Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10EE1ABADC1311EF98ADB8B5762E951A.roa
File: 10EE1ABADC1311EF98ADB8B5762E951A.roa (raw, json)
Hash identifier: xtEDr7gwVqgarcXBvMuJ6TSBqYbqCDA+hpecpvI8EY4=
Subject key identifier: 4A:54:B5:01:18:EA:85:AD:7C:D8:A9:31:43:07:14:56:1C:FB:E4:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10EE1ABADC1311EF98ADB8B5762E951A.roa
Signing time: Sun 26 Jan 2025 18:26:32 +0000
ROA not before: Sun 26 Jan 2025 18:26:28 +0000
ROA not after: Tue 01 Apr 2025 18:26:28 +0000
asID: 63139
IP address blocks: 154.94.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84820 (0x14b54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 18:26:28 2025 GMT
Not After : Apr 1 18:26:28 2025 GMT
Subject: CN=67967e58-bf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:7a:f2:dd:b9:26:36:6f:ad:3d:32:bd:26:
c8:bc:e0:02:f9:ce:c5:df:fb:b2:38:da:34:fb:f8:
b6:61:1e:29:1c:9c:2a:f9:a8:2d:8d:1b:dc:62:c3:
23:4a:96:54:aa:d9:3b:66:98:33:b4:57:a6:91:5b:
a8:50:56:a6:05:f6:b4:b9:8d:45:74:ab:16:b8:a6:
7a:31:aa:a9:b9:70:90:76:bb:a0:69:9a:0e:59:70:
00:dc:a8:22:cb:cf:7f:ba:3c:ae:50:d4:ad:93:96:
0e:2e:40:b4:46:88:67:89:f5:ea:42:77:46:4c:2c:
ef:5a:ef:08:9f:22:21:d9:66:e8:ba:28:94:90:3d:
99:69:f1:2c:d4:75:d8:7e:d4:2b:f3:d5:1e:c2:55:
c0:27:5d:f7:13:cf:20:38:3f:bf:78:1d:04:b4:68:
1b:87:3a:d4:78:01:ac:56:3d:f9:d5:01:18:80:96:
d0:7f:9d:36:9b:ae:4e:86:1e:b4:88:5e:40:9e:d3:
6d:3b:92:47:bb:06:bf:b8:d6:23:99:06:8e:4b:93:
93:24:14:e1:73:5a:46:c7:a2:0b:81:5c:00:b2:cc:
a8:6c:0a:8c:ee:ba:7f:ee:c0:41:27:17:b5:43:73:
14:cb:2f:07:72:4a:93:13:82:54:8e:f5:de:7a:17:
99:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:54:B5:01:18:EA:85:AD:7C:D8:A9:31:43:07:14:56:1C:FB:E4:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10EE1ABADC1311EF98ADB8B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.73.0/24
Signature Algorithm: sha256WithRSAEncryption
39:6f:c1:d6:e6:43:f2:9d:26:ad:d7:04:fe:4d:dc:87:be:a1:
d2:83:33:9f:06:a3:39:42:58:e9:b7:78:ff:68:48:12:8b:b8:
5c:c3:9f:f9:17:3d:d6:29:9a:56:d5:1f:4d:b3:f0:11:15:98:
9d:eb:d1:ee:d0:0c:ff:cd:51:be:93:0b:2b:90:ba:38:90:1e:
02:d1:1b:8e:be:23:06:cb:9b:7c:be:73:75:83:89:f3:16:de:
8f:6a:66:99:76:1a:74:7b:a8:5a:54:6c:e5:17:15:0b:5c:32:
77:e7:38:08:99:ab:c2:07:3e:fa:e1:d4:55:64:e9:b9:d9:79:
7c:50:22:2b:0c:ba:c4:7a:f6:48:d5:43:f7:ed:ec:12:91:60:
77:11:d2:76:ac:e0:9a:e4:48:99:af:da:6e:95:54:ff:ad:ff:
70:54:39:bd:dc:92:e6:7a:f0:31:44:71:33:31:47:91:51:81:
98:d0:a6:f2:12:d0:a8:0e:9d:ec:80:36:c9:ca:be:1c:7f:4b:
81:ca:20:10:e9:54:48:42:99:dd:84:43:84:bd:73:ca:ca:a8:
3a:aa:da:dc:8d:83:8f:d5:c1:21:6a:8f:74:bb:92:ce:71:4b:
84:56:7a:3f:9d:78:df:3b:47:f9:0e:70:ab:ab:89:a0:d4:f2:
88:1c:6c:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUtUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI2MTgyNjI4WhcNMjUwNDAxMTgyNjI4WjAYMRYw
FAYDVQQDEw02Nzk2N2U1OC1iZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArtB68t25JjZvrT0yvSbIvOAC+c7F3/uyONo0+/i2YR4pHJwq+agtjRvc
YsMjSpZUqtk7ZpgztFemkVuoUFamBfa0uY1FdKsWuKZ6MaqpuXCQdrugaZoOWXAA
3Kgiy89/ujyuUNStk5YOLkC0RohnifXqQndGTCzvWu8InyIh2WbouiiUkD2ZafEs
1HXYftQr89UewlXAJ133E88gOD+/eB0EtGgbhzrUeAGsVj351QEYgJbQf502m65O
hh60iF5AntNtO5JHuwa/uNYjmQaOS5OTJBThc1pGx6ILgVwAssyobAqM7rp/7sBB
Jxe1Q3MUyy8HckqTE4JUjvXeeheZfQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEpU
tQEY6oWtfNipMUMHFFYc++RiMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMEVFMUFCQURDMTMxMUVGOThBREI4QjU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5JMA0GCSqGSIb3DQEB
CwUAA4IBAQA5b8HW5kPynSat1wT+TdyHvqHSgzOfBqM5Qljpt3j/aEgSi7hcw5/5
Fz3WKZpW1R9Ns/ARFZid69Hu0Az/zVG+kwsrkLo4kB4C0RuOviMGy5t8vnN1g4nz
Ft6PamaZdhp0e6haVGzlFxULXDJ35zgImavCBz764dRVZOm52Xl8UCIrDLrEevZI
1UP37ewSkWB3EdJ2rOCa5EiZr9pulVT/rf9wVDm93JLmevAxRHEzMUeRUYGY0Kby
EtCoDp3sgDbJyr4cf0uByiAQ6VRIQpndhEOEvXPKyqg6qtrcjYOP1cEhao90u5LO
cUuEVno/nXjfO0f5DnCrq4mg1PKIHGzp
-----END CERTIFICATE-----
Generated at Sat Apr 12 04:59:33 2025 by rpki-client