Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/996C88E8CADB11EFB22FB286762E951A.roa
File: 996C88E8CADB11EFB22FB286762E951A.roa (raw, json)
Hash identifier: q/kIayG70tk+YV+w+E2KeFWHFPaMkRXbAyTOwN4i15k=
Subject key identifier: 0E:0D:F4:9B:FA:BC:C0:80:90:B2:55:CE:5B:F7:8B:BC:BD:10:B6:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013551
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/996C88E8CADB11EFB22FB286762E951A.roa
Signing time: Sat 04 Jan 2025 20:36:39 +0000
ROA not before: Sun 05 Jan 2025 20:36:35 +0000
ROA not after: Sat 08 Feb 2025 20:36:35 +0000
asID: 272854
IP address blocks: 154.194.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79185 (0x13551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 20:36:35 2025 GMT
Not After : Feb 8 20:36:35 2025 GMT
Subject: CN=67799bd7-9a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:96:0c:fc:26:7b:24:69:a7:ed:e2:90:27:
32:61:47:98:3e:35:84:35:cc:5a:cd:58:4b:89:84:
77:11:30:93:d9:c6:26:33:7c:6b:51:b8:d2:93:f7:
be:6b:9f:b9:52:de:fe:5d:a0:5f:40:8e:76:8b:f7:
eb:9b:09:2b:54:c9:a3:e3:50:2d:14:a7:57:a5:cc:
d5:61:a3:db:2c:76:b3:30:eb:f8:69:23:8a:7f:1d:
bc:e0:60:bc:33:e1:2b:05:d9:be:ea:91:91:a7:ae:
3f:fc:08:98:6a:2a:42:3e:1e:0e:1b:21:3f:e9:79:
11:98:13:45:b0:41:65:a3:11:03:4f:63:b6:33:b8:
e5:8b:2e:90:7d:0d:6b:df:d5:38:0f:53:24:cb:32:
99:37:f1:a4:28:50:fc:e4:09:0a:0f:7e:10:aa:54:
1d:10:70:c8:91:34:95:bd:7d:0c:73:d3:c9:ce:99:
1c:1a:fd:56:d3:fc:e9:14:e7:12:fa:2c:f5:3f:4b:
29:0d:93:55:c4:1b:c3:65:a1:9f:ac:35:78:0d:52:
fe:82:63:57:44:92:93:54:f3:24:93:ce:ce:dc:38:
85:89:b4:0c:04:92:be:ca:f2:ec:cb:ec:ce:c4:17:
d8:2f:42:00:98:ac:5e:39:d4:dd:3e:53:c8:e6:7d:
da:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0D:F4:9B:FA:BC:C0:80:90:B2:55:CE:5B:F7:8B:BC:BD:10:B6:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/996C88E8CADB11EFB22FB286762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
72:50:bb:6a:cd:bf:cb:01:84:b7:54:e7:b5:8e:ea:4c:aa:a1:
d3:6f:28:c0:50:1b:03:e6:95:10:b7:ba:5b:10:b2:f8:c4:bc:
99:d6:07:58:aa:b6:9a:47:14:92:4e:b3:83:4f:b7:05:ab:05:
f7:e7:8e:a3:be:61:2e:ce:e5:ed:16:06:30:de:fb:5b:a7:8f:
a5:5b:c4:89:41:d0:cc:43:94:06:96:9d:d0:36:90:cb:db:de:
12:3d:3b:65:bc:69:b0:61:4e:ed:05:3e:b8:bc:61:a6:0c:2d:
38:6d:f0:4d:7c:34:2a:32:3b:e5:df:9f:32:62:59:be:34:9c:
b7:42:b9:13:6d:81:74:f7:c5:3e:31:40:61:9c:64:d9:b8:e2:
ad:9b:2b:8d:6b:bd:db:1e:75:37:9d:aa:08:8b:6d:6c:8b:f0:
54:59:59:d0:f4:01:25:bf:c7:ba:de:6e:b6:d3:70:dd:a4:8c:
94:02:c5:1c:35:3a:15:fe:78:3f:07:c6:df:d3:05:5f:9b:af:
ca:b3:67:2c:53:cf:f7:fa:77:b3:fe:f7:dd:aa:be:a2:cf:6f:
62:1e:b4:2d:ec:ea:c5:8a:e9:57:14:5f:30:02:35:76:57:67:
22:e3:65:ff:67:63:89:f7:0a:47:5c:ab:8d:cd:01:4f:c5:01:
eb:ab:bf:73
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATVRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA1MjAzNjM1WhcNMjUwMjA4MjAzNjM1WjAYMRYw
FAYDVQQDEw02Nzc5OWJkNy05YTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuMaWDPwmeyRpp+3ikCcyYUeYPjWENcxazVhLiYR3ETCT2cYmM3xrUbjS
k/e+a5+5Ut7+XaBfQI52i/frmwkrVMmj41AtFKdXpczVYaPbLHazMOv4aSOKfx28
4GC8M+ErBdm+6pGRp64//AiYaipCPh4OGyE/6XkRmBNFsEFloxEDT2O2M7jliy6Q
fQ1r39U4D1MkyzKZN/GkKFD85AkKD34QqlQdEHDIkTSVvX0Mc9PJzpkcGv1W0/zp
FOcS+iz1P0spDZNVxBvDZaGfrDV4DVL+gmNXRJKTVPMkk87O3DiFibQMBJK+yvLs
y+zOxBfYL0IAmKxeOdTdPlPI5n3axwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFA4N
9Jv6vMCAkLJVzlv3i7y9ELZ9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85OTZDODhFOENBREIxMUVGQjIyRkIyODY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsI2MA0GCSqGSIb3DQEB
CwUAA4IBAQByULtqzb/LAYS3VOe1jupMqqHTbyjAUBsD5pUQt7pbELL4xLyZ1gdY
qraaRxSSTrODT7cFqwX3546jvmEuzuXtFgYw3vtbp4+lW8SJQdDMQ5QGlp3QNpDL
294SPTtlvGmwYU7tBT64vGGmDC04bfBNfDQqMjvl358yYlm+NJy3QrkTbYF098U+
MUBhnGTZuOKtmyuNa73bHnU3naoIi21si/BUWVnQ9AElv8e63m6203DdpIyUAsUc
NToV/ng/B8bf0wVfm6/Ks2csU8/3+nez/vfdqr6iz29iHrQt7OrFiulXFF8wAjV2
V2ci42X/Z2OJ9wpHXKuNzQFPxQHrq79z
-----END CERTIFICATE-----
Generated at Tue Apr 29 01:00:59 2025 by rpki-client