Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C60CB3E0DC8E11EFA8F3A27E762E951A.roa
File: C60CB3E0DC8E11EFA8F3A27E762E951A.roa (raw, json)
Hash identifier: UDeXCoAc9Z3XQMDhRH9ZVrGxmJmrsNrGvtU0cZ65Aks=
Subject key identifier: 7F:55:ED:56:7A:40:E7:96:15:AA:D0:3D:86:73:F2:68:AD:DA:E0:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B79
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C60CB3E0DC8E11EFA8F3A27E762E951A.roa
Signing time: Mon 27 Jan 2025 09:12:04 +0000
ROA not before: Mon 27 Jan 2025 09:12:00 +0000
ROA not after: Sat 08 Feb 2025 09:12:00 +0000
asID: 5065
IP address blocks: 154.83.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84857 (0x14b79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 09:12:00 2025 GMT
Not After : Feb 8 09:12:00 2025 GMT
Subject: CN=67974de4-0817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:4b:3b:d2:69:cd:98:16:04:2a:f2:f6:c0:
2d:00:a3:55:1f:c5:23:e0:d3:22:82:88:c7:3f:d1:
49:64:82:29:b2:c7:17:64:86:4d:0c:3a:01:cb:ed:
e1:cb:70:dd:38:64:2f:1d:50:4e:67:66:24:9d:ef:
69:3a:b6:f0:08:27:1c:07:99:fe:86:89:cd:c5:81:
2e:20:3d:ea:21:e3:14:2d:68:91:21:6a:28:22:5e:
28:07:5e:71:47:fd:3c:4b:77:e5:be:c0:75:b8:3b:
22:3c:c7:4a:ee:b5:cd:75:54:24:fc:7e:2c:c9:69:
2c:5e:ed:6d:16:9f:c5:4e:24:7b:ee:62:6a:1c:07:
43:c6:ab:f1:e7:5b:45:83:9f:26:c2:0b:26:72:c6:
32:08:1e:d9:78:fa:ba:05:fb:c3:66:bd:2e:e9:fa:
2a:98:88:ac:2b:96:10:b9:c9:e8:6f:11:e2:03:89:
30:ae:a2:2b:b0:bd:2c:df:04:37:58:68:7a:60:4d:
3c:af:fd:af:f5:4e:80:28:41:6e:aa:98:63:f9:16:
fa:69:72:19:5c:13:cd:43:d8:5b:40:13:78:6a:c2:
bc:cc:0f:c7:00:d5:30:84:c4:6e:04:33:97:db:44:
88:d8:a2:1b:34:87:5a:cc:89:fb:a2:ea:32:d4:c7:
cb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:55:ED:56:7A:40:E7:96:15:AA:D0:3D:86:73:F2:68:AD:DA:E0:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C60CB3E0DC8E11EFA8F3A27E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.251.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:99:41:2a:2f:0d:84:b2:30:c0:43:c4:a9:46:66:59:ea:be:
23:51:d3:20:d8:78:67:42:4f:ca:4c:52:cd:c2:f3:fc:11:e5:
f5:ab:a6:a7:8e:4a:99:71:20:a0:8d:15:8b:fa:83:78:e6:55:
81:a6:82:3e:29:59:49:7d:b1:fc:13:5f:5e:f1:d0:7c:0d:cf:
b4:d5:01:c2:6a:96:aa:2f:01:68:88:f0:fd:fa:d2:9e:ac:a5:
7f:9b:db:10:a4:9d:63:4d:f4:37:cc:19:cd:19:d8:60:7a:0b:
d4:f0:34:55:fe:97:ca:ef:b1:f5:19:45:29:52:f9:9b:cf:0f:
5e:78:94:cd:13:8b:b8:80:81:e5:7f:69:dc:6c:23:ac:a8:29:
7c:85:ba:57:ea:0c:28:6d:68:bb:db:78:ab:e9:27:f8:c2:1b:
66:2d:b0:34:14:df:60:f1:61:e8:2d:aa:e1:ba:d5:47:06:d3:
7f:13:a1:77:ad:d0:03:0c:fe:4a:0f:82:9b:6f:99:60:cf:4f:
6f:29:2f:b2:8d:95:67:54:05:75:79:92:49:fd:6b:1c:db:e3:
21:9e:a2:e8:44:6d:fd:9c:dd:bd:03:72:9e:62:a1:09:79:7b:
e5:49:af:b9:df:ff:a8:9f:69:b4:47:a2:87:51:28:07:87:ee:
3a:0c:d4:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUt5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI3MDkxMjAwWhcNMjUwMjA4MDkxMjAwWjAYMRYw
FAYDVQQDEw02Nzk3NGRlNC0wODE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqJhLO9JpzZgWBCry9sAtAKNVH8Uj4NMigojHP9FJZIIpsscXZIZNDDoB
y+3hy3DdOGQvHVBOZ2Ykne9pOrbwCCccB5n+honNxYEuID3qIeMULWiRIWooIl4o
B15xR/08S3flvsB1uDsiPMdK7rXNdVQk/H4syWksXu1tFp/FTiR77mJqHAdDxqvx
51tFg58mwgsmcsYyCB7ZePq6BfvDZr0u6foqmIisK5YQucnobxHiA4kwrqIrsL0s
3wQ3WGh6YE08r/2v9U6AKEFuqphj+Rb6aXIZXBPNQ9hbQBN4asK8zA/HANUwhMRu
BDOX20SI2KIbNIdazIn7ouoy1MfLTwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFH9V
7VZ6QOeWFarQPYZz8mit2uANMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNjBDQjNFMERDOEUxMUVGQThGM0EyN0U3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlP7MA0GCSqGSIb3DQEB
CwUAA4IBAQC/mUEqLw2EsjDAQ8SpRmZZ6r4jUdMg2HhnQk/KTFLNwvP8EeX1q6an
jkqZcSCgjRWL+oN45lWBpoI+KVlJfbH8E19e8dB8Dc+01QHCapaqLwFoiPD9+tKe
rKV/m9sQpJ1jTfQ3zBnNGdhgegvU8DRV/pfK77H1GUUpUvmbzw9eeJTNE4u4gIHl
f2ncbCOsqCl8hbpX6gwobWi723ir6Sf4whtmLbA0FN9g8WHoLarhutVHBtN/E6F3
rdADDP5KD4Kbb5lgz09vKS+yjZVnVAV1eZJJ/Wsc2+MhnqLoRG39nN29A3KeYqEJ
eXvlSa+53/+on2m0R6KHUSgHh+46DNS+
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:27:23 2025 by rpki-client