Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2DB8096C36411EFB83A4C9B762E951A.roa
File: B2DB8096C36411EFB83A4C9B762E951A.roa (raw, json)
Hash identifier: 9scRGYUA4KqXS2v0zp5ujHKmoqGqymNJbl2BGEGfD2c=
Subject key identifier: 5F:6D:F3:26:06:2C:93:3B:45:3B:8F:7A:36:64:44:96:18:98:43:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01269C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2DB8096C36411EFB83A4C9B762E951A.roa
Signing time: Thu 26 Dec 2024 08:37:54 +0000
ROA not before: Thu 26 Dec 2024 08:37:50 +0000
ROA not after: Tue 04 Mar 2025 08:37:50 +0000
asID: 140666
IP address blocks: 154.94.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75420 (0x1269c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 08:37:50 2024 GMT
Not After : Mar 4 08:37:50 2025 GMT
Subject: CN=676d15e2-1d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:3a:ed:da:8f:fc:ff:53:51:ee:77:50:5c:
35:93:8b:9b:49:b8:e0:8a:be:01:a3:4a:1b:f2:04:
8d:b7:f3:18:7f:25:4d:6d:82:ed:5e:9e:77:09:3d:
2e:13:18:85:4e:8c:d7:f5:2a:d6:c8:58:4f:36:b1:
21:0f:66:4f:42:3a:33:de:d1:34:ba:b2:18:5b:8e:
24:da:ab:97:3d:7b:0c:0c:ae:23:27:ee:6f:db:45:
d0:a8:7b:45:7f:f0:be:41:d2:d6:5f:ab:62:ea:aa:
76:8b:a5:01:a4:a8:60:8a:12:c6:65:f5:69:81:32:
29:a3:84:a0:22:a5:20:a6:46:43:63:96:74:9d:bc:
1f:5f:2c:a6:56:bc:47:f9:31:bc:a5:a7:5a:0a:89:
17:c7:e2:64:b8:4f:44:06:45:48:9c:8c:8d:30:16:
74:3e:bd:77:06:c3:1d:ec:d1:9d:a7:3e:6c:c9:d0:
9d:39:a4:57:46:94:4d:07:44:41:6c:e0:f5:19:45:
8b:c4:59:0d:7b:d3:68:15:59:ef:8e:7e:15:ce:59:
d8:01:ab:68:54:ae:7a:cd:70:92:92:0e:5c:82:6e:
4b:13:6f:68:68:d1:4e:da:f4:cd:33:58:88:d6:44:
f9:28:3a:e4:a5:d2:f5:ab:55:bd:d9:fb:89:14:49:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6D:F3:26:06:2C:93:3B:45:3B:8F:7A:36:64:44:96:18:98:43:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2DB8096C36411EFB83A4C9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.68.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:0c:c7:96:af:5a:ce:3b:e7:c7:d5:b9:7c:ba:b1:41:f6:83:
c3:94:07:87:83:9d:f6:05:40:df:c7:64:a7:ab:d8:ac:24:00:
b0:19:cd:bb:8a:c4:6c:f1:d5:ef:9d:60:a5:e4:68:4e:98:33:
8d:82:b5:55:6c:c4:ac:05:38:c7:43:3d:08:17:87:27:5e:7e:
fa:a2:c8:23:8b:3e:11:65:05:a4:9c:61:af:2b:5d:f2:ad:25:
04:e5:b8:b0:4e:bd:51:1a:0a:cf:a5:75:d6:50:8b:35:fb:3e:
f2:7f:66:eb:e9:78:7b:66:54:89:f3:5d:63:16:b9:28:25:03:
a4:74:f9:0e:66:58:e0:76:73:d3:7f:3d:2a:0d:6d:3f:a6:4a:
5d:fc:40:cf:a1:0d:22:c0:86:52:14:7a:c5:1d:04:6b:f4:29:
0f:54:c3:cc:02:0c:3f:cf:8f:fc:13:ab:91:8e:c2:bd:58:97:
84:af:cd:6a:fa:04:a5:98:93:78:7b:52:0a:12:cd:50:d5:aa:
ba:20:f4:a5:ff:e3:cd:13:1e:04:a6:e8:a0:7b:2b:c6:d3:c4:
ee:84:ea:79:90:05:0b:02:6f:19:5b:56:40:15:04:6e:92:e0:
bb:52:f9:86:34:77:e3:12:de:e1:b7:9a:81:8b:31:42:a3:8e:
92:eb:6e:49
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASacMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDgzNzUwWhcNMjUwMzA0MDgzNzUwWjAYMRYw
FAYDVQQDEw02NzZkMTVlMi0xZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr+g67dqP/P9TUe53UFw1k4ubSbjgir4Bo0ob8gSNt/MYfyVNbYLtXp53
CT0uExiFTozX9SrWyFhPNrEhD2ZPQjoz3tE0urIYW44k2quXPXsMDK4jJ+5v20XQ
qHtFf/C+QdLWX6ti6qp2i6UBpKhgihLGZfVpgTIpo4SgIqUgpkZDY5Z0nbwfXyym
VrxH+TG8padaCokXx+JkuE9EBkVInIyNMBZ0Pr13BsMd7NGdpz5sydCdOaRXRpRN
B0RBbOD1GUWLxFkNe9NoFVnvjn4VzlnYAatoVK56zXCSkg5cgm5LE29oaNFO2vTN
M1iI1kT5KDrkpdL1q1W92fuJFEnjKQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF9t
8yYGLJM7RTuPejZkRJYYmENDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMkRCODA5NkMzNjQxMUVGQjgzQTRDOUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5EMA0GCSqGSIb3DQEB
CwUAA4IBAQBrDMeWr1rOO+fH1bl8urFB9oPDlAeHg532BUDfx2Snq9isJACwGc27
isRs8dXvnWCl5GhOmDONgrVVbMSsBTjHQz0IF4cnXn76osgjiz4RZQWknGGvK13y
rSUE5biwTr1RGgrPpXXWUIs1+z7yf2br6Xh7ZlSJ811jFrkoJQOkdPkOZljgdnPT
fz0qDW0/pkpd/EDPoQ0iwIZSFHrFHQRr9CkPVMPMAgw/z4/8E6uRjsK9WJeEr81q
+gSlmJN4e1IKEs1Q1aq6IPSl/+PNEx4EpuigeyvG08TuhOp5kAULAm8ZW1ZAFQRu
kuC7UvmGNHfjEt7ht5qBizFCo46S625J
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:41 2025 by rpki-client