Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D74F6AEDD6611EFAFBA41AD762E951A.roa
File: 8D74F6AEDD6611EFAFBA41AD762E951A.roa (raw, json)
Hash identifier: jVFCdUBa5uREJc0z+52cjRoktkw03qb9BoSQ2nX9kd8=
Subject key identifier: 59:44:76:A2:DA:1A:74:06:67:3E:27:E5:0A:2A:C4:4E:AB:4D:A5:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D74F6AEDD6611EFAFBA41AD762E951A.roa
Signing time: Tue 28 Jan 2025 10:56:40 +0000
ROA not before: Tue 28 Jan 2025 10:56:36 +0000
ROA not after: Fri 14 Feb 2025 10:56:36 +0000
asID: 5065
IP address blocks: 154.86.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85206 (0x14cd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 10:56:36 2025 GMT
Not After : Feb 14 10:56:36 2025 GMT
Subject: CN=6798b7e8-410f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:4b:65:ad:ad:c0:02:e1:6d:0c:88:1a:63:
06:94:81:30:b7:e9:46:5f:8a:60:bf:46:59:d2:f3:
a3:1b:34:77:1a:07:33:c5:56:8a:70:db:c6:99:8f:
e7:1b:67:aa:27:21:13:29:26:3c:de:8c:fb:76:9c:
37:bb:67:db:62:66:2c:5e:9b:21:25:42:b1:ee:f9:
f1:f2:b6:72:2d:4f:85:a8:9f:81:92:13:cc:e0:70:
1e:a1:df:44:db:dd:7a:3c:4e:4d:ff:fe:76:87:a4:
eb:9f:cd:6a:0f:62:8e:25:28:b9:6a:1d:85:cd:0d:
c7:0d:9c:53:7c:a5:01:4e:4d:5b:5e:70:b4:82:44:
15:ed:84:ab:f3:a4:b8:5b:77:28:c7:bb:6f:da:21:
e9:f9:50:f0:86:9d:57:8f:a8:bb:92:b8:39:e6:13:
c1:09:8c:71:f1:a7:61:2b:b1:f5:36:59:1e:87:31:
ec:d7:cc:2c:99:4a:5c:af:7f:c1:13:7f:48:6a:25:
67:8d:10:00:50:f5:cd:cb:25:7e:7e:1c:91:a1:52:
4d:77:c8:a4:72:75:87:25:b9:8d:ff:df:2f:db:b6:
b9:41:07:26:21:7d:09:22:04:00:fa:b3:e1:18:63:
0f:68:46:24:48:c8:5a:d7:47:ce:cc:3a:ae:d2:01:
4c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:44:76:A2:DA:1A:74:06:67:3E:27:E5:0A:2A:C4:4E:AB:4D:A5:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D74F6AEDD6611EFAFBA41AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.11.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:e5:2f:5b:30:5f:90:56:df:3b:f2:a6:69:43:d1:d7:56:47:
bd:ec:85:d5:e6:36:99:20:47:e4:a1:3a:27:22:08:f4:5d:0d:
90:36:60:be:6b:f3:3c:fd:57:24:06:72:7e:fd:ef:bf:0f:e8:
e8:6d:49:40:10:80:73:d4:7b:73:eb:57:11:1b:c4:c4:75:7f:
80:2d:90:04:3d:2d:8a:52:2f:43:80:24:de:d6:84:ce:a6:5a:
fe:4e:03:fe:62:c4:6a:08:5e:bc:58:2e:56:30:cd:34:53:14:
59:f9:1c:09:d1:b4:75:e1:6b:77:8f:9d:13:cc:e6:8d:42:3b:
79:d0:0a:d5:6c:7f:f2:ee:9e:8b:55:1d:ac:03:c7:ea:f1:5c:
0a:e2:8d:c3:ee:42:8c:a3:29:eb:41:24:c3:02:03:a0:d9:21:
4e:07:a4:9c:2e:c3:40:09:54:7d:f8:6e:13:ad:97:25:96:6b:
7b:b0:de:26:7e:db:c2:e6:d8:90:7f:07:cc:2f:a1:9f:2d:97:
39:7f:fa:2a:ed:b6:c2:57:47:e3:a7:e4:00:8d:d5:72:a0:b5:
3b:71:94:f6:ed:84:b4:b1:74:39:9f:3b:ee:48:bd:6d:fa:88:
a3:6b:2b:fc:7a:20:08:8a:e1:65:33:cd:9d:06:f7:4e:bc:f9:
25:c3:ad:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUzWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI4MTA1NjM2WhcNMjUwMjE0MTA1NjM2WjAYMRYw
FAYDVQQDEw02Nzk4YjdlOC00MTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs3FLZa2twALhbQyIGmMGlIEwt+lGX4pgv0ZZ0vOjGzR3GgczxVaKcNvG
mY/nG2eqJyETKSY83oz7dpw3u2fbYmYsXpshJUKx7vnx8rZyLU+FqJ+BkhPM4HAe
od9E2916PE5N//52h6Trn81qD2KOJSi5ah2FzQ3HDZxTfKUBTk1bXnC0gkQV7YSr
86S4W3cox7tv2iHp+VDwhp1Xj6i7krg55hPBCYxx8adhK7H1NlkehzHs18wsmUpc
r3/BE39IaiVnjRAAUPXNyyV+fhyRoVJNd8ikcnWHJbmN/98v27a5QQcmIX0JIgQA
+rPhGGMPaEYkSMha10fOzDqu0gFMHwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFlE
dqLaGnQGZz4n5QoqxE6rTaUKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RDc0RjZBRURENjYxMUVGQUZCQTQxQUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlYLMA0GCSqGSIb3DQEB
CwUAA4IBAQDB5S9bMF+QVt878qZpQ9HXVke97IXV5jaZIEfkoTonIgj0XQ2QNmC+
a/M8/VckBnJ+/e+/D+jobUlAEIBz1Htz61cRG8TEdX+ALZAEPS2KUi9DgCTe1oTO
plr+TgP+YsRqCF68WC5WMM00UxRZ+RwJ0bR14Wt3j50TzOaNQjt50ArVbH/y7p6L
VR2sA8fq8VwK4o3D7kKMoynrQSTDAgOg2SFOB6ScLsNACVR9+G4TrZcllmt7sN4m
ftvC5tiQfwfML6GfLZc5f/oq7bbCV0fjp+QAjdVyoLU7cZT27YS0sXQ5nzvuSL1t
+oijayv8eiAIiuFlM82dBvdOvPklw602
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:44 2025 by rpki-client