Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFEF6F0EDFE411EF8E95F87A762E951A.roa
File: FFEF6F0EDFE411EF8E95F87A762E951A.roa (raw, json)
Hash identifier: MSAtfvn96GgY9vTTFxz1CYz7exvXTBPmNC/sBvhqYwQ=
Subject key identifier: 34:D7:9F:31:2B:77:BF:73:6C:DA:EE:7A:AF:E4:A0:07:A7:D4:A6:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFEF6F0EDFE411EF8E95F87A762E951A.roa
Signing time: Fri 31 Jan 2025 15:06:51 +0000
ROA not before: Fri 31 Jan 2025 15:06:47 +0000
ROA not after: Tue 04 Feb 2025 15:06:47 +0000
asID: 5065
IP address blocks: 154.83.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85462 (0x14dd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 15:06:47 2025 GMT
Not After : Feb 4 15:06:47 2025 GMT
Subject: CN=679ce70b-5b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:65:7e:25:22:93:ac:d3:85:9a:35:f9:bf:
6b:cd:fa:e7:34:8f:f5:8f:a6:28:36:8d:73:d8:81:
b3:54:bf:76:93:7a:36:5e:93:27:78:9f:be:44:c7:
a9:0e:a5:d8:4d:87:03:35:a9:76:ea:0e:52:17:91:
82:6d:9d:3c:cd:87:38:6e:2f:70:27:6f:c9:4b:ff:
0c:91:5f:0b:d2:c2:d9:bb:5d:76:45:26:81:29:bc:
04:45:73:54:c3:e1:d8:d8:b1:2b:80:ac:8c:31:4e:
f3:7c:f1:0e:27:27:32:90:84:39:78:ed:5d:d9:b7:
23:64:da:9d:e9:87:25:5b:27:61:2c:4d:2c:c1:bf:
46:5b:57:ad:a9:89:34:c4:9a:67:c2:5d:a9:bc:1e:
0f:7f:fe:8f:07:ec:72:e7:e6:13:9d:05:e0:4f:8a:
66:dd:7b:3a:34:90:62:68:ac:9b:36:5d:61:d3:25:
c9:9d:79:57:c4:fb:2a:ee:73:70:73:64:f7:e5:25:
78:fe:8d:af:b9:84:9d:16:8c:7e:f7:cf:90:0d:40:
a7:ad:4a:40:1b:e7:c3:28:30:92:f7:70:e7:db:7f:
be:f8:31:14:d2:4f:bc:82:27:e5:51:5b:07:fd:15:
3e:16:27:96:12:21:11:bf:cf:82:0e:43:9f:2b:32:
02:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D7:9F:31:2B:77:BF:73:6C:DA:EE:7A:AF:E4:A0:07:A7:D4:A6:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFEF6F0EDFE411EF8E95F87A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.32.0/21
Signature Algorithm: sha256WithRSAEncryption
d1:d6:9a:6b:dd:60:61:0c:56:69:81:7f:4d:20:77:31:de:b1:
53:c8:91:19:2c:34:22:b2:01:06:84:ed:e5:e1:be:b5:53:97:
49:1b:d9:b1:45:6f:51:ca:4a:4d:e8:bf:cd:88:44:f9:4c:65:
85:b3:fb:69:dd:b0:1d:21:8f:0a:8b:ba:c2:82:9e:25:bd:27:
15:da:86:63:22:0e:a6:12:7b:9d:1c:91:c7:2b:75:fe:14:71:
e9:ff:35:23:51:bf:d6:d6:11:1e:dc:70:ee:ec:52:f6:03:3d:
b3:e8:69:68:08:2c:60:31:cd:61:9d:c7:0c:fb:05:0b:e1:37:
0f:7e:48:cf:77:34:91:21:a2:0e:c0:16:d9:19:ce:22:fd:fa:
ae:0b:6b:b8:d2:b8:42:5d:ad:57:06:d9:4b:a2:11:83:c8:94:
1c:b4:7c:0e:89:39:ba:4a:d8:9d:6a:b6:84:70:df:7c:ac:1c:
35:45:3a:f7:b0:e4:8f:cb:3e:ac:c1:6d:6b:c6:23:30:df:75:
f3:81:67:59:db:74:c8:c6:91:b0:f9:9c:ef:d4:23:0d:24:02:
5a:9a:18:72:4d:26:57:88:df:09:c1:8d:cc:9c:67:e7:59:f5:
52:09:63:5e:c9:cb:38:67:41:a0:58:6d:56:9b:6e:37:89:01:
a6:fb:30:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU3WMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTMxMTUwNjQ3WhcNMjUwMjA0MTUwNjQ3WjAYMRYw
FAYDVQQDEw02NzljZTcwYi01YjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtHRlfiUik6zThZo1+b9rzfrnNI/1j6YoNo1z2IGzVL92k3o2XpMneJ++
RMepDqXYTYcDNal26g5SF5GCbZ08zYc4bi9wJ2/JS/8MkV8L0sLZu112RSaBKbwE
RXNUw+HY2LErgKyMMU7zfPEOJycykIQ5eO1d2bcjZNqd6YclWydhLE0swb9GW1et
qYk0xJpnwl2pvB4Pf/6PB+xy5+YTnQXgT4pm3Xs6NJBiaKybNl1h0yXJnXlXxPsq
7nNwc2T35SV4/o2vuYSdFox+98+QDUCnrUpAG+fDKDCS93Dn23+++DEU0k+8gifl
UVsH/RU+FieWEiERv8+CDkOfKzIClQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDTX
nzErd79zbNrueq/koAen1KagMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRkVGNkYwRURGRTQxMUVGOEU5NUY4N0E3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlMgMA0GCSqGSIb3DQEB
CwUAA4IBAQDR1ppr3WBhDFZpgX9NIHcx3rFTyJEZLDQisgEGhO3l4b61U5dJG9mx
RW9RykpN6L/NiET5TGWFs/tp3bAdIY8Ki7rCgp4lvScV2oZjIg6mEnudHJHHK3X+
FHHp/zUjUb/W1hEe3HDu7FL2Az2z6GloCCxgMc1hnccM+wUL4TcPfkjPdzSRIaIO
wBbZGc4i/fquC2u40rhCXa1XBtlLohGDyJQctHwOiTm6StidaraEcN98rBw1RTr3
sOSPyz6swW1rxiMw33XzgWdZ23TIxpGw+Zzv1CMNJAJamhhyTSZXiN8JwY3MnGfn
WfVSCWNeycs4Z0GgWG1Wm243iQGm+zA/
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:29:39 2025 by rpki-client