Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94707030ACA311EF8D0593AF762E951A.roa
File: 94707030ACA311EF8D0593AF762E951A.roa (raw, json)
Hash identifier: Yncu97xTGIFgXDUhgTCJC6/w0ypL4tCn0+Gj3ePrHJo=
Subject key identifier: D5:15:B2:FC:2B:13:48:EF:00:D7:C9:1E:D6:5E:F4:B7:A5:68:F5:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011444
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94707030ACA311EF8D0593AF762E951A.roa
Signing time: Wed 27 Nov 2024 09:40:04 +0000
ROA not before: Wed 27 Nov 2024 09:40:00 +0000
ROA not after: Tue 11 Feb 2025 09:40:00 +0000
asID: 399989
IP address blocks: 154.194.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70724 (0x11444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 09:40:00 2024 GMT
Not After : Feb 11 09:40:00 2025 GMT
Subject: CN=6746e8f4-4bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:ef:17:a7:54:b7:70:47:c7:62:f9:9c:7e:
43:db:26:f4:dd:24:2c:f4:4b:19:93:87:07:ff:6f:
f5:f2:c2:e5:f6:8a:fe:26:11:8d:4d:c6:48:bf:f3:
10:a4:9c:ba:cf:88:0d:3e:91:5c:29:26:76:43:8a:
1b:db:39:22:ff:f1:d1:23:50:9c:36:67:bc:cf:e9:
f3:0f:88:d9:e6:81:46:cf:37:70:3f:e8:b3:79:4f:
ab:17:eb:13:96:5d:60:5b:1f:60:99:4c:c8:6e:d3:
0f:6c:88:db:cc:0b:68:6d:c7:12:f0:f4:f9:8d:de:
3c:dd:71:6e:19:82:d3:db:d1:5c:f1:e9:b7:35:3b:
f6:25:e1:9f:a1:84:41:7c:1e:40:52:6d:8c:d4:13:
a9:94:2a:b3:9c:44:6b:08:3a:2c:45:72:b5:b8:7b:
2b:f2:45:0c:91:e0:81:5f:4b:ff:ef:d3:a7:04:55:
2b:b7:df:9b:7b:27:96:c7:9f:58:6d:bb:e1:b8:87:
c0:9c:89:4a:07:21:04:e5:be:37:65:55:d6:f0:b4:
23:1b:9a:70:fc:75:ef:5e:38:0e:77:a5:1d:57:1d:
d7:c6:fa:9c:0b:df:f0:b7:17:5f:49:95:d2:48:4e:
3d:73:e9:02:10:d6:b9:9c:38:9e:a2:27:25:ca:ee:
53:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:15:B2:FC:2B:13:48:EF:00:D7:C9:1E:D6:5E:F4:B7:A5:68:F5:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94707030ACA311EF8D0593AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:33:78:de:8a:ca:8e:a5:34:57:87:1a:69:8f:1b:07:18:b8:
e7:ea:13:60:25:ac:bc:94:08:4b:c2:39:ba:aa:98:f8:8f:37:
5e:be:ca:43:bd:4e:d8:90:47:4b:4b:66:c7:25:d7:d0:f2:bb:
14:2f:72:97:7b:a2:4f:56:f7:9e:1e:27:4f:6c:d6:d9:3d:08:
3d:b9:19:39:01:4e:13:0b:7b:10:db:22:34:0a:7a:77:7d:47:
fe:d2:b8:77:3f:fd:f3:0e:ca:57:39:17:8a:ae:04:a5:44:b5:
63:54:7a:d3:a9:04:9a:f3:84:62:00:07:1f:f6:6f:64:e1:89:
09:9a:51:5a:b3:2e:fc:aa:39:78:f5:5d:19:d8:3f:3d:13:1c:
e1:d5:75:3a:42:81:d4:3a:e4:09:3b:0f:77:df:e5:17:67:f6:
6a:36:b8:75:32:ba:26:52:a4:48:f6:5b:1c:55:38:e5:40:c2:
a4:c7:12:67:de:56:e2:f8:e5:f1:b9:3b:bf:53:60:c1:13:d5:
5e:d4:4c:08:8d:77:5e:3b:bf:b7:ec:eb:66:40:62:ea:9a:a6:
59:08:f4:30:6d:b0:d8:3d:2a:d2:c7:47:8e:cc:4b:7d:95:e0:
28:27:b1:e9:c2:34:9b:0d:a5:97:bf:c5:bc:99:1a:7c:6d:00:
97:b9:ac:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARREMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTI3MDk0MDAwWhcNMjUwMjExMDk0MDAwWjAYMRYw
FAYDVQQDEw02NzQ2ZThmNC00YmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv+jvF6dUt3BHx2L5nH5D2yb03SQs9EsZk4cH/2/18sLl9or+JhGNTcZI
v/MQpJy6z4gNPpFcKSZ2Q4ob2zki//HRI1CcNme8z+nzD4jZ5oFGzzdwP+izeU+r
F+sTll1gWx9gmUzIbtMPbIjbzAtobccS8PT5jd483XFuGYLT29Fc8em3NTv2JeGf
oYRBfB5AUm2M1BOplCqznERrCDosRXK1uHsr8kUMkeCBX0v/79OnBFUrt9+beyeW
x59YbbvhuIfAnIlKByEE5b43ZVXW8LQjG5pw/HXvXjgOd6UdVx3XxvqcC9/wtxdf
SZXSSE49c+kCENa5nDieoiclyu5TWQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNUV
svwrE0jvANfJHtZe9LelaPUDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NDcwNzAzMEFDQTMxMUVGOEQwNTkzQUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsIQMA0GCSqGSIb3DQEB
CwUAA4IBAQAuM3jeisqOpTRXhxppjxsHGLjn6hNgJay8lAhLwjm6qpj4jzdevspD
vU7YkEdLS2bHJdfQ8rsUL3KXe6JPVveeHidPbNbZPQg9uRk5AU4TC3sQ2yI0Cnp3
fUf+0rh3P/3zDspXOReKrgSlRLVjVHrTqQSa84RiAAcf9m9k4YkJmlFasy78qjl4
9V0Z2D89Exzh1XU6QoHUOuQJOw933+UXZ/ZqNrh1MromUqRI9lscVTjlQMKkxxJn
3lbi+OXxuTu/U2DBE9Ve1EwIjXdeO7+37OtmQGLqmqZZCPQwbbDYPSrSx0eOzEt9
leAoJ7HpwjSbDaWXv8W8mRp8bQCXuawD
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:08:17 2025 by rpki-client