Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05957DCCC8B111EFADE0A248762E951A.roa
File: 05957DCCC8B111EFADE0A248762E951A.roa (raw, json)
Hash identifier: dc40fiJIJHgZpfcf/CaLQcE+ENWfwhiTck0dRDOXmwg=
Subject key identifier: C4:51:1C:72:F9:C9:16:23:78:6D:51:D7:39:CD:71:A8:1D:2C:7E:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05957DCCC8B111EFADE0A248762E951A.roa
Signing time: Thu 02 Jan 2025 02:26:50 +0000
ROA not before: Thu 02 Jan 2025 02:26:46 +0000
ROA not after: Mon 13 Dec 2027 02:26:46 +0000
asID: 17561
IP address blocks: 154.220.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78248 (0x131a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 02:26:46 2025 GMT
Not After : Dec 13 02:26:46 2027 GMT
Subject: CN=6775f96a-d881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:51:36:af:ca:bc:e4:6c:cc:a2:41:62:16:
f0:4e:44:5e:1b:d9:88:73:54:1f:a3:fd:6e:c0:cd:
b3:70:28:11:3d:59:98:bd:87:ca:bd:a7:75:41:69:
14:19:71:c0:15:07:a1:9f:d1:17:00:a7:28:f2:de:
80:b1:d3:7f:9e:ae:2e:fd:ba:c0:c7:88:4f:be:c9:
1d:ec:33:69:49:64:0d:e5:14:56:ed:40:97:b3:b9:
2a:cc:87:c8:7b:f6:98:45:08:fe:e8:45:0f:25:a6:
3f:ef:d3:42:a7:f5:56:fe:25:f4:6a:2d:36:08:3e:
16:09:39:47:aa:b0:71:80:ff:bb:46:99:ad:4d:8a:
a8:5e:6f:4f:f7:b3:7a:ae:e3:91:85:dd:26:90:f9:
5d:1d:64:d1:68:47:fa:ed:90:7c:90:5d:d0:d8:65:
52:5a:dd:7a:21:56:b6:82:5c:ca:3a:91:0f:1e:18:
29:7e:bb:bd:cf:fb:c5:9b:eb:8c:31:6f:c8:02:f5:
93:ab:72:62:42:92:9b:aa:e9:7a:e4:df:55:2e:8a:
17:71:5b:10:81:87:dd:f5:03:86:77:56:e2:58:64:
a2:c1:75:5d:d9:63:80:ed:29:4a:a7:fb:66:34:01:
66:39:9c:da:46:b9:9c:ff:7b:78:a2:c8:72:76:b0:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:51:1C:72:F9:C9:16:23:78:6D:51:D7:39:CD:71:A8:1D:2C:7E:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05957DCCC8B111EFADE0A248762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.176.0/24
Signature Algorithm: sha256WithRSAEncryption
58:41:d3:40:a2:24:6b:21:c1:5d:69:16:c1:94:db:ad:e3:1a:
13:01:f9:4d:45:81:aa:e0:19:f8:d6:18:11:42:3c:7d:a7:49:
14:bc:4a:dd:ff:12:ed:be:01:5b:77:1f:1e:81:02:c3:11:2c:
12:d7:80:94:ab:12:f2:16:0e:91:84:24:cf:82:b7:e0:16:c9:
a6:20:d2:17:75:47:e7:4e:a2:59:c5:ea:cb:d2:17:9d:fd:28:
ce:3b:f8:f4:b9:bc:91:e7:5a:e8:46:10:42:0f:7c:5e:47:6f:
89:8e:23:a3:b1:83:69:5e:7d:dd:83:01:a4:01:99:98:e8:dd:
1a:fc:b8:bb:3e:d5:8a:30:95:58:13:75:76:0a:10:09:bd:93:
2b:bb:1e:35:22:24:e0:b6:fa:57:2e:e5:55:19:18:f7:3c:ab:
e5:7d:7d:f7:00:f3:34:ca:ef:17:be:c0:cb:e0:2c:29:a5:83:
61:af:d3:b1:65:ac:b8:21:25:fb:b7:c0:d5:e0:1b:0e:43:a2:
fd:f2:1d:c6:94:4d:e5:81:30:9f:46:d9:52:8d:5a:12:fe:1a:
c6:28:db:97:58:1a:8d:9a:6d:4f:bc:1c:9d:03:78:99:5d:7b:
ab:bb:49:17:d0:18:9a:67:08:ed:1d:dd:e7:2f:ff:83:b9:3d:
00:50:73:7c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATGoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMDIyNjQ2WhcNMjcxMjEzMDIyNjQ2WjAYMRYw
FAYDVQQDEw02Nzc1Zjk2YS1kODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsNpRNq/KvORszKJBYhbwTkReG9mIc1Qfo/1uwM2zcCgRPVmYvYfKvad1
QWkUGXHAFQehn9EXAKco8t6AsdN/nq4u/brAx4hPvskd7DNpSWQN5RRW7UCXs7kq
zIfIe/aYRQj+6EUPJaY/79NCp/VW/iX0ai02CD4WCTlHqrBxgP+7RpmtTYqoXm9P
97N6ruORhd0mkPldHWTRaEf67ZB8kF3Q2GVSWt16IVa2glzKOpEPHhgpfru9z/vF
m+uMMW/IAvWTq3JiQpKbqul65N9VLooXcVsQgYfd9QOGd1biWGSiwXVd2WOA7SlK
p/tmNAFmOZzaRrmc/3t4oshydrD4FwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMRR
HHL5yRYjeG1R1znNcagdLH6YMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNTk1N0RDQ0M4QjExMUVGQURFMEEyNDg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtywMA0GCSqGSIb3DQEB
CwUAA4IBAQBYQdNAoiRrIcFdaRbBlNut4xoTAflNRYGq4Bn41hgRQjx9p0kUvErd
/xLtvgFbdx8egQLDESwS14CUqxLyFg6RhCTPgrfgFsmmINIXdUfnTqJZxerL0hed
/SjOO/j0ubyR51roRhBCD3xeR2+JjiOjsYNpXn3dgwGkAZmY6N0a/Li7PtWKMJVY
E3V2ChAJvZMrux41IiTgtvpXLuVVGRj3PKvlfX33APM0yu8XvsDL4CwppYNhr9Ox
Zay4ISX7t8DV4BsOQ6L98h3GlE3lgTCfRtlSjVoS/hrGKNuXWBqNmm1PvBydA3iZ
XXuru0kX0BiaZwjtHd3nL/+DuT0AUHN8
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:27:58 2025 by rpki-client