Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9BDDD00C35E11EF895CA677762E951A.roa
File: C9BDDD00C35E11EF895CA677762E951A.roa (raw, json)
Hash identifier: YycGUp3toXwy5ibk/8C4EgsxxUhtQVlimaoleG2ivCY=
Subject key identifier: F7:E4:15:E7:53:E3:75:49:96:21:CA:84:1A:82:4B:FB:E8:8D:C6:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012622
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9BDDD00C35E11EF895CA677762E951A.roa
Signing time: Thu 26 Dec 2024 07:55:35 +0000
ROA not before: Thu 26 Dec 2024 07:55:31 +0000
ROA not after: Tue 04 Mar 2025 07:55:31 +0000
asID: 55320
IP address blocks: 154.93.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75298 (0x12622)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 07:55:31 2024 GMT
Not After : Mar 4 07:55:31 2025 GMT
Subject: CN=676d0bf7-32c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b6:83:99:00:41:23:c3:41:6e:6f:48:34:57:
2f:1e:fa:a5:b9:6d:80:f6:14:b0:c0:be:12:15:34:
cd:23:34:e3:38:e2:2e:5e:7c:01:73:9d:dd:75:e9:
02:58:0f:eb:4f:2e:4b:5a:39:8c:04:7c:d7:09:ce:
fb:ea:a0:db:9a:7f:76:c1:0f:d2:86:0c:8a:6c:71:
00:16:6b:ac:d2:91:ad:75:aa:96:90:a0:52:55:be:
51:f3:55:7b:2e:dc:32:50:2c:8b:5e:a9:e3:4f:42:
79:eb:10:5f:91:e0:c9:4e:1f:20:86:78:f6:6d:de:
94:39:7e:6a:31:39:01:a6:2b:da:15:69:5a:7e:b6:
22:e2:1b:ce:b9:62:56:7a:c7:c3:db:a2:f5:9a:90:
44:47:02:38:79:c0:7f:81:72:a9:5a:82:82:27:63:
9d:76:b5:15:65:a9:a2:3e:cf:63:ab:a9:66:02:a8:
0f:26:0a:4a:50:0a:d5:35:61:c0:65:78:eb:e2:d6:
c4:5e:c9:17:0e:ba:dc:f6:4e:89:5c:63:41:e4:5c:
fe:fe:b5:fe:50:bd:d0:d4:e6:4c:d3:24:44:52:9e:
0f:c5:e1:c6:ec:63:d1:fd:6f:90:a9:da:06:5b:ed:
01:b8:fe:52:c0:36:42:ee:7c:99:d3:a3:5a:d5:c9:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E4:15:E7:53:E3:75:49:96:21:CA:84:1A:82:4B:FB:E8:8D:C6:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9BDDD00C35E11EF895CA677762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.98.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:86:a2:bf:0d:8f:5f:d0:c4:55:bb:14:78:64:a1:4a:7f:46:
2a:47:80:eb:55:43:8e:3c:2b:14:23:5c:66:07:d2:f9:cf:ba:
0d:6b:13:15:06:15:3f:b2:10:c1:fd:61:a7:71:58:44:b5:4c:
65:87:66:3f:5e:f0:8e:3b:b9:82:ed:f6:0f:99:33:6e:d4:ca:
36:7e:41:9a:e7:5e:ff:bb:7f:20:cc:ea:8e:cd:91:7b:a7:ef:
bd:94:dd:4b:8d:02:d0:6e:53:1e:4e:9d:05:74:69:c1:30:70:
41:ee:e3:2b:1d:25:e7:b9:19:47:4e:0f:af:b6:9a:b6:82:2b:
1c:e2:be:78:60:82:3d:bd:2c:8e:9b:01:91:0d:01:53:1c:53:
e9:0d:f1:c2:6b:3b:b5:32:5d:8a:7a:31:ed:f3:60:19:93:d3:
61:03:68:43:33:1d:44:4d:d0:20:5b:26:f8:a8:6c:1a:93:20:
d5:1e:d0:62:f4:0c:b8:e5:40:0f:8c:af:9c:2a:39:4d:d0:a4:
f6:59:5d:9a:c0:a8:9b:0f:b9:fd:53:69:88:da:81:0b:82:c4:
57:b4:4e:32:7d:24:3e:7d:89:6d:a0:06:c3:b8:69:6d:67:ed:
b5:1b:61:98:30:d8:96:18:da:12:35:2f:07:67:86:5f:52:dc:
cd:e3:37:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASYiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDc1NTMxWhcNMjUwMzA0MDc1NTMxWjAYMRYw
FAYDVQQDEw02NzZkMGJmNy0zMmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8baDmQBBI8NBbm9INFcvHvqluW2A9hSwwL4SFTTNIzTjOOIuXnwBc53d
dekCWA/rTy5LWjmMBHzXCc776qDbmn92wQ/ShgyKbHEAFmus0pGtdaqWkKBSVb5R
81V7LtwyUCyLXqnjT0J56xBfkeDJTh8ghnj2bd6UOX5qMTkBpivaFWlafrYi4hvO
uWJWesfD26L1mpBERwI4ecB/gXKpWoKCJ2OddrUVZamiPs9jq6lmAqgPJgpKUArV
NWHAZXjr4tbEXskXDrrc9k6JXGNB5Fz+/rX+UL3Q1OZM0yREUp4PxeHG7GPR/W+Q
qdoGW+0BuP5SwDZC7nyZ06Na1cmxZQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPfk
FedT43VJliHKhBqCS/vojcZYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DOUJEREQwMEMzNUUxMUVGODk1Q0E2Nzc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml1iMA0GCSqGSIb3DQEB
CwUAA4IBAQDVhqK/DY9f0MRVuxR4ZKFKf0YqR4DrVUOOPCsUI1xmB9L5z7oNaxMV
BhU/shDB/WGncVhEtUxlh2Y/XvCOO7mC7fYPmTNu1Mo2fkGa517/u38gzOqOzZF7
p++9lN1LjQLQblMeTp0FdGnBMHBB7uMrHSXnuRlHTg+vtpq2gisc4r54YII9vSyO
mwGRDQFTHFPpDfHCazu1Ml2KejHt82AZk9NhA2hDMx1ETdAgWyb4qGwakyDVHtBi
9Ay45UAPjK+cKjlN0KT2WV2awKibD7n9U2mI2oELgsRXtE4yfSQ+fYltoAbDuGlt
Z+21G2GYMNiWGNoSNS8HZ4ZfUtzN4zeQ
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:40:49 2025 by rpki-client