Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE8DA4CEDC0A11EFA4B59E81762E951A.roa
File: FE8DA4CEDC0A11EFA4B59E81762E951A.roa (raw, json)
Hash identifier: APGZqWNpScYcxiIOu+6GJwzP72E+aQoa6T/vF4+tNxw=
Subject key identifier: A4:EF:4E:49:12:55:6B:5C:74:40:2A:A4:8F:7B:96:D5:0A:CC:B3:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE8DA4CEDC0A11EFA4B59E81762E951A.roa
Signing time: Sun 26 Jan 2025 17:28:45 +0000
ROA not before: Sun 26 Jan 2025 17:28:41 +0000
ROA not after: Tue 01 Apr 2025 17:28:41 +0000
asID: 138915
IP address blocks: 154.94.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84768 (0x14b20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 17:28:41 2025 GMT
Not After : Apr 1 17:28:41 2025 GMT
Subject: CN=679670cd-caa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:32:e0:cc:97:bc:f2:fe:ed:5f:2f:7f:6c:
f6:c1:76:9a:e9:6e:1c:cf:58:8a:7f:9c:10:f8:18:
a8:f8:31:18:d1:73:58:dd:d0:28:bf:46:b8:8a:5e:
d6:b9:57:1d:22:fb:38:b2:e8:e2:cc:49:aa:76:6e:
4a:b4:11:59:32:91:76:7d:ed:65:78:83:72:46:a0:
89:00:df:06:f9:4c:db:2f:dd:21:84:70:d2:51:83:
18:06:97:39:41:ea:c9:59:7d:70:fa:b2:d1:dd:39:
03:1a:fa:c0:6a:9a:aa:53:a8:2f:6a:59:70:05:41:
01:d7:67:1c:0c:20:d7:7b:b7:69:b8:b6:70:3a:d4:
47:b2:a5:54:24:7d:d6:8f:72:be:12:0b:cc:1a:b3:
81:76:13:7b:e8:f6:3e:95:26:f0:2e:e9:17:bf:cb:
6c:d3:54:b0:24:b0:78:f0:10:b6:8d:9f:ec:7c:0e:
94:7d:3b:32:60:40:c7:33:d5:ec:15:13:cc:7a:f7:
84:36:0e:28:e0:5f:f9:9d:40:ad:bc:b6:f8:68:2d:
b7:1c:26:d6:45:be:25:75:3d:88:21:97:10:da:36:
b8:e6:3c:d8:3a:f3:44:6b:d0:74:e1:1c:d6:9c:cc:
35:48:4a:c9:ca:bc:14:0c:10:f4:2d:e1:f0:81:d7:
2f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EF:4E:49:12:55:6B:5C:74:40:2A:A4:8F:7B:96:D5:0A:CC:B3:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE8DA4CEDC0A11EFA4B59E81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.116.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:9b:7b:d7:ac:b2:b4:28:44:bc:dc:b1:e4:2f:e3:e6:c9:4f:
ea:2b:33:66:1a:e6:34:17:ca:d4:a4:cd:dd:6d:4b:a9:96:77:
8c:70:84:3e:f2:c0:2b:50:eb:86:cf:e3:9a:68:5b:61:83:62:
f3:2a:65:76:23:22:b5:4b:27:c7:1d:da:12:79:1c:9e:99:9c:
69:c5:b3:3a:01:78:b5:06:46:db:40:3d:9c:bb:8f:11:6c:a8:
6a:65:59:35:e2:b6:8b:93:fc:8c:33:7e:0a:4f:bd:83:45:19:
24:49:d8:79:54:7a:b3:75:8c:39:46:ab:ba:39:da:d7:f7:33:
29:46:27:1b:56:cc:69:aa:4c:2b:70:2d:53:a8:21:53:7b:f3:
f9:6c:76:5d:7b:c0:6b:ac:ee:f4:3e:ab:a1:2e:3a:68:79:53:
00:60:e7:97:99:3c:1d:66:d1:94:0f:27:01:4f:47:42:4c:25:
15:d9:be:70:a7:be:02:43:7d:b8:8d:ef:f1:2d:5e:48:a6:1d:
9e:a0:65:8a:fa:40:ef:52:29:a8:96:a2:db:62:b0:37:65:c1:
6a:27:09:bc:11:91:ef:22:69:69:e3:0f:c4:fa:65:be:ae:28:
0d:ed:5f:59:0e:53:a3:a6:19:42:47:b2:cc:bb:1b:58:e7:4e:
8b:a2:26:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUsgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI2MTcyODQxWhcNMjUwNDAxMTcyODQxWjAYMRYw
FAYDVQQDEw02Nzk2NzBjZC1jYWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqxQy4MyXvPL+7V8vf2z2wXaa6W4cz1iKf5wQ+Bio+DEY0XNY3dAov0a4
il7WuVcdIvs4sujizEmqdm5KtBFZMpF2fe1leINyRqCJAN8G+UzbL90hhHDSUYMY
Bpc5QerJWX1w+rLR3TkDGvrAapqqU6gvallwBUEB12ccDCDXe7dpuLZwOtRHsqVU
JH3Wj3K+EgvMGrOBdhN76PY+lSbwLukXv8ts01SwJLB48BC2jZ/sfA6UfTsyYEDH
M9XsFRPMeveENg4o4F/5nUCtvLb4aC23HCbWRb4ldT2IIZcQ2ja45jzYOvNEa9B0
4RzWnMw1SErJyrwUDBD0LeHwgdcvVQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKTv
TkkSVWtcdEAqpI97ltUKzLODMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRThEQTRDRURDMEExMUVGQTRCNTlFODE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml50MA0GCSqGSIb3DQEB
CwUAA4IBAQC4m3vXrLK0KES83LHkL+PmyU/qKzNmGuY0F8rUpM3dbUuplneMcIQ+
8sArUOuGz+OaaFthg2LzKmV2IyK1SyfHHdoSeRyemZxpxbM6AXi1BkbbQD2cu48R
bKhqZVk14raLk/yMM34KT72DRRkkSdh5VHqzdYw5Rqu6OdrX9zMpRicbVsxpqkwr
cC1TqCFTe/P5bHZde8BrrO70PquhLjpoeVMAYOeXmTwdZtGUDycBT0dCTCUV2b5w
p74CQ324je/xLV5Iph2eoGWK+kDvUimolqLbYrA3ZcFqJwm8EZHvImlp4w/E+mW+
rigN7V9ZDlOjphlCR7LMuxtY506Loia5
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:59:48 2025 by rpki-client