Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10C11D04F47C11EF9FC87769762E951A.roa
File: 10C11D04F47C11EF9FC87769762E951A.roa (raw, json)
Hash identifier: IE7Vs6werr1iqb+TJwV0YMwnaOXLqc81f/SwmIOFx90=
Subject key identifier: CD:98:6C:CA:4F:C5:25:8D:FF:0A:25:F9:51:3D:BF:30:13:7D:50:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10C11D04F47C11EF9FC87769762E951A.roa
Signing time: Wed 26 Feb 2025 19:58:37 +0000
ROA not before: Wed 26 Feb 2025 19:58:33 +0000
ROA not after: Sat 19 Feb 2028 19:58:33 +0000
asID: 17561
IP address blocks: 154.218.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91603 (0x165d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:58:33 2025 GMT
Not After : Feb 19 19:58:33 2028 GMT
Subject: CN=67bf726c-a780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:53:f2:5c:ba:81:d0:3d:f6:f8:71:e6:62:3a:
3f:6b:14:f4:0c:1d:39:0f:ae:8f:e6:80:8d:77:77:
b6:08:49:fa:d9:cf:3a:c2:26:50:21:2e:8e:39:cb:
83:88:82:f6:9e:5c:4b:cd:1b:b6:85:91:3a:48:53:
b3:7e:26:cd:14:ae:47:32:8f:68:af:d6:d9:87:67:
02:1d:d3:50:cd:2f:85:35:7f:fe:f0:78:f0:9d:96:
3c:7b:f2:2e:f9:f4:3a:5f:f1:43:f1:82:4a:fc:5e:
d6:e8:ea:99:57:08:3b:31:e3:38:8c:ca:a7:cc:2c:
f8:30:25:1c:ac:c3:83:b8:b6:cc:7d:d6:18:c4:2e:
0c:2e:92:f8:06:c4:ea:b0:97:6e:b6:48:8e:fe:d9:
ba:42:ba:d5:f6:d6:5a:6a:ca:aa:ab:a3:c2:20:94:
d2:83:74:2e:6a:8b:f6:1d:f8:e9:82:29:3c:db:b6:
0f:58:b3:2d:f4:a0:06:5a:ea:ee:1e:53:d9:98:ce:
95:71:69:d0:9a:fa:4d:31:b9:a1:02:8f:bf:05:5e:
6d:cd:fc:de:99:0a:50:b6:9b:71:b6:bb:51:0c:f6:
99:62:37:7a:e3:84:f6:93:d4:3c:11:3d:f1:ff:6b:
9d:6b:28:f5:5d:db:88:ec:23:bf:66:92:41:4b:24:
48:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:98:6C:CA:4F:C5:25:8D:FF:0A:25:F9:51:3D:BF:30:13:7D:50:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10C11D04F47C11EF9FC87769762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.56.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:1a:88:25:81:0a:31:33:56:89:c0:7b:25:61:38:f1:24:27:
a4:23:1c:b9:36:bc:9d:3a:30:ff:75:c9:ac:a0:73:d0:25:6f:
d4:bd:34:ab:a8:c5:20:6b:cf:6e:31:b7:c3:05:6b:bb:9d:aa:
43:53:b1:2e:41:99:04:03:67:a6:17:30:eb:dc:84:fa:91:52:
45:56:c2:80:77:ad:85:60:e5:68:f7:f8:f9:3c:3a:0c:a2:10:
ac:8a:86:2d:24:d4:2a:58:29:3b:83:56:84:9d:ec:c5:97:89:
e3:20:db:85:e0:3d:48:da:90:38:dc:87:b4:f5:f2:df:cc:bb:
3b:32:a7:af:47:4a:33:8c:26:01:3f:26:77:28:26:ca:0b:db:
8d:88:98:c0:11:ce:43:aa:e2:68:a7:91:16:5f:12:87:1e:1d:
9f:2d:cf:8c:3d:1e:19:05:95:81:22:b3:4a:7d:bc:94:a1:c3:
af:88:45:e5:e9:0e:9b:47:51:5d:d1:cd:d0:c6:df:65:b8:94:
19:11:75:5f:85:46:c9:9e:57:dc:1d:7d:63:99:7a:fe:90:c4:
52:e3:18:bd:67:5e:46:c5:5e:34:7f:da:4b:04:a2:d0:0e:03:
ae:ce:69:5f:27:a6:90:4d:3b:6f:1a:fd:f6:6f:a4:12:11:5f:
4e:3d:9b:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWXTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTk1ODMzWhcNMjgwMjE5MTk1ODMzWjAYMRYw
FAYDVQQDEw02N2JmNzI2Yy1hNzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0FPyXLqB0D32+HHmYjo/axT0DB05D66P5oCNd3e2CEn62c86wiZQIS6O
OcuDiIL2nlxLzRu2hZE6SFOzfibNFK5HMo9or9bZh2cCHdNQzS+FNX/+8HjwnZY8
e/Iu+fQ6X/FD8YJK/F7W6OqZVwg7MeM4jMqnzCz4MCUcrMODuLbMfdYYxC4MLpL4
BsTqsJdutkiO/tm6QrrV9tZaasqqq6PCIJTSg3Quaov2Hfjpgik827YPWLMt9KAG
WuruHlPZmM6VcWnQmvpNMbmhAo+/BV5tzfzemQpQtptxtrtRDPaZYjd644T2k9Q8
ET3x/2udayj1XduI7CO/ZpJBSyRIhwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM2Y
bMpPxSWN/wol+VE9vzATfVAsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMEMxMUQwNEY0N0MxMUVGOUZDODc3Njk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmto4MA0GCSqGSIb3DQEB
CwUAA4IBAQC5GoglgQoxM1aJwHslYTjxJCekIxy5NrydOjD/dcmsoHPQJW/UvTSr
qMUga89uMbfDBWu7napDU7EuQZkEA2emFzDr3IT6kVJFVsKAd62FYOVo9/j5PDoM
ohCsioYtJNQqWCk7g1aEnezFl4njINuF4D1I2pA43Ie09fLfzLs7MqevR0ozjCYB
PyZ3KCbKC9uNiJjAEc5DquJop5EWXxKHHh2fLc+MPR4ZBZWBIrNKfbyUocOviEXl
6Q6bR1Fd0c3Qxt9luJQZEXVfhUbJnlfcHX1jmXr+kMRS4xi9Z15GxV40f9pLBKLQ
DgOuzmlfJ6aQTTtvGv32b6QSEV9OPZvd
-----END CERTIFICATE-----
Generated at Fri Apr 11 02:03:59 2025 by rpki-client