Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9B9B89AC35811EFA41F0251762E951A.roa
File: A9B9B89AC35811EFA41F0251762E951A.roa (raw, json)
Hash identifier: nYnyksklpG4/M8syErBJ+/JC5Tnfn1+GZYWb0d5L/yI=
Subject key identifier: 56:17:D8:BF:5C:5F:C4:12:6A:F0:F2:4D:3C:D0:2C:8E:B5:49:80:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0125ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9B9B89AC35811EFA41F0251762E951A.roa
Signing time: Thu 26 Dec 2024 07:11:44 +0000
ROA not before: Thu 26 Dec 2024 07:11:41 +0000
ROA not after: Sun 09 Feb 2025 07:11:41 +0000
asID: 138915
IP address blocks: 154.223.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75245 (0x125ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 07:11:41 2024 GMT
Not After : Feb 9 07:11:41 2025 GMT
Subject: CN=676d01b0-7bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:66:f0:29:32:40:7b:6b:53:27:82:d3:9d:a0:
42:41:09:da:ce:cd:b3:55:2b:18:d0:06:1f:81:34:
29:40:05:6c:71:28:0a:8a:17:89:ca:d0:e1:7e:eb:
58:9a:b3:c0:2d:94:78:a4:d4:bb:87:ff:f3:31:37:
d7:fd:88:08:71:2c:8b:a2:79:20:7e:4e:12:76:25:
c2:9e:85:15:54:f3:c3:3c:99:d8:b5:05:ee:33:90:
4b:af:7c:45:69:7a:0e:af:be:5c:44:45:c1:0a:f6:
73:82:34:d8:58:74:df:5a:ce:1f:e3:c7:5e:b2:38:
44:56:fd:5b:8a:c3:6e:7b:43:b8:ed:ad:d0:da:1f:
d7:43:5e:20:be:a5:47:0a:5b:f4:8d:b5:dd:06:9c:
84:6a:e2:47:ed:35:3b:76:8b:14:af:2d:92:49:55:
c7:25:58:1d:0b:aa:44:40:18:52:30:ad:75:ba:4b:
77:b7:32:63:de:bc:44:ce:01:89:7d:54:7c:aa:db:
ef:e0:91:32:7e:1b:a2:2a:20:1d:50:83:0b:04:83:
cf:8d:c1:4b:d8:48:3f:14:e9:fe:4a:bc:b3:70:a2:
21:7c:1c:45:f8:fa:cf:32:ba:bf:69:5d:74:62:37:
5e:1b:4c:7e:8f:a2:c3:bf:3b:1e:e8:0b:4b:c5:6e:
51:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:17:D8:BF:5C:5F:C4:12:6A:F0:F2:4D:3C:D0:2C:8E:B5:49:80:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9B9B89AC35811EFA41F0251762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.64.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:63:20:0c:a4:a3:e1:e5:d9:66:d2:03:4e:35:a7:51:7b:1b:
aa:cb:11:3b:91:f0:2a:6a:8f:f7:f0:51:8f:83:bd:6a:7a:ef:
76:80:11:2d:28:1a:a4:33:22:0d:01:56:7e:ba:b8:86:56:2c:
e9:05:e4:1a:79:7d:93:5b:db:2d:0f:3b:7a:85:a1:d6:5f:e3:
9e:22:49:a3:33:d2:b9:b2:be:9e:0a:b3:2d:37:7f:1d:aa:3f:
ca:07:2c:ea:85:df:53:19:60:e8:0c:fc:49:38:19:dd:22:8f:
e7:99:70:64:81:9c:3c:ec:9c:4e:d2:56:4e:ba:a6:40:74:81:
4c:71:69:42:64:68:25:ef:74:76:03:e2:02:0f:1f:67:7b:85:
88:79:af:e9:82:53:71:06:62:0f:76:99:99:e8:e0:fe:ad:d9:
02:8f:8d:f3:08:4c:5b:61:dd:5e:29:f6:2b:33:1b:83:58:64:
80:e4:0f:8a:a1:7b:fd:51:6a:c9:bf:5e:6d:69:62:e7:1e:b4:
e2:09:05:99:a2:6b:d2:f8:2c:11:f2:4b:83:9c:7e:6f:38:d3:
2a:72:be:27:50:fa:41:35:a2:8b:29:96:43:ea:80:49:50:6b:
58:b5:e5:b7:91:ed:1c:bb:fa:5c:95:68:97:6e:4e:4e:00:81:
02:2c:e9:5f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASXtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDcxMTQxWhcNMjUwMjA5MDcxMTQxWjAYMRYw
FAYDVQQDEw02NzZkMDFiMC03YmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA22bwKTJAe2tTJ4LTnaBCQQnazs2zVSsY0AYfgTQpQAVscSgKiheJytDh
futYmrPALZR4pNS7h//zMTfX/YgIcSyLonkgfk4SdiXCnoUVVPPDPJnYtQXuM5BL
r3xFaXoOr75cREXBCvZzgjTYWHTfWs4f48desjhEVv1bisNue0O47a3Q2h/XQ14g
vqVHClv0jbXdBpyEauJH7TU7dosUry2SSVXHJVgdC6pEQBhSMK11ukt3tzJj3rxE
zgGJfVR8qtvv4JEyfhuiKiAdUIMLBIPPjcFL2Eg/FOn+SryzcKIhfBxF+PrPMrq/
aV10YjdeG0x+j6LDvzse6AtLxW5RxwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFYX
2L9cX8QSavDyTTzQLI61SYD4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BOUI5Qjg5QUMzNTgxMUVGQTQxRjAyNTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt9AMA0GCSqGSIb3DQEB
CwUAA4IBAQBdYyAMpKPh5dlm0gNONadRexuqyxE7kfAqao/38FGPg71qeu92gBEt
KBqkMyINAVZ+uriGVizpBeQaeX2TW9stDzt6haHWX+OeIkmjM9K5sr6eCrMtN38d
qj/KByzqhd9TGWDoDPxJOBndIo/nmXBkgZw87JxO0lZOuqZAdIFMcWlCZGgl73R2
A+ICDx9ne4WIea/pglNxBmIPdpmZ6OD+rdkCj43zCExbYd1eKfYrMxuDWGSA5A+K
oXv9UWrJv15taWLnHrTiCQWZomvS+CwR8kuDnH5vONMqcr4nUPpBNaKLKZZD6oBJ
UGtYteW3ke0cu/pclWiXbk5OAIECLOlf
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:35:49 2025 by rpki-client