Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB279C70BB7811EF83B5429A762E951A.roa
File: AB279C70BB7811EF83B5429A762E951A.roa (raw, json)
Hash identifier: diQ7Gjp8l00Laeez1hiNTKiunI9HG5C47KaTVlIIvN0=
Subject key identifier: 2C:9B:0C:6A:AC:74:85:9E:7A:33:EB:D1:0B:1A:ED:BE:E1:D7:D6:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011B98
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB279C70BB7811EF83B5429A762E951A.roa
Signing time: Mon 16 Dec 2024 06:40:41 +0000
ROA not before: Mon 16 Dec 2024 06:40:38 +0000
ROA not after: Tue 04 Mar 2025 06:40:38 +0000
asID: 138152
IP address blocks: 154.94.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72600 (0x11b98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 16 06:40:38 2024 GMT
Not After : Mar 4 06:40:38 2025 GMT
Subject: CN=675fcb69-0914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:13:6d:43:3d:5e:1f:72:f8:a5:9b:70:8d:
06:17:16:99:cf:ea:86:9e:c2:15:15:e8:66:6e:14:
0f:c2:58:c5:e6:7c:06:0b:a4:22:82:63:76:69:23:
a4:bc:58:f2:20:b2:61:48:ff:d3:a4:6e:1f:d7:0c:
8a:23:f7:c8:ba:a6:d3:3b:09:cd:a8:44:df:f6:c7:
2a:cd:34:33:a2:22:ad:2f:df:9f:9a:d2:08:c0:dd:
30:e4:81:98:94:5f:61:31:46:55:18:58:48:ba:a1:
da:6e:4f:3a:86:0c:d7:54:bd:a3:d4:90:f7:63:e0:
bb:3e:e9:16:86:af:1d:13:ff:25:ec:6b:b9:7a:ac:
1c:31:4c:03:31:34:75:bb:f1:d5:fe:45:6a:81:26:
81:03:74:52:09:15:5c:ac:1b:f5:77:27:2c:98:33:
d3:7c:3f:ae:99:16:f7:74:a2:00:24:a4:a7:17:cd:
e5:53:ca:db:e7:94:00:22:ca:79:92:9b:3c:7a:1c:
5e:0e:07:b0:18:19:a1:56:f6:75:fa:db:ab:2e:aa:
df:2c:45:6c:81:b3:7e:2b:5c:14:d3:40:ad:cd:70:
be:3d:06:b3:74:ab:e2:d4:a8:31:14:94:1c:af:4b:
27:fd:0f:18:60:bb:3f:83:53:e1:b9:45:df:e3:b9:
6d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9B:0C:6A:AC:74:85:9E:7A:33:EB:D1:0B:1A:ED:BE:E1:D7:D6:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB279C70BB7811EF83B5429A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.6.0/23
Signature Algorithm: sha256WithRSAEncryption
80:ad:4b:27:81:4a:c2:6d:54:08:ee:44:72:9b:82:09:45:ae:
c1:2c:1e:2c:0a:4b:f2:ed:44:f5:15:ba:15:c5:84:86:13:77:
1d:29:f7:da:ae:21:bd:52:fa:2d:54:92:0c:bb:a5:b8:fb:18:
69:5a:7a:f4:31:fb:0d:c7:3e:f0:0c:55:e6:9e:8d:00:a0:93:
60:13:6f:f3:53:d9:fb:fa:65:cb:db:82:7d:de:93:ee:f4:dc:
33:86:cd:ba:14:9b:71:26:31:c0:fb:9e:09:5d:71:53:3e:29:
5e:2f:f6:e9:91:9c:92:ec:c6:a1:b2:7d:7e:6e:91:18:fe:9e:
6b:72:48:92:98:9d:ca:79:80:7f:f2:c6:51:0f:75:d1:ee:9a:
b8:6a:85:31:54:ef:b1:67:f5:9a:8d:b0:e2:f9:39:a4:cb:d4:
11:77:8a:75:64:3a:83:4e:19:92:92:34:f8:80:83:e6:03:c1:
83:af:36:66:49:e8:a8:36:f1:c5:c2:c8:7d:e6:c4:1c:3b:d5:
90:ad:9c:ab:5f:47:4b:c6:48:fd:79:a7:23:88:ba:2c:90:26:
a8:91:6f:36:39:78:3b:80:e0:b6:b5:e3:6e:2a:80:b9:59:94:
74:b6:91:37:5a:6e:fc:8a:d2:99:6e:eb:ae:5e:38:5c:0d:76:
f1:fe:76:c1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARuYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjE2MDY0MDM4WhcNMjUwMzA0MDY0MDM4WjAYMRYw
FAYDVQQDEw02NzVmY2I2OS0wOTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArWkTbUM9Xh9y+KWbcI0GFxaZz+qGnsIVFehmbhQPwljF5nwGC6QigmN2
aSOkvFjyILJhSP/TpG4f1wyKI/fIuqbTOwnNqETf9scqzTQzoiKtL9+fmtIIwN0w
5IGYlF9hMUZVGFhIuqHabk86hgzXVL2j1JD3Y+C7PukWhq8dE/8l7Gu5eqwcMUwD
MTR1u/HV/kVqgSaBA3RSCRVcrBv1dycsmDPTfD+umRb3dKIAJKSnF83lU8rb55QA
Isp5kps8ehxeDgewGBmhVvZ1+turLqrfLEVsgbN+K1wU00CtzXC+PQazdKvi1Kgx
FJQcr0sn/Q8YYLs/g1PhuUXf47ltfQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCyb
DGqsdIWeejPr0Qsa7b7h19YQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQjI3OUM3MEJCNzgxMUVGODNCNTQyOUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBml4GMA0GCSqGSIb3DQEB
CwUAA4IBAQCArUsngUrCbVQI7kRym4IJRa7BLB4sCkvy7UT1FboVxYSGE3cdKffa
riG9UvotVJIMu6W4+xhpWnr0MfsNxz7wDFXmno0AoJNgE2/zU9n7+mXL24J93pPu
9Nwzhs26FJtxJjHA+54JXXFTPileL/bpkZyS7Mahsn1+bpEY/p5rckiSmJ3KeYB/
8sZRD3XR7pq4aoUxVO+xZ/WajbDi+Tmky9QRd4p1ZDqDThmSkjT4gIPmA8GDrzZm
SeioNvHFwsh95sQcO9WQrZyrX0dLxkj9eacjiLoskCaokW82OXg7gOC2teNuKoC5
WZR0tpE3Wm78itKZbuuuXjhcDXbx/nbB
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:22 2025 by rpki-client