Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D989EA02C29C11EF99276BA7762E951A.roa
File: D989EA02C29C11EF99276BA7762E951A.roa (raw, json)
Hash identifier: eVwOMB3ounvPgxhIkXq02hyd0a64y3vfQ98/4r44TqY=
Subject key identifier: 43:12:3D:1B:66:7A:36:B2:A6:2C:3E:13:F3:D4:E9:65:B0:41:6C:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01250E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D989EA02C29C11EF99276BA7762E951A.roa
Signing time: Wed 25 Dec 2024 08:47:19 +0000
ROA not before: Wed 25 Dec 2024 08:47:16 +0000
ROA not after: Sun 09 Feb 2025 08:47:16 +0000
asID: 138915
IP address blocks: 154.223.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75022 (0x1250e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 08:47:16 2024 GMT
Not After : Feb 9 08:47:16 2025 GMT
Subject: CN=676bc697-c549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:49:a3:db:2f:47:61:16:8e:7f:2d:85:dc:2a:
af:53:fb:d4:e1:ec:35:00:4a:a2:98:a4:c1:b2:d7:
18:49:fc:81:81:49:cc:ed:80:7c:47:20:f5:16:ae:
b3:35:10:bc:56:74:40:52:94:64:43:56:b2:06:30:
ec:cc:6b:66:c7:d7:72:d7:b7:22:11:b8:f5:13:a7:
c9:0d:d3:04:49:98:3e:bc:e0:92:84:43:20:5d:d6:
ba:1d:02:40:74:9e:1c:73:21:63:14:48:76:08:54:
bf:02:6a:d5:48:79:3c:73:9b:47:93:26:74:d6:f3:
37:d4:bd:20:65:ff:93:73:28:71:6c:3b:94:d9:6a:
98:fd:69:82:bc:f7:6e:47:b2:ef:b2:ff:cb:2d:8a:
ba:1f:6d:cd:32:90:41:7b:15:11:13:10:72:45:86:
50:29:95:1f:49:00:e8:d4:ae:e6:c6:0e:71:30:f0:
49:a1:54:c3:76:9e:82:6c:bb:84:8b:11:6a:0b:fa:
d8:7d:1a:92:7d:ae:aa:a6:e6:1e:77:c9:5b:dc:19:
cd:e1:c9:eb:61:88:d6:0e:0a:11:e4:8d:7e:2a:14:
c2:08:11:b3:b8:f9:22:ff:ce:f1:50:84:1e:d7:9e:
47:3f:56:56:94:5c:3b:02:9f:86:9c:ce:e0:40:76:
4a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:12:3D:1B:66:7A:36:B2:A6:2C:3E:13:F3:D4:E9:65:B0:41:6C:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D989EA02C29C11EF99276BA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.40.0/21
Signature Algorithm: sha256WithRSAEncryption
c3:c0:17:e5:94:fb:2f:64:24:37:db:39:6b:2e:55:35:73:2d:
f8:ed:a3:43:51:37:ae:ac:28:6e:46:16:c5:e7:7b:53:c8:6e:
22:d0:03:48:40:e9:f9:fd:aa:6c:0a:3e:c6:32:50:a1:04:3e:
6b:33:b3:2d:8b:c7:46:11:82:f8:d2:b5:d9:78:5e:07:8a:d3:
16:94:8b:78:9d:01:67:27:d3:79:3f:6a:90:19:7d:4d:f8:dd:
eb:f6:f7:2d:26:5b:b3:c3:22:3f:ec:86:13:e1:fd:d9:13:99:
55:c1:f1:d9:fa:e4:a7:94:54:c1:6e:4a:9a:3f:36:d8:b4:38:
99:d0:f9:bc:14:dd:0d:db:cd:dc:e2:b6:46:64:f4:dc:84:83:
8c:c6:fe:b2:64:3f:d8:6d:e0:c3:64:50:5e:93:60:ff:73:91:
28:61:75:c4:7d:ca:71:2d:05:af:d6:a4:68:2d:1e:3b:8e:54:
ba:d1:12:88:c4:ff:30:73:83:2c:94:a3:1b:86:24:2e:7d:f5:
2f:71:ff:52:d6:78:ce:3b:64:48:30:63:d1:f2:1d:67:79:59:
71:66:ea:99:7a:7f:22:c9:c6:96:2b:0c:df:2b:e2:5b:a4:91:
62:2d:b0:56:64:38:af:e0:be:e8:cb:47:1a:0c:c6:d9:47:69:
11:bb:c2:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASUOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDg0NzE2WhcNMjUwMjA5MDg0NzE2WjAYMRYw
FAYDVQQDEw02NzZiYzY5Ny1jNTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwkmj2y9HYRaOfy2F3CqvU/vU4ew1AEqimKTBstcYSfyBgUnM7YB8RyD1
Fq6zNRC8VnRAUpRkQ1ayBjDszGtmx9dy17ciEbj1E6fJDdMESZg+vOCShEMgXda6
HQJAdJ4ccyFjFEh2CFS/AmrVSHk8c5tHkyZ01vM31L0gZf+TcyhxbDuU2WqY/WmC
vPduR7Lvsv/LLYq6H23NMpBBexURExByRYZQKZUfSQDo1K7mxg5xMPBJoVTDdp6C
bLuEixFqC/rYfRqSfa6qpuYed8lb3BnN4cnrYYjWDgoR5I1+KhTCCBGzuPki/87x
UIQe155HP1ZWlFw7Ap+GnM7gQHZK6QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEMS
PRtmejaypiw+E/PU6WWwQWywMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EOTg5RUEwMkMyOUMxMUVGOTkyNzZCQTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmt8oMA0GCSqGSIb3DQEB
CwUAA4IBAQDDwBfllPsvZCQ32zlrLlU1cy347aNDUTeurChuRhbF53tTyG4i0ANI
QOn5/apsCj7GMlChBD5rM7Mti8dGEYL40rXZeF4HitMWlIt4nQFnJ9N5P2qQGX1N
+N3r9vctJluzwyI/7IYT4f3ZE5lVwfHZ+uSnlFTBbkqaPzbYtDiZ0Pm8FN0N283c
4rZGZPTchIOMxv6yZD/YbeDDZFBek2D/c5EoYXXEfcpxLQWv1qRoLR47jlS60RKI
xP8wc4MslKMbhiQuffUvcf9S1njOO2RIMGPR8h1neVlxZuqZen8iycaWKwzfK+Jb
pJFiLbBWZDiv4L7oy0caDMbZR2kRu8L8
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:10:21 2025 by rpki-client