Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D34597ACDAEF11EFB360A891762E951A.roa
File: D34597ACDAEF11EFB360A891762E951A.roa (raw, json)
Hash identifier: 7GgJEgn2cgg6sN904hEYsFZuJ1X3p/PoYqEqsSUgz1o=
Subject key identifier: 77:CB:57:E8:EA:58:63:DA:AF:10:EE:DD:48:50:B9:F5:A0:16:9A:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D34597ACDAEF11EFB360A891762E951A.roa
Signing time: Sat 25 Jan 2025 07:41:45 +0000
ROA not before: Sat 25 Jan 2025 07:41:41 +0000
ROA not after: Fri 07 Feb 2025 07:41:41 +0000
asID: 5065
IP address blocks: 154.86.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84205 (0x148ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 07:41:41 2025 GMT
Not After : Feb 7 07:41:41 2025 GMT
Subject: CN=679495b9-3aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:dd:e4:16:f8:27:dd:ab:52:7f:60:f8:32:
5f:52:65:a6:ca:c0:c2:46:fb:14:5c:9b:2b:13:3c:
f5:bc:1e:b6:e5:32:e5:4d:31:bc:d7:7b:b1:52:e6:
fd:bf:96:2a:83:d2:f2:b9:4c:d6:a1:96:1a:33:8b:
65:26:c4:6a:c5:38:f5:ed:05:b2:01:aa:d1:ae:de:
1a:0a:b2:ab:54:1b:89:08:f7:f4:59:f2:fe:ba:8d:
1a:4c:29:96:f0:6f:5f:7d:31:c9:88:3c:3d:39:fc:
12:cb:5f:25:87:14:a5:0e:47:ec:f2:89:7f:08:1a:
80:e9:a0:44:98:49:02:c4:a9:f6:de:b1:df:94:14:
99:be:b0:7c:ca:1a:eb:32:6b:f1:e0:41:de:8a:07:
b6:96:68:fd:1f:a7:d6:b4:81:92:d4:8c:1c:06:d1:
b4:50:83:5b:46:01:0b:89:47:ac:83:a4:c2:ed:a3:
7d:e1:a4:ca:82:d5:c8:b1:07:61:bc:53:36:05:6e:
87:a8:da:46:6b:61:7b:21:0c:32:fe:d2:d1:8f:e0:
56:4b:10:61:14:d0:94:6e:cb:fd:68:08:4e:50:14:
fe:76:21:5a:48:e9:84:08:db:50:0c:7a:42:31:4e:
d4:e8:c2:f2:3f:45:63:b6:f8:e4:92:e6:68:5b:ae:
bb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CB:57:E8:EA:58:63:DA:AF:10:EE:DD:48:50:B9:F5:A0:16:9A:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D34597ACDAEF11EFB360A891762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.9.0/24
Signature Algorithm: sha256WithRSAEncryption
95:da:0b:17:26:f4:56:70:ad:45:60:dc:58:8e:da:29:9b:a2:
99:c6:06:53:9b:d2:1c:04:ba:1e:67:1f:94:78:52:d1:08:0a:
d1:66:c7:19:7b:82:c3:2d:0c:06:ee:4f:f2:99:cd:1c:cb:bc:
da:8c:a2:14:1a:b5:5e:10:01:d5:07:87:ce:cb:d4:9b:97:bc:
16:eb:5d:9a:0b:ec:98:e1:3d:a6:d8:b1:0b:2d:98:29:1d:81:
96:f4:77:eb:3a:82:1e:ba:19:91:bf:9e:61:5d:87:1f:9a:be:
a8:e3:22:a9:1c:8f:d6:fc:3f:67:42:c3:18:e8:8b:67:3a:87:
5d:d7:be:73:0f:3f:cf:4f:6a:f8:7e:0e:ef:d9:3c:41:f1:f2:
ae:81:3a:ca:ed:76:fc:b7:66:e2:f9:ef:f9:34:76:ce:e4:91:
7a:98:9a:8f:2d:bd:c0:e2:0f:7b:5e:ae:3b:f9:60:c4:e6:32:
0f:8f:02:6d:e4:7b:14:16:d8:ea:2e:81:8e:b3:16:ee:b8:de:
e0:98:c2:be:e4:46:38:67:aa:e5:18:f7:2d:e4:d9:b1:54:a6:
22:58:53:ad:dd:08:5f:75:55:f9:15:93:e3:2c:2b:ee:2b:19:
25:3e:4e:6b:ec:62:c0:71:75:c1:09:43:88:a2:f7:fc:99:9e:
4f:25:b8:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUjtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI1MDc0MTQxWhcNMjUwMjA3MDc0MTQxWjAYMRYw
FAYDVQQDEw02Nzk0OTViOS0zYWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq0/d5Bb4J92rUn9g+DJfUmWmysDCRvsUXJsrEzz1vB625TLlTTG813ux
Uub9v5Yqg9LyuUzWoZYaM4tlJsRqxTj17QWyAarRrt4aCrKrVBuJCPf0WfL+uo0a
TCmW8G9ffTHJiDw9OfwSy18lhxSlDkfs8ol/CBqA6aBEmEkCxKn23rHflBSZvrB8
yhrrMmvx4EHeige2lmj9H6fWtIGS1IwcBtG0UINbRgELiUesg6TC7aN94aTKgtXI
sQdhvFM2BW6HqNpGa2F7IQwy/tLRj+BWSxBhFNCUbsv9aAhOUBT+diFaSOmECNtQ
DHpCMU7U6MLyP0VjtvjkkuZoW667ewIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHfL
V+jqWGParxDu3UhQufWgFpohMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMzQ1OTdBQ0RBRUYxMUVGQjM2MEE4OTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlYJMA0GCSqGSIb3DQEB
CwUAA4IBAQCV2gsXJvRWcK1FYNxYjtopm6KZxgZTm9IcBLoeZx+UeFLRCArRZscZ
e4LDLQwG7k/ymc0cy7zajKIUGrVeEAHVB4fOy9Sbl7wW612aC+yY4T2m2LELLZgp
HYGW9HfrOoIeuhmRv55hXYcfmr6o4yKpHI/W/D9nQsMY6ItnOodd175zDz/PT2r4
fg7v2TxB8fKugTrK7Xb8t2bi+e/5NHbO5JF6mJqPLb3A4g97Xq47+WDE5jIPjwJt
5HsUFtjqLoGOsxbuuN7gmMK+5EY4Z6rlGPct5NmxVKYiWFOt3QhfdVX5FZPjLCvu
KxklPk5r7GLAcXXBCUOIovf8mZ5PJbjg
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:21 2025 by rpki-client