Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFEA3DF6D73311EFAF13B29D762E951A.roa
File: DFEA3DF6D73311EFAF13B29D762E951A.roa (raw, json)
Hash identifier: Cw5lNcf+OF7emuanoKzP1jfpHUOMfRRxAj4OdJupZ2k=
Subject key identifier: FF:12:FA:B7:DC:BF:14:F4:19:D6:A3:5A:27:1B:BC:F5:35:60:98:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFEA3DF6D73311EFAF13B29D762E951A.roa
Signing time: Mon 20 Jan 2025 13:38:47 +0000
ROA not before: Mon 20 Jan 2025 13:38:43 +0000
ROA not after: Wed 05 Feb 2025 13:38:43 +0000
asID: 140570
IP address blocks: 154.91.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81494 (0x13e56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 20 13:38:43 2025 GMT
Not After : Feb 5 13:38:43 2025 GMT
Subject: CN=678e51e7-3d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:24:6e:90:32:2a:95:b7:e1:74:90:49:11:
85:c5:b2:3c:16:a0:6b:40:f9:76:f9:8e:b7:52:1d:
01:83:76:be:cb:c2:e4:d2:74:2e:2e:1e:49:3d:e9:
9b:3f:bd:00:cf:81:93:b1:2a:f7:5e:3a:b9:56:56:
3c:4e:ac:ac:b4:42:48:39:c1:12:c8:88:a0:d3:ca:
45:08:e5:fb:d5:f8:83:d5:f2:3f:ef:23:56:81:ec:
f6:9a:c8:fc:83:fc:c0:ac:2a:40:17:3f:5a:78:be:
fb:f9:12:c7:99:1f:86:88:89:77:ef:90:9c:a2:6c:
c7:93:38:47:e6:d7:2b:cd:4d:2a:92:3b:8f:70:71:
14:60:33:55:4c:e4:f2:be:08:7b:79:37:38:ae:27:
aa:61:eb:2a:49:97:79:d0:7c:21:52:70:b1:dc:ff:
20:9b:5d:b2:bb:1e:41:2d:45:0c:e3:8c:63:9f:85:
c5:1e:4b:aa:e4:31:3c:cd:c2:24:00:22:fc:de:fd:
47:7c:ff:fd:38:17:2b:c6:90:ba:5b:6a:9c:7b:6f:
6e:97:67:68:f0:f0:3a:bf:b6:19:8a:5f:7a:20:cb:
04:90:4e:b3:25:be:14:fd:62:d4:86:e9:78:57:55:
dd:7c:dc:a9:7d:2c:66:cb:a6:45:55:5e:7f:b2:a7:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:12:FA:B7:DC:BF:14:F4:19:D6:A3:5A:27:1B:BC:F5:35:60:98:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFEA3DF6D73311EFAF13B29D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.5.0/24
Signature Algorithm: sha256WithRSAEncryption
76:9a:83:82:1f:1f:00:ff:71:21:85:4a:5a:00:93:b1:e2:c6:
58:20:d7:5e:0b:e7:8f:56:d7:d7:ef:90:4d:9b:e4:a2:11:33:
af:0d:4f:02:a7:c8:b2:27:ba:b0:23:91:c9:b7:1a:eb:31:8c:
5e:52:a7:3d:ce:54:f5:27:61:eb:4f:d5:8f:e8:25:09:43:23:
8a:4a:a6:f6:5c:73:ea:0d:46:a8:70:72:3c:da:74:cf:b3:82:
65:de:b3:a6:28:56:0f:cd:1e:b1:e1:dc:1c:fe:de:cc:5a:2d:
65:b4:c8:bd:d7:ef:25:e8:d9:70:90:57:e2:23:e5:7d:13:3b:
64:a9:da:da:e6:3f:0e:ed:fe:33:e0:cd:1a:7f:91:45:56:17:
61:14:b8:b9:5a:e0:99:5d:87:aa:48:ff:c7:1d:8b:59:7e:d0:
65:5c:ec:40:67:f9:2b:76:c4:99:8a:96:2c:1c:6d:59:84:ad:
26:d7:2d:42:7e:81:30:14:49:77:a1:ed:e9:44:84:69:e7:39:
5f:1b:74:a6:ae:a3:17:f0:7c:5b:dc:15:b9:82:7c:f8:a9:c4:
e5:62:af:04:75:2b:74:f4:fb:3d:4a:82:90:9b:e3:92:98:37:
b1:e7:f0:d0:f0:69:27:5a:a3:f3:fd:d5:9b:1c:c7:27:bd:a9:
3b:f8:49:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT5WMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIwMTMzODQzWhcNMjUwMjA1MTMzODQzWjAYMRYw
FAYDVQQDEw02NzhlNTFlNy0zZDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvQkkbpAyKpW34XSQSRGFxbI8FqBrQPl2+Y63Uh0Bg3a+y8Lk0nQuLh5J
PembP70Az4GTsSr3Xjq5VlY8TqystEJIOcESyIig08pFCOX71fiD1fI/7yNWgez2
msj8g/zArCpAFz9aeL77+RLHmR+GiIl375CcomzHkzhH5tcrzU0qkjuPcHEUYDNV
TOTyvgh7eTc4rieqYesqSZd50HwhUnCx3P8gm12yux5BLUUM44xjn4XFHkuq5DE8
zcIkACL83v1HfP/9OBcrxpC6W2qce29ul2do8PA6v7YZil96IMsEkE6zJb4U/WLU
hul4V1XdfNypfSxmy6ZFVV5/sqdHKQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFP8S
+rfcvxT0GdajWicbvPU1YJhPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERkVBM0RGNkQ3MzMxMUVGQUYxM0IyOUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlsFMA0GCSqGSIb3DQEB
CwUAA4IBAQB2moOCHx8A/3EhhUpaAJOx4sZYINdeC+ePVtfX75BNm+SiETOvDU8C
p8iyJ7qwI5HJtxrrMYxeUqc9zlT1J2HrT9WP6CUJQyOKSqb2XHPqDUaocHI82nTP
s4Jl3rOmKFYPzR6x4dwc/t7MWi1ltMi91+8l6NlwkFfiI+V9Eztkqdra5j8O7f4z
4M0af5FFVhdhFLi5WuCZXYeqSP/HHYtZftBlXOxAZ/krdsSZipYsHG1ZhK0m1y1C
foEwFEl3oe3pRIRp5zlfG3SmrqMX8Hxb3BW5gnz4qcTlYq8EdSt09Ps9SoKQm+OS
mDex5/DQ8GknWqPz/dWbHMcnvak7+Enp
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:31 2025 by rpki-client