Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11BE5814F5D211EF8BBDD49C762E951A.roa
File: 11BE5814F5D211EF8BBDD49C762E951A.roa (raw, json)
Hash identifier: KtGnM5iyJ3XMSw/WAbS2xIHI1CSnhy8eBgeHqN3u19c=
Subject key identifier: BA:92:99:B8:88:69:1D:4A:F9:6B:F4:8E:E3:7C:E8:D8:BD:CA:7D:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B39
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11BE5814F5D211EF8BBDD49C762E951A.roa
Signing time: Fri 28 Feb 2025 12:46:46 +0000
ROA not before: Fri 28 Feb 2025 12:46:42 +0000
ROA not after: Mon 31 Mar 2025 12:46:42 +0000
asID: 398478
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92985 (0x16b39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 12:46:42 2025 GMT
Not After : Mar 31 12:46:42 2025 GMT
Subject: CN=67c1b036-548e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:67:2c:9f:c3:42:dc:8f:b2:d6:08:5d:b3:
98:12:81:6d:cb:f6:45:fd:47:4f:02:a6:ee:9f:50:
5d:50:f2:f9:00:65:83:f4:d1:df:43:70:95:71:87:
ea:07:02:48:c1:ae:b3:aa:d8:5a:66:a1:45:42:ae:
b6:b2:fd:ff:89:90:5b:fa:38:de:39:05:75:5a:8d:
6d:db:18:e8:ca:f3:1d:cc:e8:7c:a3:c3:ae:21:21:
d4:48:9d:99:b6:9f:d1:79:cd:9c:5a:5b:fe:94:4d:
c6:22:9b:70:f9:c2:7a:60:99:2a:95:ab:c4:a9:d7:
bf:81:5a:66:66:50:67:21:8c:5b:f8:8d:69:c4:c8:
dd:3a:eb:8f:0f:bb:a3:fc:85:b0:f1:46:23:eb:04:
30:16:6a:4b:19:60:56:c3:81:12:47:68:c2:5c:5c:
6a:ac:4d:03:04:c4:08:5b:d2:52:f5:a8:d1:87:5d:
c3:3f:49:76:f0:cc:dc:47:ce:0c:4c:dd:98:e5:6f:
7f:d8:21:6d:c9:e5:1d:7d:ff:e7:5a:39:e5:53:bf:
88:7a:19:81:f1:82:37:62:98:6b:22:25:d6:61:57:
01:c8:8a:03:29:a6:03:b1:95:fa:2d:d1:c2:bb:93:
90:43:f0:02:5e:e8:fc:4c:c7:f9:aa:9f:be:fb:96:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:92:99:B8:88:69:1D:4A:F9:6B:F4:8E:E3:7C:E8:D8:BD:CA:7D:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11BE5814F5D211EF8BBDD49C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
c9:38:b2:f1:cd:18:1b:40:1e:de:6d:b0:80:69:d6:c4:17:31:
82:d4:a6:10:a5:c1:51:f2:f1:d3:4f:d6:93:4f:3b:3a:d5:b2:
0b:37:8c:f0:ed:a5:3f:9c:77:30:5e:ef:42:b6:79:ae:45:58:
64:1f:16:fa:36:3e:bd:7f:67:f1:14:8b:9a:a2:50:06:2c:d3:
40:18:e9:dc:d1:4a:df:3f:6b:57:42:24:9b:82:a2:2a:f3:9f:
0c:fb:69:a1:6e:b7:f7:e3:ec:88:4a:e3:3a:32:2b:49:87:4b:
a1:25:b0:24:60:64:0c:31:55:76:52:49:2a:ea:37:e1:cb:32:
50:4d:fb:f9:4b:67:f2:99:3e:92:96:54:f7:52:0b:c3:32:09:
74:70:ef:13:26:b8:60:c4:6d:86:e2:65:b6:fc:de:bf:17:8d:
b3:32:f1:56:8f:39:79:db:71:b3:00:10:14:36:2d:ba:64:fd:
00:5d:3d:46:0b:bd:ce:36:c2:e6:14:be:bb:e2:75:70:ce:8f:
59:d8:74:ac:3b:04:31:8a:20:ed:d5:82:fe:f1:09:36:34:b0:
2f:43:12:ff:84:26:d8:3e:5e:d9:17:6b:10:92:0f:98:99:06:
9d:3b:47:14:30:81:ca:01:49:94:5b:bb:40:62:56:28:da:cc:
55:8f:f3:72
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWs5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MTI0NjQyWhcNMjUwMzMxMTI0NjQyWjAYMRYw
FAYDVQQDEw02N2MxYjAzNi01NDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzdlnLJ/DQtyPstYIXbOYEoFty/ZF/UdPAqbun1BdUPL5AGWD9NHfQ3CV
cYfqBwJIwa6zqthaZqFFQq62sv3/iZBb+jjeOQV1Wo1t2xjoyvMdzOh8o8OuISHU
SJ2Ztp/Rec2cWlv+lE3GIptw+cJ6YJkqlavEqde/gVpmZlBnIYxb+I1pxMjdOuuP
D7uj/IWw8UYj6wQwFmpLGWBWw4ESR2jCXFxqrE0DBMQIW9JS9ajRh13DP0l28Mzc
R84MTN2Y5W9/2CFtyeUdff/nWjnlU7+IehmB8YI3YphrIiXWYVcByIoDKaYDsZX6
LdHCu5OQQ/ACXuj8TMf5qp+++5ahgQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLqS
mbiIaR1K+Wv0juN86Ni9yn1eMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMUJFNTgxNEY1RDIxMUVGOEJCREQ0OUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlrgMA0GCSqGSIb3DQEB
CwUAA4IBAQDJOLLxzRgbQB7ebbCAadbEFzGC1KYQpcFR8vHTT9aTTzs61bILN4zw
7aU/nHcwXu9CtnmuRVhkHxb6Nj69f2fxFIuaolAGLNNAGOnc0UrfP2tXQiSbgqIq
858M+2mhbrf34+yISuM6MitJh0uhJbAkYGQMMVV2Ukkq6jfhyzJQTfv5S2fymT6S
llT3UgvDMgl0cO8TJrhgxG2G4mW2/N6/F42zMvFWjzl523GzABAUNi26ZP0AXT1G
C73ONsLmFL674nVwzo9Z2HSsOwQxiiDt1YL+8Qk2NLAvQxL/hCbYPl7ZF2sQkg+Y
mQadO0cUMIHKAUmUW7tAYlYo2sxVj/Ny
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:34:00 2025 by rpki-client