Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD9082E4C35D11EF8D772271762E951A.roa
File: CD9082E4C35D11EF8D772271762E951A.roa (raw, json)
Hash identifier: NsTfOLblMhVhUINLAAjB/aIMPH85G8qm4Vb/VJ1WvB8=
Subject key identifier: E6:A3:FB:E5:6A:EC:B6:E3:A2:F4:20:9E:44:CB:16:C6:A6:A1:E1:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01260D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD9082E4C35D11EF8D772271762E951A.roa
Signing time: Thu 26 Dec 2024 07:48:32 +0000
ROA not before: Thu 26 Dec 2024 07:48:28 +0000
ROA not after: Tue 04 Mar 2025 07:48:28 +0000
asID: 138915
IP address blocks: 154.93.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75277 (0x1260d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 07:48:28 2024 GMT
Not After : Mar 4 07:48:28 2025 GMT
Subject: CN=676d0a50-3e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:20:a2:cb:af:9c:96:74:6a:3a:9c:54:bb:
43:23:75:d8:59:fb:61:63:54:04:6d:22:b1:37:81:
04:53:a5:be:d3:07:76:41:07:37:80:74:c8:d4:f0:
97:2c:5c:8b:28:e1:86:b6:5c:be:8a:54:ff:65:15:
64:e0:72:ee:a0:10:a5:9c:f5:f8:ab:26:db:88:85:
43:d5:b5:bb:63:2b:79:d3:cd:fe:80:62:a8:e1:7f:
64:10:77:ff:e0:09:4b:74:cb:a2:16:b3:d0:40:1c:
ec:6e:40:44:da:40:b7:ee:26:5d:d7:b3:95:56:4d:
77:ea:ad:bc:ec:e3:51:c0:5e:df:b9:0e:1a:40:d6:
ae:5f:bb:10:fa:9b:2f:24:5f:5e:5b:2b:e3:6b:4b:
cb:12:a6:fb:6b:df:0c:02:36:59:c4:30:ac:29:05:
84:52:00:93:32:9b:96:e4:e1:59:5e:e3:ec:81:f2:
c7:73:80:3b:5b:a0:e6:2f:74:90:cf:64:cb:cc:a6:
ea:d8:8c:30:04:1b:cf:ec:f8:c4:ad:3f:86:3d:33:
8c:30:3b:7b:10:be:fe:1f:20:93:2c:8e:4a:07:bb:
80:4f:10:66:5e:d2:0b:6c:c8:aa:45:18:e3:ad:b4:
e2:a3:fd:d4:61:b4:89:1e:fb:94:a3:9e:e0:13:d3:
8f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A3:FB:E5:6A:EC:B6:E3:A2:F4:20:9E:44:CB:16:C6:A6:A1:E1:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD9082E4C35D11EF8D772271762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.115.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:26:f5:1a:73:e9:58:d6:b7:34:e8:9e:96:69:d8:b8:02:f7:
99:4f:04:ab:ff:9e:d3:0b:71:1d:b0:2d:e2:f7:54:7b:d8:7d:
b1:fe:a5:19:54:a4:e8:8b:7f:5c:6b:e7:ba:91:3e:e3:bd:3f:
3e:55:61:d7:2f:59:ad:fd:f1:46:fd:87:86:bd:54:e2:54:42:
4b:0e:6e:e6:a9:35:9a:e8:65:22:f5:b0:7c:29:cf:8e:cc:57:
7d:03:8a:f0:fe:fc:49:b5:05:43:b1:38:e5:1c:1e:63:15:da:
2c:7b:35:3f:dd:63:cb:54:84:2b:6c:d4:e3:77:65:2f:86:db:
8a:dc:b9:a2:bd:3b:9e:48:24:68:6d:e7:2e:ec:89:b2:cf:ad:
1f:f2:3e:bb:88:33:44:f8:ff:60:48:16:79:e7:6d:55:7a:1a:
73:22:7c:c0:86:1a:8b:c8:38:74:a4:47:c4:5b:88:1a:57:73:
a5:09:05:b6:5d:8b:4c:4d:64:4f:3e:3f:8b:66:31:e8:9e:50:
c8:4d:53:6d:24:c4:2e:33:7e:a7:90:75:79:10:2e:99:95:7c:
b8:4e:04:f9:9a:b0:5e:3b:bf:7c:94:bd:87:a6:41:79:8c:27:
21:2a:d3:dc:d0:22:58:d9:98:e2:6a:95:2b:aa:df:31:98:50:
50:f8:ea:24
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASYNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDc0ODI4WhcNMjUwMzA0MDc0ODI4WjAYMRYw
FAYDVQQDEw02NzZkMGE1MC0zZTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvSYgosuvnJZ0ajqcVLtDI3XYWfthY1QEbSKxN4EEU6W+0wd2QQc3gHTI
1PCXLFyLKOGGtly+ilT/ZRVk4HLuoBClnPX4qybbiIVD1bW7Yyt5083+gGKo4X9k
EHf/4AlLdMuiFrPQQBzsbkBE2kC37iZd17OVVk136q287ONRwF7fuQ4aQNauX7sQ
+psvJF9eWyvja0vLEqb7a98MAjZZxDCsKQWEUgCTMpuW5OFZXuPsgfLHc4A7W6Dm
L3SQz2TLzKbq2IwwBBvP7PjErT+GPTOMMDt7EL7+HyCTLI5KB7uATxBmXtILbMiq
RRjjrbTio/3UYbSJHvuUo57gE9OPsQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOaj
++Vq7LbjovQgnkTLFsamoeHDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRDkwODJFNEMzNUQxMUVGOEQ3NzIyNzE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml1zMA0GCSqGSIb3DQEB
CwUAA4IBAQAsJvUac+lY1rc06J6Wadi4AveZTwSr/57TC3EdsC3i91R72H2x/qUZ
VKToi39ca+e6kT7jvT8+VWHXL1mt/fFG/YeGvVTiVEJLDm7mqTWa6GUi9bB8Kc+O
zFd9A4rw/vxJtQVDsTjlHB5jFdosezU/3WPLVIQrbNTjd2UvhtuK3LmivTueSCRo
becu7Imyz60f8j67iDNE+P9gSBZ5521VehpzInzAhhqLyDh0pEfEW4gaV3OlCQW2
XYtMTWRPPj+LZjHonlDITVNtJMQuM36nkHV5EC6ZlXy4TgT5mrBeO798lL2HpkF5
jCchKtPc0CJY2ZjiapUrqt8xmFBQ+Ook
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:00:14 2025 by rpki-client