Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC5A5166D8BE11EFBF7B1744762E951A.roa
File: EC5A5166D8BE11EFBF7B1744762E951A.roa (raw, json)
Hash identifier: YQhnJaPl/aDY1DqINRSLlJAvXL+M7mfZIziODQyHwQ8=
Subject key identifier: 57:16:2C:49:92:66:74:4E:DE:0E:A4:A5:39:14:14:B1:19:8C:25:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC5A5166D8BE11EFBF7B1744762E951A.roa
Signing time: Wed 22 Jan 2025 12:46:39 +0000
ROA not before: Wed 22 Jan 2025 12:46:36 +0000
ROA not after: Sat 08 Feb 2025 12:46:36 +0000
asID: 18229
IP address blocks: 154.210.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81752 (0x13f58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 12:46:36 2025 GMT
Not After : Feb 8 12:46:36 2025 GMT
Subject: CN=6790e8af-565f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:77:68:1b:13:1c:fe:cc:92:56:17:f4:da:ab:
42:e6:9a:3a:a7:6c:df:73:e1:a5:a1:13:5e:7b:63:
f3:89:11:8a:4b:ce:8c:c2:73:db:cb:c3:e3:2e:dd:
61:b8:76:e9:11:18:b8:72:30:e2:ce:02:4b:61:c8:
92:22:fa:85:06:ac:0c:48:8f:fb:85:24:8c:6a:9c:
06:d5:e9:8d:22:0c:10:61:96:a6:27:44:40:60:2c:
75:44:ec:db:45:5d:91:22:56:66:9f:91:13:65:1b:
99:55:31:82:83:48:74:c2:28:d4:33:42:ae:32:c1:
74:c7:ac:03:94:90:f9:61:d0:55:96:ac:a6:57:67:
32:e3:ab:b9:7c:72:86:08:88:1f:6b:af:37:40:9d:
be:93:70:f2:38:b6:c1:98:42:0d:b3:33:36:e4:dc:
1c:37:4a:dc:9b:38:b2:44:56:e2:71:80:77:05:27:
52:7a:03:56:6e:38:95:9b:00:ce:a9:ad:50:81:8a:
7e:45:e6:b4:0d:00:90:b4:e6:b4:7e:e7:f1:bd:e4:
51:15:94:aa:43:15:47:9f:f2:9c:1e:f1:8e:7b:d9:
1f:5f:f4:6a:6e:da:da:a5:bd:ec:4c:b3:20:52:da:
d6:b4:31:23:c4:1b:eb:14:c3:7e:09:21:59:f5:8e:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:16:2C:49:92:66:74:4E:DE:0E:A4:A5:39:14:14:B1:19:8C:25:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC5A5166D8BE11EFBF7B1744762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.143.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4d:a8:48:2d:03:c2:5d:5e:f9:3b:b6:82:8d:0d:8f:4e:e1:
f6:4f:3e:f1:59:fa:cc:30:f1:ab:5a:0a:3a:42:2d:0e:e1:8f:
95:1f:60:96:9c:b3:51:64:fe:2f:46:d9:4c:c9:9d:e3:b4:77:
47:94:b6:eb:6d:79:a6:84:5d:ac:8c:b8:e9:c1:8a:b6:ff:6a:
18:54:2b:77:30:23:63:ec:94:23:90:75:45:b8:71:01:ab:47:
3b:92:1d:9a:30:07:d1:dd:5f:59:93:15:80:f4:ee:41:05:14:
bc:b0:9f:7e:2c:24:2f:95:94:d7:9d:68:f3:8a:21:51:c6:64:
fc:74:f6:26:2d:71:5f:c5:36:af:7a:e4:18:5b:60:ab:9d:1a:
26:ba:6d:67:d1:9b:a1:7c:31:7c:83:ee:f7:72:fc:ee:a8:33:
5e:24:cd:1d:f3:42:0a:68:e8:fb:a6:a7:15:a6:99:7d:45:d5:
18:54:95:32:7f:ba:43:6d:10:cd:17:8a:1c:9c:61:79:35:ed:
33:93:82:17:de:a1:71:ad:40:66:ec:e4:8b:af:f4:a8:b7:82:
14:9f:e5:80:0f:5b:77:7c:40:f9:a4:cc:e6:2d:64:9b:f7:4b:
ad:e0:b3:ef:7a:2b:4d:00:57:56:8c:f3:d9:f3:44:a2:14:67:
97:c7:4a:d5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT9YMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMTI0NjM2WhcNMjUwMjA4MTI0NjM2WjAYMRYw
FAYDVQQDEw02NzkwZThhZi01NjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA23doGxMc/sySVhf02qtC5po6p2zfc+GloRNee2PziRGKS86MwnPby8Pj
Lt1huHbpERi4cjDizgJLYciSIvqFBqwMSI/7hSSMapwG1emNIgwQYZamJ0RAYCx1
ROzbRV2RIlZmn5ETZRuZVTGCg0h0wijUM0KuMsF0x6wDlJD5YdBVlqymV2cy46u5
fHKGCIgfa683QJ2+k3DyOLbBmEINszM25NwcN0rcmziyRFbicYB3BSdSegNWbjiV
mwDOqa1QgYp+Rea0DQCQtOa0fufxveRRFZSqQxVHn/KcHvGOe9kfX/Rqbtrapb3s
TLMgUtrWtDEjxBvrFMN+CSFZ9Y5agwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFcW
LEmSZnRO3g6kpTkUFLEZjCV7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQzVBNTE2NkQ4QkUxMUVGQkY3QjE3NDQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtKPMA0GCSqGSIb3DQEB
CwUAA4IBAQB0TahILQPCXV75O7aCjQ2PTuH2Tz7xWfrMMPGrWgo6Qi0O4Y+VH2CW
nLNRZP4vRtlMyZ3jtHdHlLbrbXmmhF2sjLjpwYq2/2oYVCt3MCNj7JQjkHVFuHEB
q0c7kh2aMAfR3V9ZkxWA9O5BBRS8sJ9+LCQvlZTXnWjziiFRxmT8dPYmLXFfxTav
euQYW2CrnRomum1n0ZuhfDF8g+73cvzuqDNeJM0d80IKaOj7pqcVppl9RdUYVJUy
f7pDbRDNF4ocnGF5Ne0zk4IX3qFxrUBm7OSLr/Sot4IUn+WAD1t3fED5pMzmLWSb
90ut4LPveitNAFdWjPPZ80SiFGeXx0rV
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:45:53 2025 by rpki-client