Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B46E6AFEB21B11EFA9BC3EB3762E951A.roa
File: B46E6AFEB21B11EFA9BC3EB3762E951A.roa (raw, json)
Hash identifier: 8JT9nz2SAnT61At/+cF/spPvbWlQu+/VwLp6UHRV9fU=
Subject key identifier: 93:5C:B8:4C:DF:84:B1:E1:5B:63:10:5C:18:22:4E:C7:1F:5A:3E:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B46E6AFEB21B11EFA9BC3EB3762E951A.roa
Signing time: Wed 04 Dec 2024 08:42:33 +0000
ROA not before: Wed 04 Dec 2024 08:42:30 +0000
ROA not after: Sat 01 Feb 2025 08:42:30 +0000
asID: 138915
IP address blocks: 154.93.108.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71660 (0x117ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 08:42:30 2024 GMT
Not After : Feb 1 08:42:30 2025 GMT
Subject: CN=675015f9-be52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:2b:1d:38:1d:44:4a:de:b7:e0:f5:ef:16:
d9:be:6c:b6:15:02:c3:fa:f4:c5:3d:75:d4:fa:39:
f3:ab:f6:89:fc:a0:e7:94:40:04:0f:4d:d8:8b:37:
97:a8:08:5a:8a:ba:cf:9d:c8:b8:7e:98:74:21:d8:
50:9c:11:a9:2b:2e:de:a6:09:32:ad:32:2e:72:7f:
8d:5a:44:d2:ef:eb:16:6f:85:e2:9f:2f:b1:37:45:
53:54:5c:91:8a:72:77:3c:f6:cb:ff:59:9d:40:92:
b8:93:bd:52:85:bb:83:4a:9c:8a:ca:ee:8a:08:3c:
92:0c:0d:ab:a3:4a:a1:bf:b9:a8:6f:d3:5b:63:a5:
7c:92:02:d8:fa:29:d5:4e:c5:c1:39:ca:3e:85:88:
f6:c0:ff:1e:31:40:d6:1d:b2:b9:4d:df:3d:78:56:
a6:5e:65:96:bf:b7:f0:74:cd:0e:15:e7:3d:bb:d7:
a8:e9:a8:4f:2f:6c:b5:22:3a:e2:c6:2a:a3:e5:1e:
f5:75:d8:a2:a4:81:cc:98:79:e5:dd:f0:a3:df:a3:
d2:38:c5:d2:15:17:41:fd:b5:82:70:ec:d8:3a:f0:
d5:66:7d:57:30:ba:3b:b5:6a:c7:70:67:47:e2:53:
5a:39:05:8e:78:c6:73:75:5a:f4:45:75:c7:58:fe:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5C:B8:4C:DF:84:B1:E1:5B:63:10:5C:18:22:4E:C7:1F:5A:3E:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B46E6AFEB21B11EFA9BC3EB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.108.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:cf:0c:dc:d2:23:23:3b:da:e8:99:26:4d:63:70:f6:95:56:
50:11:31:7f:6b:58:13:e0:49:28:6a:82:58:79:96:e0:ff:25:
18:d1:91:89:de:d4:8e:ab:8b:62:98:a8:c1:9c:a5:0e:68:98:
27:6b:26:3d:db:2b:52:49:4c:c2:69:9d:6f:af:1b:12:93:6a:
83:b5:38:b2:2a:d0:b2:a1:b4:fe:35:4a:93:d3:c8:37:26:30:
03:fa:73:14:d4:0c:98:e6:2c:63:6f:8e:66:fc:3e:f6:4d:e2:
ac:a1:a9:00:fc:18:a8:29:8b:a7:26:f2:9a:34:fe:22:96:a4:
5f:8b:1d:f7:c8:50:14:54:fa:5c:d3:6d:73:e2:f9:c3:38:79:
6f:f9:18:b6:6d:dc:d7:93:76:b5:44:40:a9:96:d1:ef:2a:89:
ec:29:1d:a2:67:17:7b:83:a4:50:0b:7a:27:b9:b0:65:ef:cc:
e3:69:8b:76:3e:b3:c4:67:3f:1d:9a:29:04:d2:65:45:99:f6:
25:f5:45:bf:fb:db:2c:7f:50:02:64:c8:c2:64:d2:f6:39:7a:
b4:05:70:4a:89:47:8b:e2:37:70:94:ec:62:bf:4b:91:1a:ce:
6f:48:58:c8:6b:40:08:ee:b4:2e:f9:98:40:f8:9e:03:82:ba:
81:36:47:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARfsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjA0MDg0MjMwWhcNMjUwMjAxMDg0MjMwWjAYMRYw
FAYDVQQDEw02NzUwMTVmOS1iZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt/crHTgdREret+D17xbZvmy2FQLD+vTFPXXU+jnzq/aJ/KDnlEAED03Y
izeXqAhairrPnci4fph0IdhQnBGpKy7epgkyrTIucn+NWkTS7+sWb4Xiny+xN0VT
VFyRinJ3PPbL/1mdQJK4k71ShbuDSpyKyu6KCDySDA2ro0qhv7mob9NbY6V8kgLY
+inVTsXBOco+hYj2wP8eMUDWHbK5Td89eFamXmWWv7fwdM0OFec9u9eo6ahPL2y1
Ijrixiqj5R71ddiipIHMmHnl3fCj36PSOMXSFRdB/bWCcOzYOvDVZn1XMLo7tWrH
cGdH4lNaOQWOeMZzdVr0RXXHWP7B7wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJNc
uEzfhLHhW2MQXBgiTscfWj7eMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNDZFNkFGRUIyMUIxMUVGQTlCQzNFQjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBml1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBazwzc0iMjO9romSZNY3D2lVZQETF/a1gT4EkoaoJYeZbg/yUY0ZGJ
3tSOq4timKjBnKUOaJgnayY92ytSSUzCaZ1vrxsSk2qDtTiyKtCyobT+NUqT08g3
JjAD+nMU1AyY5ixjb45m/D72TeKsoakA/BioKYunJvKaNP4ilqRfix33yFAUVPpc
021z4vnDOHlv+Ri2bdzXk3a1RECpltHvKonsKR2iZxd7g6RQC3onubBl78zjaYt2
PrPEZz8dmikE0mVFmfYl9UW/+9ssf1ACZMjCZNL2OXq0BXBKiUeL4jdwlOxiv0uR
Gs5vSFjIa0AI7rQu+ZhA+J4DgrqBNkfq
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:34:03 2025 by rpki-client