Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BEC7CBEC8EC11EFB5682847762E951A.roa
File: 8BEC7CBEC8EC11EFB5682847762E951A.roa (raw, json)
Hash identifier: 37U9k9HL5Uvt72gBGkSeeHNieKfRq5UBVyNEtEq9J+A=
Subject key identifier: 61:01:E0:A1:8E:76:D3:2D:38:EC:34:AD:E3:F1:89:90:C8:22:8B:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01325D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BEC7CBEC8EC11EFB5682847762E951A.roa
Signing time: Thu 02 Jan 2025 09:32:56 +0000
ROA not before: Thu 02 Jan 2025 09:32:52 +0000
ROA not after: Thu 06 Feb 2025 09:32:52 +0000
asID: 214808
IP address blocks: 154.83.88.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78429 (0x1325d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 2 09:32:52 2025 GMT
Not After : Feb 6 09:32:52 2025 GMT
Subject: CN=67765d48-bb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b5:67:76:74:d8:e8:42:86:5f:c4:3c:5e:db:
4d:76:8f:74:03:74:35:5a:21:dd:ab:9e:c2:ee:da:
6f:81:69:e8:13:e6:db:3d:82:09:bf:78:0c:26:82:
27:75:a4:49:51:f1:f1:07:39:55:06:d3:41:7b:df:
d3:70:84:17:9f:e2:69:f0:7a:38:7c:26:f6:49:bd:
79:cf:94:1d:2b:9c:17:98:c7:6a:1f:ed:13:4a:f3:
89:b1:f9:a1:34:7f:d1:6d:9a:85:bd:10:26:5a:81:
b6:fc:ce:2f:d4:a9:19:cb:42:62:a0:04:cc:3c:0d:
62:5b:75:ef:f6:ca:05:21:83:1a:8b:12:6e:0b:6b:
44:54:23:8d:fb:0f:9d:d4:d5:25:d7:98:f8:a3:2e:
77:65:de:d2:e8:f0:c0:f5:86:97:5c:08:bc:46:5f:
66:f7:3b:77:1e:a8:6d:0a:43:a4:ef:62:dc:7b:2a:
87:aa:d2:43:00:3e:a7:39:dc:ca:d9:68:01:eb:35:
46:86:d4:d5:ae:3f:1d:33:d7:5f:39:2a:29:9b:a1:
81:aa:e7:46:5c:2b:1f:b0:39:5c:df:b0:86:7a:2a:
04:24:8e:38:06:e6:50:58:fb:01:b2:ed:16:45:51:
cf:c7:9c:f6:c4:0b:bb:ac:ac:ea:14:da:fc:5b:a3:
a4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:01:E0:A1:8E:76:D3:2D:38:EC:34:AD:E3:F1:89:90:C8:22:8B:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BEC7CBEC8EC11EFB5682847762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
33:da:1f:ae:3d:9c:14:17:a3:98:bb:5e:38:42:9b:df:af:6d:
b6:af:67:6e:98:6d:3d:dd:96:2b:7a:c9:1c:1f:cb:42:58:99:
d2:c0:ff:f3:7e:c9:7b:fe:47:07:6b:51:1b:26:7e:4f:e3:b6:
c0:ab:b3:0a:9d:e5:20:77:19:f2:19:d8:66:98:a1:7d:ba:d3:
6c:0b:be:32:f3:3d:9c:75:38:89:7c:a9:71:f2:f1:57:04:b7:
85:1d:46:d6:60:28:73:ef:bd:00:f7:79:e8:70:8f:4f:a8:9b:
17:0b:20:fe:44:e1:96:6c:31:cb:ad:9e:36:d6:32:54:76:24:
5c:50:79:74:70:52:40:83:dc:42:f0:30:99:cc:7a:04:bd:f8:
8f:20:77:13:99:85:9c:2b:2c:e7:b2:07:c9:99:52:5a:f5:c1:
31:7d:8a:df:7f:7c:a7:7a:28:19:f5:b1:d3:4a:ae:61:7b:ed:
88:86:87:f3:02:6f:02:bf:23:02:3f:c3:c7:ae:c0:0a:5c:4b:
b0:a5:a0:02:b5:a5:a3:69:c5:f7:d7:05:70:58:69:89:fc:54:
16:e5:22:5e:dc:46:f1:d1:7d:b0:ff:6f:8e:73:9c:35:c0:2e:
48:c6:29:ed:6b:40:64:4c:5a:8b:ae:67:c1:80:b7:8d:62:9f:
d8:dc:92:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATJdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMDkzMjUyWhcNMjUwMjA2MDkzMjUyWjAYMRYw
FAYDVQQDEw02Nzc2NWQ0OC1iYjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA17VndnTY6EKGX8Q8XttNdo90A3Q1WiHdq57C7tpvgWnoE+bbPYIJv3gM
JoIndaRJUfHxBzlVBtNBe9/TcIQXn+Jp8Ho4fCb2Sb15z5QdK5wXmMdqH+0TSvOJ
sfmhNH/RbZqFvRAmWoG2/M4v1KkZy0JioATMPA1iW3Xv9soFIYMaixJuC2tEVCON
+w+d1NUl15j4oy53Zd7S6PDA9YaXXAi8Rl9m9zt3HqhtCkOk72LceyqHqtJDAD6n
OdzK2WgB6zVGhtTVrj8dM9dfOSopm6GBqudGXCsfsDlc37CGeioEJI44BuZQWPsB
su0WRVHPx5z2xAu7rKzqFNr8W6Ok6QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGEB
4KGOdtMtOOw0rePxiZDIIou3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QkVDN0NCRUM4RUMxMUVGQjU2ODI4NDc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlNYMA0GCSqGSIb3DQEB
CwUAA4IBAQAz2h+uPZwUF6OYu144Qpvfr222r2dumG093ZYreskcH8tCWJnSwP/z
fsl7/kcHa1EbJn5P47bAq7MKneUgdxnyGdhmmKF9utNsC74y8z2cdTiJfKlx8vFX
BLeFHUbWYChz770A93nocI9PqJsXCyD+ROGWbDHLrZ421jJUdiRcUHl0cFJAg9xC
8DCZzHoEvfiPIHcTmYWcKyznsgfJmVJa9cExfYrff3yneigZ9bHTSq5he+2Ihofz
Am8CvyMCP8PHrsAKXEuwpaACtaWjacX31wVwWGmJ/FQW5SJe3Ebx0X2w/2+Oc5w1
wC5Ixinta0BkTFqLrmfBgLeNYp/Y3JJc
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:00 2025 by rpki-client