Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/050A0CC6C8AA11EFB7150C93762E951A.roa
File: 050A0CC6C8AA11EFB7150C93762E951A.roa (raw, json)
Hash identifier: YDegZBLKksP2BsJPjtTuN3vVtXFJh+B+tEtBKPBgG+c=
Subject key identifier: 88:53:B0:8A:60:62:52:F8:7B:6E:23:C9:EB:4F:E4:A4:6D:2F:5F:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01316C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/050A0CC6C8AA11EFB7150C93762E951A.roa
Signing time: Thu 02 Jan 2025 01:36:43 +0000
ROA not before: Thu 02 Jan 2025 01:36:39 +0000
ROA not after: Sun 12 Dec 2027 01:36:39 +0000
asID: 17561
IP address blocks: 154.220.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78188 (0x1316c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 01:36:39 2025 GMT
Not After : Dec 12 01:36:39 2027 GMT
Subject: CN=6775edab-0c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:10:87:79:18:ab:ee:3f:f1:2b:55:40:f2:
fd:59:1e:4c:71:67:f8:f5:c8:17:c3:1b:03:47:8f:
65:ac:1d:c2:4a:c9:10:90:35:08:86:6d:3d:0a:89:
7b:3d:ff:75:9a:37:c8:46:8e:d7:c9:3f:61:07:45:
28:93:4d:f5:f8:0a:52:ff:83:07:2d:56:f4:96:6f:
a2:ce:27:1f:1a:5b:bd:31:ce:5e:2e:da:0b:16:96:
f0:89:f6:b9:89:1b:68:81:99:17:48:47:b0:e3:ae:
00:1f:35:5f:7b:8c:d3:a7:94:d2:3e:de:34:cc:ff:
79:37:36:e3:e1:e0:3d:42:71:23:7d:ed:51:dc:0a:
c9:ed:34:40:c8:10:c9:78:b8:55:d4:3a:a5:ed:78:
0e:36:e4:ca:42:92:66:5d:9d:92:5b:d9:7c:01:e7:
ba:e4:24:1b:b2:81:cf:a9:68:72:2f:f7:f7:17:50:
64:e4:b1:cf:ce:1d:76:5c:4b:d1:ec:b1:28:bd:83:
54:e1:43:ad:37:e8:82:ee:18:f6:08:09:4c:b6:60:
7b:de:d5:16:c9:00:01:a8:2a:0a:79:32:08:20:41:
67:31:60:dc:76:a3:45:48:99:04:38:d7:a5:b1:3b:
ab:cb:ba:53:b1:46:09:7d:5a:04:b1:ed:7d:ec:a2:
aa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:53:B0:8A:60:62:52:F8:7B:6E:23:C9:EB:4F:E4:A4:6D:2F:5F:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/050A0CC6C8AA11EFB7150C93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.145.0/24
Signature Algorithm: sha256WithRSAEncryption
00:99:19:32:32:5a:9e:c8:16:5b:19:d6:e1:79:82:0a:05:a0:
9c:e9:e3:ef:9f:52:bc:24:b6:71:f6:57:43:58:e4:50:4d:8d:
97:ca:4c:0a:27:b4:42:36:e8:2d:06:12:a6:2d:95:9f:e5:52:
21:2e:25:92:88:54:b9:36:13:39:63:4c:38:74:dd:52:d8:d3:
ae:be:c4:a8:34:d9:c2:89:28:71:6d:b1:18:a2:6a:f2:95:e8:
dc:fd:14:9d:8a:c8:e6:32:19:a8:65:18:eb:4b:06:f8:61:4f:
15:87:ea:93:4e:e7:de:a6:f9:dc:be:e5:21:88:e5:86:46:90:
bf:d5:1f:12:61:3e:b2:6a:de:eb:76:f6:25:6f:d7:c3:96:62:
76:6c:06:55:71:ea:28:b5:56:25:9b:bf:27:1f:04:06:df:26:
f9:1c:51:7f:0e:8b:97:ee:00:26:30:66:5a:f1:0f:c1:66:18:
fb:78:2c:a7:a9:ca:f6:f2:d2:8f:68:df:6a:68:ca:8b:31:3c:
4b:f7:84:97:8c:b3:2d:29:d8:5c:bc:0f:1b:0d:ca:ea:86:50:
79:e7:b7:44:a0:3f:98:66:d6:25:1e:b2:69:a5:37:82:a5:0d:
a0:70:d6:db:cc:ae:00:02:57:d3:9e:63:93:91:0e:88:61:c5:
75:24:11:48
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATFsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMDEzNjM5WhcNMjcxMjEyMDEzNjM5WjAYMRYw
FAYDVQQDEw02Nzc1ZWRhYi0wYzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0TQQh3kYq+4/8StVQPL9WR5McWf49cgXwxsDR49lrB3CSskQkDUIhm09
Col7Pf91mjfIRo7XyT9hB0Uok031+ApS/4MHLVb0lm+izicfGlu9Mc5eLtoLFpbw
ifa5iRtogZkXSEew464AHzVfe4zTp5TSPt40zP95Nzbj4eA9QnEjfe1R3ArJ7TRA
yBDJeLhV1Dql7XgONuTKQpJmXZ2SW9l8Aee65CQbsoHPqWhyL/f3F1Bk5LHPzh12
XEvR7LEovYNU4UOtN+iC7hj2CAlMtmB73tUWyQABqCoKeTIIIEFnMWDcdqNFSJkE
ONelsTury7pTsUYJfVoEse197KKqgQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIhT
sIpgYlL4e24jyetP5KRtL19QMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNTBBMENDNkM4QUExMUVGQjcxNTBDOTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtyRMA0GCSqGSIb3DQEB
CwUAA4IBAQAAmRkyMlqeyBZbGdbheYIKBaCc6ePvn1K8JLZx9ldDWORQTY2XykwK
J7RCNugtBhKmLZWf5VIhLiWSiFS5NhM5Y0w4dN1S2NOuvsSoNNnCiShxbbEYomry
lejc/RSdisjmMhmoZRjrSwb4YU8Vh+qTTufepvncvuUhiOWGRpC/1R8SYT6yat7r
dvYlb9fDlmJ2bAZVceootVYlm78nHwQG3yb5HFF/DouX7gAmMGZa8Q/BZhj7eCyn
qcr28tKPaN9qaMqLMTxL94SXjLMtKdhcvA8bDcrqhlB557dEoD+YZtYlHrJppTeC
pQ2gcNbbzK4AAlfTnmOTkQ6IYcV1JBFI
-----END CERTIFICATE-----
Generated at Thu Apr 10 14:16:50 2025 by rpki-client