81:0a:2b:1a:
65:4c:f9:7c:05:7d:7f:f9:32:f1:fe:f3:50:ad:8e:
a1:b7:b7:dc:2f:94:f6:66:b9:a6:78:19:83:a0:e1:
f2:61:fa:2b:e7:93:e1:ad:dd:b4:67:8d:b4:ad:0c:
51:02:68:b0:e3:5f:73:bf:fa:0c:33:ae:a9:49:1e:
42:8c:df:4d:d5:4a:af:6b:6e:2f:77:38:17:80:ac:
5d:0d:cd:e4:f2:a7:3c:bf:17:e7:62:8a:7c:ef:b5:
ce:b8:fd:d8:dc:8c:2a:e0:c0:31:f6:dc:21:c3:01:
a7:19:b7:bb:86:5b:0a:92:8a:a2:9c:e0:1d:9b:af:
d4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:74:ED:74:7D:97:B8:36:B4:18:10:68:15:14:13:E2:20:DC:58:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/865E0BC8BB7711EF8B5BF791762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.16.0/20
Signature Algorithm: sha256WithRSAEncryption
97:27:10:80:6e:a4:92:2b:c2:eb:cf:f4:4f:10:71:18:02:97:
b4:8e:4e:5c:2e:ed:9b:ab:27:6b:55:5f:72:ee:a5:12:11:3c:
5d:48:27:66:3e:7f:72:a4:e8:d1:b9:b1:9b:94:a7:31:f3:83:
c1:31:8f:b3:8c:57:19:24:b4:73:e4:0d:6e:21:2e:2c:b3:c0:
77:c9:23:88:52:52:3a:d2:91:de:95:3e:5c:32:10:8f:49:68:
98:6a:9b:a3:cc:9f:cc:2c:b4:b6:a1:17:06:67:fa:da:5b:7e:
4e:7b:b8:dd:6c:5c:15:03:54:db:82:7e:9c:87:ee:08:57:f3:
4d:95:82:49:2d:95:01:91:32:ef:33:95:48:f6:6c:6c:9d:f8:
18:bf:e5:44:8d:d2:15:1a:7b:ff:8e:ad:14:ab:3d:ea:fc:0d:
ae:e6:fb:64:08:f4:0f:3a:a3:b1:da:bd:fc:95:9a:1f:32:fd:
7e:3c:c6:65:39:9f:d1:4d:df:93:2f:e2:f5:24:5d:12:c2:9b:
d2:0a:de:7c:79:53:87:8f:ff:c7:fc:a4:11:0e:76:23:02:28:
42:5a:de:25:fb:d3:e4:e6:99:b6:71:12:2d:74:22:23:a4:d3:
f0:c0:45:c2:8c:05:87:5b:52:85:57:47:54:aa:6c:2b:24:60:
b8:d0:a5:ad
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARuIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjE2MDYzMjI3WhcNMjUwMzA0MDYzMjI3WjAYMRYw
FAYDVQQDEw02NzVmYzk3ZS0zMGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5XWqASE7x+xcI6zfRmswddqkqW6T+3/Sj6iJmSkjggwwJTmK4AYYiWdb
NWCh7TE1bnet6rcOHr6bwjwTWYHVomeq1R0HDuUJlUWSNEbwlIoPc7x0kMHv3iPK
YX5C2spFcMDRiRE2SQ1Zqq4IHusB1tzEqgeRpXKUYA3IPMc3bsjGk4EKKxplTPl8
BX1/+TLx/vNQrY6ht7fcL5T2ZrmmeBmDoOHyYfor55Phrd20Z420rQxRAmiw419z
v/oMM66pSR5CjN9N1Uqva24vdzgXgKxdDc3k8qc8vxfnYop877XOuP3Y3Iwq4MAx
9twhwwGnGbe7hlsKkoqinOAdm6/UoQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNN0
7XR9l7g2tBgQaBUUE+Ig3FixMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NjVFMEJDOEJCNzcxMUVGOEI1QkY3OTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmt0QMA0GCSqGSIb3DQEB
CwUAA4IBAQCXJxCAbqSSK8Lrz/RPEHEYApe0jk5cLu2bqydrVV9y7qUSETxdSCdm
Pn9ypOjRubGblKcx84PBMY+zjFcZJLRz5A1uIS4ss8B3ySOIUlI60pHelT5cMhCP
SWiYapujzJ/MLLS2oRcGZ/raW35Oe7jdbFwVA1Tbgn6ch+4IV/NNlYJJLZUBkTLv
M5VI9mxsnfgYv+VEjdIVGnv/jq0Uqz3q/A2u5vtkCPQPOqOx2r38lZofMv1+PMZl
OZ/RTd+TL+L1JF0SwpvSCt58eVOHj//H/KQRDnYjAihCWt4l+9Pk5pm2cRItdCIj
pNPwwEXCjAWHW1KFV0dUqmwrJGC40KWt
-----END CERTIFICATE-----
Generated at Tue Apr 29 01:18:31 2025 by rpki-client