Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/979DA4B2DFED11EFAA2345B5762E951A.roa
File: 979DA4B2DFED11EFAA2345B5762E951A.roa (raw, json)
Hash identifier: 5fEF88+RgUPP/vVui69IdyCPKtu5Lfsq8p7O0MRhjPM=
Subject key identifier: 66:F6:DE:41:27:60:F1:F3:58:CF:B7:AF:C6:1B:A3:E2:93:A4:17:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E09
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/979DA4B2DFED11EFAA2345B5762E951A.roa
Signing time: Fri 31 Jan 2025 16:08:22 +0000
ROA not before: Fri 31 Jan 2025 16:08:18 +0000
ROA not after: Thu 27 Feb 2025 16:08:18 +0000
asID: 54801
IP address blocks: 154.214.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85513 (0x14e09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 16:08:18 2025 GMT
Not After : Feb 27 16:08:18 2025 GMT
Subject: CN=679cf575-8e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:34:55:aa:a1:b8:2f:89:47:66:80:24:e2:
67:ec:0c:2b:6d:82:e1:62:1b:fd:b5:10:81:a4:76:
5a:33:9f:33:85:f3:31:dd:9f:c3:20:1e:77:3b:dd:
6a:7b:ca:f9:46:f9:6d:32:11:80:a3:81:19:82:15:
99:2d:96:95:32:85:9d:4a:33:b0:a0:ee:82:25:2f:
45:12:ea:e8:5c:ce:76:09:48:af:f4:5a:68:c3:e4:
50:2d:74:b7:5c:0c:40:83:d9:3f:a5:d1:ef:3f:9a:
b1:c3:ea:5f:f5:a3:9e:76:d4:be:7a:9d:06:de:b5:
19:2b:e6:19:e7:eb:01:10:5f:d2:c9:ca:0d:f7:33:
43:05:b4:51:96:07:f5:d1:18:72:d7:07:c2:ef:46:
85:54:dc:b0:3b:25:ca:e9:3c:ae:40:44:dc:49:37:
37:f7:bb:56:09:d1:72:09:1c:fc:d4:c0:d8:c2:cb:
28:04:d3:b9:96:fa:7c:2f:d3:19:a0:65:8d:eb:77:
43:c5:38:85:9a:51:13:61:eb:91:a8:3e:49:41:c3:
b6:2f:86:d1:19:e5:27:75:be:7a:56:fc:55:50:d3:
d7:b5:b8:d9:ec:a4:cc:6f:41:df:c6:50:90:f9:87:
48:fb:db:52:21:b6:c1:33:42:75:fb:b2:f5:9b:52:
d0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F6:DE:41:27:60:F1:F3:58:CF:B7:AF:C6:1B:A3:E2:93:A4:17:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/979DA4B2DFED11EFAA2345B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.32.0/19
Signature Algorithm: sha256WithRSAEncryption
96:86:52:67:42:c6:3a:a6:ae:0f:9e:68:e9:24:db:85:02:0d:
e4:07:ce:97:80:74:a1:25:37:5b:59:e8:b7:b7:c1:28:37:4f:
c0:b5:86:df:15:6b:99:9c:b9:96:2f:81:82:d3:b6:06:52:dc:
b8:51:b2:f9:8d:87:7a:ba:88:2b:e6:88:1b:df:69:0c:52:70:
89:4d:59:5b:e1:9f:7c:a4:e9:6a:06:ca:77:f1:23:3d:94:bf:
36:71:d7:2f:1f:e5:02:f0:d5:95:65:cf:c1:75:b0:ec:a1:0d:
92:6a:14:18:46:14:7e:13:da:8f:ac:15:68:ed:6f:f3:21:2c:
6a:44:7c:26:27:9c:25:9c:c3:e8:41:b0:18:9e:32:db:ae:d6:
88:66:ad:5b:f3:0d:4e:71:65:e4:6f:a7:51:53:da:a2:4e:14:
ab:1a:b0:0a:86:68:9b:a6:37:9c:52:ef:b1:1e:c8:6f:ad:91:
5f:1f:36:d3:d4:3d:40:c3:a5:aa:4e:0e:b8:3d:03:84:b8:c8:
ef:32:06:4c:67:64:ac:70:93:48:91:27:5f:18:46:78:5b:5b:
ae:01:2e:1f:9b:36:32:ed:98:c0:46:18:53:b2:d0:ee:26:4c:
1a:12:0d:f9:d1:e3:83:41:5b:14:89:2e:a3:6f:42:ee:ab:6c:
8b:38:06:a5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU4JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTMxMTYwODE4WhcNMjUwMjI3MTYwODE4WjAYMRYw
FAYDVQQDEw02NzljZjU3NS04ZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0Bg0VaqhuC+JR2aAJOJn7AwrbYLhYhv9tRCBpHZaM58zhfMx3Z/DIB53
O91qe8r5RvltMhGAo4EZghWZLZaVMoWdSjOwoO6CJS9FEuroXM52CUiv9Fpow+RQ
LXS3XAxAg9k/pdHvP5qxw+pf9aOedtS+ep0G3rUZK+YZ5+sBEF/SycoN9zNDBbRR
lgf10Rhy1wfC70aFVNywOyXK6TyuQETcSTc397tWCdFyCRz81MDYwssoBNO5lvp8
L9MZoGWN63dDxTiFmlETYeuRqD5JQcO2L4bRGeUndb56VvxVUNPXtbjZ7KTMb0Hf
xlCQ+YdI+9tSIbbBM0J1+7L1m1LQ2QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGb2
3kEnYPHzWM+3r8Ybo+KTpBcuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NzlEQTRCMkRGRUQxMUVGQUEyMzQ1QjU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmtYgMA0GCSqGSIb3DQEB
CwUAA4IBAQCWhlJnQsY6pq4PnmjpJNuFAg3kB86XgHShJTdbWei3t8EoN0/AtYbf
FWuZnLmWL4GC07YGUty4UbL5jYd6uogr5ogb32kMUnCJTVlb4Z98pOlqBsp38SM9
lL82cdcvH+UC8NWVZc/BdbDsoQ2SahQYRhR+E9qPrBVo7W/zISxqRHwmJ5wlnMPo
QbAYnjLbrtaIZq1b8w1OcWXkb6dRU9qiThSrGrAKhmibpjecUu+xHshvrZFfHzbT
1D1Aw6WqTg64PQOEuMjvMgZMZ2SscJNIkSdfGEZ4W1uuAS4fmzYy7ZjARhhTstDu
JkwaEg350eODQVsUiS6jb0Luq2yLOAal
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:59:25 2025 by rpki-client