Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C136646AC36111EF84DBAC89762E951A.roa
File: C136646AC36111EF84DBAC89762E951A.roa (raw, json)
Hash identifier: AlZicrveWPtUqJWQ1bTC17O+9TncOZdSyefii/Hi6dg=
Subject key identifier: 1D:2C:9B:43:8B:73:A0:06:00:81:0E:23:38:6F:F2:07:92:F6:45:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012662
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C136646AC36111EF84DBAC89762E951A.roa
Signing time: Thu 26 Dec 2024 08:16:49 +0000
ROA not before: Thu 26 Dec 2024 08:16:46 +0000
ROA not after: Tue 04 Mar 2025 08:16:46 +0000
asID: 63139
IP address blocks: 154.94.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75362 (0x12662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 08:16:46 2024 GMT
Not After : Mar 4 08:16:46 2025 GMT
Subject: CN=676d10f1-1b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:65:52:2d:20:99:ee:bc:b3:dd:c8:7e:e9:
15:0c:de:1c:41:1c:1a:83:62:da:15:7e:db:53:66:
7c:0e:09:7d:55:c4:42:89:43:9e:de:d0:8a:c7:53:
d9:a9:24:17:c7:cd:8e:5a:a0:44:90:50:db:c9:6d:
aa:62:10:40:cb:47:93:52:db:a8:fc:b7:a8:a0:10:
bb:45:cf:2f:4d:f6:47:39:f5:d4:bf:3d:d4:71:70:
ef:bf:5f:63:8e:7f:d5:89:f0:d3:5d:76:2f:1c:dd:
74:12:58:93:2c:f7:52:87:15:09:54:4b:89:e0:87:
d5:b6:32:42:57:5e:df:8f:89:23:52:40:d7:0f:5d:
e5:cb:62:d6:54:9b:3a:b7:ed:aa:28:3b:04:bd:b1:
d6:7c:8f:df:df:18:25:aa:84:a0:58:eb:82:37:af:
1f:4b:86:63:69:65:9f:ef:91:2b:90:c5:d8:92:13:
f6:64:48:9b:b5:e2:1f:9d:d7:93:87:e5:27:01:f2:
e1:48:08:2e:82:59:89:1c:3f:e7:1f:09:c7:04:27:
fd:e3:fe:6c:6d:22:24:50:54:05:a9:4c:7b:d0:e3:
f5:be:d8:bd:03:7b:d1:eb:00:e7:c1:9b:d9:a9:ed:
11:b2:73:71:8a:99:45:a6:47:6e:08:3b:07:a3:dc:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2C:9B:43:8B:73:A0:06:00:81:0E:23:38:6F:F2:07:92:F6:45:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C136646AC36111EF84DBAC89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.69.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:3e:aa:c1:a2:11:fd:d1:95:35:6a:0d:67:7d:1e:b9:60:d7:
f2:bd:54:6e:4d:cb:4b:75:41:af:19:47:c7:85:28:57:b5:04:
a8:be:a8:ca:8f:6f:91:a2:6e:b1:75:e4:8c:6f:20:e4:63:2b:
80:8a:74:a1:5e:9e:c6:c2:4f:4c:c5:9f:1e:60:d3:5e:6d:d7:
fd:d2:4d:75:7b:17:3c:c0:5f:0a:59:31:a8:f0:6c:f8:45:7a:
f9:22:ea:1c:72:77:26:15:fd:b2:92:33:4f:64:7e:91:37:91:
88:8b:a9:de:c5:90:79:2c:35:fb:d1:f6:80:25:e8:94:ba:7d:
2a:e8:e4:cf:91:c3:18:be:d2:a8:c2:28:9a:e1:e5:d8:2e:91:
1e:d4:8d:26:a2:61:15:3f:5d:f4:64:f8:c2:a3:1a:af:f5:05:
29:e6:ef:0a:20:32:0f:ba:f2:7c:65:3e:40:e0:cd:c8:57:02:
0e:54:83:4f:a6:e5:86:82:cc:c5:15:f3:a6:55:10:09:6e:85:
ec:48:62:ea:76:8e:b8:31:b0:96:40:5d:49:b8:d2:08:c5:2e:
e2:a7:de:2d:04:5c:ea:13:c5:ba:e7:c6:00:9f:01:86:a2:c3:
1d:0a:02:ac:50:6d:c5:fe:5b:e2:93:12:35:24:3b:92:1d:7c:
17:e3:e8:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASZiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDgxNjQ2WhcNMjUwMzA0MDgxNjQ2WjAYMRYw
FAYDVQQDEw02NzZkMTBmMS0xYjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuBdlUi0gme68s93IfukVDN4cQRwag2LaFX7bU2Z8Dgl9VcRCiUOe3tCK
x1PZqSQXx82OWqBEkFDbyW2qYhBAy0eTUtuo/LeooBC7Rc8vTfZHOfXUvz3UcXDv
v19jjn/VifDTXXYvHN10EliTLPdShxUJVEuJ4IfVtjJCV17fj4kjUkDXD13ly2LW
VJs6t+2qKDsEvbHWfI/f3xglqoSgWOuCN68fS4ZjaWWf75ErkMXYkhP2ZEibteIf
ndeTh+UnAfLhSAguglmJHD/nHwnHBCf94/5sbSIkUFQFqUx70OP1vti9A3vR6wDn
wZvZqe0RsnNxiplFpkduCDsHo9w01QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB0s
m0OLc6AGAIEOIzhv8geS9kWEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMTM2NjQ2QUMzNjExMUVGODREQkFDODk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5FMA0GCSqGSIb3DQEB
CwUAA4IBAQANPqrBohH90ZU1ag1nfR65YNfyvVRuTctLdUGvGUfHhShXtQSovqjK
j2+Rom6xdeSMbyDkYyuAinShXp7Gwk9MxZ8eYNNebdf90k11exc8wF8KWTGo8Gz4
RXr5IuoccncmFf2ykjNPZH6RN5GIi6nexZB5LDX70faAJeiUun0q6OTPkcMYvtKo
wiia4eXYLpEe1I0momEVP130ZPjCoxqv9QUp5u8KIDIPuvJ8ZT5A4M3IVwIOVINP
puWGgszFFfOmVRAJboXsSGLqdo64MbCWQF1JuNIIxS7ip94tBFzqE8W658YAnwGG
osMdCgKsUG3F/lvikxI1JDuSHXwX4+ge
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:21:37 2025 by rpki-client