Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C855B2DEACA311EFA555BBB1762E951A.roa
File: C855B2DEACA311EFA555BBB1762E951A.roa (raw, json)
Hash identifier: yhoN5dZeE6vKBiP2xDbyZ6CJkcDwc82C9sPostIls8o=
Subject key identifier: B6:FF:E8:43:AF:40:63:89:C1:44:ED:DF:FE:E5:50:82:AF:42:51:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011446
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C855B2DEACA311EFA555BBB1762E951A.roa
Signing time: Wed 27 Nov 2024 09:41:31 +0000
ROA not before: Wed 27 Nov 2024 09:41:27 +0000
ROA not after: Tue 11 Feb 2025 09:41:27 +0000
asID: 7029
IP address blocks: 154.194.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70726 (0x11446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 09:41:27 2024 GMT
Not After : Feb 11 09:41:27 2025 GMT
Subject: CN=6746e94b-aa86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:3e:1d:74:5d:07:39:d4:8c:ab:15:31:2f:
52:60:4d:9f:94:34:a4:71:1b:2b:56:84:ae:9f:9b:
9d:08:69:8a:47:ce:d7:98:1b:d2:5b:29:b6:79:c1:
c3:0d:72:4d:c4:aa:17:5f:55:ae:16:f5:7c:6b:08:
6e:1d:f8:76:bd:d3:48:75:02:30:64:8c:b6:51:cb:
91:b3:69:9e:78:12:d7:f7:17:42:c2:7f:6c:a6:bc:
4b:c2:f7:55:39:1d:14:c1:ac:88:d7:86:f6:aa:6a:
64:89:b4:7c:77:b0:35:d3:a6:62:d2:40:92:df:7c:
b0:99:8e:18:15:66:37:be:76:cb:de:ab:41:d7:ca:
cf:f1:c5:b0:7a:c2:98:ab:be:e7:d6:74:66:ef:b2:
4b:70:2c:dc:c8:22:b6:b2:de:03:a1:3d:f9:ae:a8:
a4:3c:29:d2:23:ea:d5:45:99:50:bd:61:34:ab:20:
ce:a3:ca:77:6f:6f:9d:bc:40:86:99:72:79:54:15:
33:98:f5:93:55:11:8a:23:e4:77:7f:fa:70:7d:b0:
0d:4c:61:66:e7:99:0b:9b:fd:e6:20:06:54:fc:19:
8a:6d:da:f0:ec:01:5c:92:45:dc:55:eb:5a:2b:7b:
7c:93:3e:b2:6e:e6:20:73:4c:a5:e8:06:76:36:6d:
6b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FF:E8:43:AF:40:63:89:C1:44:ED:DF:FE:E5:50:82:AF:42:51:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C855B2DEACA311EFA555BBB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
Signature Algorithm: sha256WithRSAEncryption
91:55:1a:64:d5:19:69:57:c8:8e:fd:0c:fd:e4:ec:ec:af:a2:
5a:3e:f6:5c:6b:b0:b8:c2:82:01:ac:26:62:9d:24:af:2e:e9:
a7:31:e4:0e:5b:0a:ff:d4:40:9e:78:fd:3d:ab:3e:33:b8:e0:
ee:7c:69:9f:65:e9:d4:d1:8e:ba:e1:c6:a6:ef:a6:5b:5d:f9:
6f:50:a2:55:ff:4e:19:0b:20:2a:45:4e:d6:35:82:f0:e2:d2:
ba:08:5e:59:d6:e8:01:1e:cd:58:14:48:4d:3d:f4:54:1d:6c:
cd:34:67:dc:13:db:86:0e:3e:ce:f3:bd:3c:b9:32:b7:1d:03:
8f:96:f3:a0:e8:e7:5e:2b:91:0d:39:35:4c:a5:76:cf:8b:e5:
c7:ee:27:6c:f9:7f:30:f4:4e:44:46:bd:05:e3:46:f6:42:7d:
bd:d5:40:df:d3:20:ef:49:13:99:d6:ed:04:01:93:0b:c0:8d:
f1:2a:e4:43:27:40:19:11:0c:cd:d6:55:9b:8f:8c:08:3c:7a:
33:6b:78:7b:97:d5:1c:16:13:01:80:41:bc:2c:f3:75:72:49:
aa:91:0c:0d:d5:38:99:7e:39:8e:ea:48:6e:0a:1a:ef:02:b3:
99:b5:24:b3:ed:e5:75:ea:1b:62:22:35:c6:1c:d2:0e:22:b7:
31:7e:75:17
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARRGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTI3MDk0MTI3WhcNMjUwMjExMDk0MTI3WjAYMRYw
FAYDVQQDEw02NzQ2ZTk0Yi1hYTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu2U+HXRdBznUjKsVMS9SYE2flDSkcRsrVoSun5udCGmKR87XmBvSWym2
ecHDDXJNxKoXX1WuFvV8awhuHfh2vdNIdQIwZIy2UcuRs2meeBLX9xdCwn9sprxL
wvdVOR0UwayI14b2qmpkibR8d7A106Zi0kCS33ywmY4YFWY3vnbL3qtB18rP8cWw
esKYq77n1nRm77JLcCzcyCK2st4DoT35rqikPCnSI+rVRZlQvWE0qyDOo8p3b2+d
vECGmXJ5VBUzmPWTVRGKI+R3f/pwfbANTGFm55kLm/3mIAZU/BmKbdrw7AFckkXc
VetaK3t8kz6ybuYgc0yl6AZ2Nm1rZQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLb/
6EOvQGOJwUTt3/7lUIKvQlECMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DODU1QjJERUFDQTMxMUVGQTU1NUJCQjE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsIQMA0GCSqGSIb3DQEB
CwUAA4IBAQCRVRpk1RlpV8iO/Qz95Ozsr6JaPvZca7C4woIBrCZinSSvLumnMeQO
Wwr/1ECeeP09qz4zuODufGmfZenU0Y664cam76ZbXflvUKJV/04ZCyAqRU7WNYLw
4tK6CF5Z1ugBHs1YFEhNPfRUHWzNNGfcE9uGDj7O8708uTK3HQOPlvOg6OdeK5EN
OTVMpXbPi+XH7ids+X8w9E5ERr0F40b2Qn291UDf0yDvSROZ1u0EAZMLwI3xKuRD
J0AZEQzN1lWbj4wIPHoza3h7l9UcFhMBgEG8LPN1ckmqkQwN1TiZfjmO6khuChrv
ArOZtSSz7eV16htiIjXGHNIOIrcxfnUX
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:11:18 2025 by rpki-client