Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94EB0F56C29D11EF9256C5AC762E951A.roa
File: 94EB0F56C29D11EF9256C5AC762E951A.roa (raw, json)
Hash identifier: MntOmz+xub7H7mcmaE7p82IOBWyHpZWE5g7IomXmUqY=
Subject key identifier: B0:F3:6C:27:E8:08:3E:F3:A4:9D:4D:30:43:12:2F:A5:AB:4C:2E:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012516
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94EB0F56C29D11EF9256C5AC762E951A.roa
Signing time: Wed 25 Dec 2024 08:52:34 +0000
ROA not before: Wed 25 Dec 2024 08:52:30 +0000
ROA not after: Sun 09 Feb 2025 08:52:30 +0000
asID: 138915
IP address blocks: 154.223.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75030 (0x12516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 08:52:30 2024 GMT
Not After : Feb 9 08:52:30 2025 GMT
Subject: CN=676bc7d1-4cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:97:ef:3b:f4:a1:47:5b:ac:a3:aa:82:e8:
89:7e:93:52:31:a8:b8:d5:8b:f2:07:5f:75:7f:a4:
1a:f7:ce:fa:a2:30:ed:d3:9c:b6:d1:e9:a6:aa:48:
f9:7e:12:00:48:02:1c:4b:88:7b:61:30:75:85:f1:
f4:16:c3:c1:fc:95:72:4f:9c:76:b7:2f:8e:72:72:
1a:64:3b:88:3b:29:99:2d:8d:c6:1f:3f:c0:58:e1:
08:3b:81:56:18:e2:21:11:da:db:d7:c3:4c:f7:1c:
9d:a3:54:db:38:7c:8a:2f:f9:71:6b:86:0d:1f:37:
b7:bc:6d:ff:04:79:2e:d8:04:96:6c:d1:27:d3:a0:
c5:d2:f5:d4:76:11:d1:b4:4d:f3:9a:cc:15:a7:01:
11:b5:cd:da:74:82:79:4a:b9:d4:ec:66:25:2c:57:
bb:2f:1c:62:4d:60:57:15:bc:a2:ab:13:a6:40:76:
eb:18:cd:2a:f5:65:06:67:39:a8:08:a5:d6:3b:62:
e6:58:bd:cd:74:7d:e7:73:36:7a:fb:2c:c0:97:cf:
91:95:02:35:ea:e8:05:ac:9a:a5:73:66:4c:4a:f3:
f5:97:d2:88:97:e9:e3:f8:30:24:f3:5f:d5:9c:2d:
50:bf:8c:06:f7:8d:15:f5:d4:38:8e:56:27:82:66:
4f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F3:6C:27:E8:08:3E:F3:A4:9D:4D:30:43:12:2F:A5:AB:4C:2E:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94EB0F56C29D11EF9256C5AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.51.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b7:44:17:ae:48:eb:cc:b4:1c:09:08:df:b5:57:86:ac:1f:
43:fd:3e:54:ae:5f:a2:ec:85:48:00:d6:1f:ea:17:e6:08:c7:
47:86:80:08:01:ba:4c:8f:33:6e:cc:ba:67:23:15:b4:7c:c2:
e0:0e:b9:33:bc:60:3d:85:5c:41:22:d4:af:00:1b:17:28:f3:
90:23:d3:8c:72:99:72:e2:1b:66:02:93:83:7a:c8:69:15:64:
fb:8f:10:2e:ab:5a:17:66:63:46:57:dd:ab:04:c4:2d:61:ba:
ef:98:a3:6c:e9:de:b5:15:77:9a:ad:d9:b5:85:50:d9:76:44:
9a:ac:98:f9:61:87:20:fa:0b:e4:41:b7:c0:4e:3f:c6:c1:a5:
c8:84:ec:94:84:3b:e8:d5:3e:67:b1:0b:87:44:71:75:14:2d:
2a:51:fb:ec:91:63:5e:ff:ef:55:b4:d6:25:ce:f8:c4:4b:f1:
5e:80:23:ab:25:6e:7e:db:70:4d:50:9d:57:3a:e3:9e:f8:35:
67:39:7d:24:5a:a2:31:18:46:db:f4:8b:7d:f4:57:49:ab:bc:
5a:60:d7:2b:6e:38:6e:06:58:fe:b7:30:c7:b3:4f:98:57:ee:
12:58:55:0f:ed:c1:76:c2:e0:38:ec:86:19:2f:68:62:aa:24:
5b:bf:bd:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASUWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDg1MjMwWhcNMjUwMjA5MDg1MjMwWjAYMRYw
FAYDVQQDEw02NzZiYzdkMS00Y2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuaKX7zv0oUdbrKOqguiJfpNSMai41YvyB191f6Qa9876ojDt05y20emm
qkj5fhIASAIcS4h7YTB1hfH0FsPB/JVyT5x2ty+OcnIaZDuIOymZLY3GHz/AWOEI
O4FWGOIhEdrb18NM9xydo1TbOHyKL/lxa4YNHze3vG3/BHku2ASWbNEn06DF0vXU
dhHRtE3zmswVpwERtc3adIJ5SrnU7GYlLFe7LxxiTWBXFbyiqxOmQHbrGM0q9WUG
ZzmoCKXWO2LmWL3NdH3nczZ6+yzAl8+RlQI16ugFrJqlc2ZMSvP1l9KIl+nj+DAk
81/VnC1Qv4wG940V9dQ4jlYngmZPaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLDz
bCfoCD7zpJ1NMEMSL6WrTC4jMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NEVCMEY1NkMyOUQxMUVGOTI1NkM1QUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8zMA0GCSqGSIb3DQEB
CwUAA4IBAQAWt0QXrkjrzLQcCQjftVeGrB9D/T5Url+i7IVIANYf6hfmCMdHhoAI
AbpMjzNuzLpnIxW0fMLgDrkzvGA9hVxBItSvABsXKPOQI9OMcply4htmApODeshp
FWT7jxAuq1oXZmNGV92rBMQtYbrvmKNs6d61FXeardm1hVDZdkSarJj5YYcg+gvk
QbfATj/GwaXIhOyUhDvo1T5nsQuHRHF1FC0qUfvskWNe/+9VtNYlzvjES/FegCOr
JW5+23BNUJ1XOuOe+DVnOX0kWqIxGEbb9It99FdJq7xaYNcrbjhuBlj+tzDHs0+Y
V+4SWFUP7cF2wuA47IYZL2hiqiRbv71p
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:16:44 2025 by rpki-client