Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12AE873CF62011EF8B8E4FAB762E951A.roa
File: 12AE873CF62011EF8B8E4FAB762E951A.roa (raw, json)
Hash identifier: r68q58T692YU9vo1rNYvG1qHmTJw2XYvRObz5tziPd4=
Subject key identifier: 53:46:60:4B:3D:92:48:AA:77:55:D5:2E:72:43:14:1A:78:49:BA:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C73
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12AE873CF62011EF8B8E4FAB762E951A.roa
Signing time: Fri 28 Feb 2025 22:05:08 +0000
ROA not before: Fri 28 Feb 2025 22:05:05 +0000
ROA not after: Sat 19 Apr 2025 22:05:05 +0000
asID: 138915
IP address blocks: 154.90.54.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93299 (0x16c73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 22:05:05 2025 GMT
Not After : Apr 19 22:05:05 2025 GMT
Subject: CN=67c23314-bb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3a:9b:d9:51:ce:35:ca:3b:9d:90:ec:c2:d5:
6e:6a:38:7f:05:6d:9b:79:f1:71:ac:fb:21:bb:e4:
ac:66:cb:0a:ce:a6:4c:ec:cc:0f:b4:c1:42:8e:f4:
b8:d6:8b:0e:21:ee:ad:c4:a7:ac:26:41:09:b2:aa:
97:04:17:14:3c:92:78:94:be:ce:76:ca:5f:b0:8c:
9b:5b:7c:2b:43:14:1e:b8:0e:9f:cb:8f:b5:e3:4a:
45:7a:b5:29:a3:eb:7f:48:c5:fe:49:00:78:4b:21:
e3:d6:c8:0a:23:ad:e6:b8:2b:3e:bf:73:b8:a3:db:
93:a5:6e:06:52:f0:bb:d7:b3:35:ec:4c:2d:ec:dc:
a8:00:4b:ba:04:7f:35:1c:d0:2c:58:e9:49:81:1f:
59:33:fd:df:41:d3:f7:fa:58:10:24:f8:49:62:7b:
e8:fe:7d:74:05:32:a5:e1:59:72:43:4d:5e:04:f6:
52:11:de:dc:0b:b6:62:82:cd:96:f5:59:91:ea:e9:
f7:1d:de:62:6f:94:ab:75:12:a3:8f:cc:6c:95:fe:
30:06:c8:48:3c:d7:12:09:89:4a:b5:27:1c:55:72:
23:2a:af:45:b8:f6:77:a7:db:bf:10:7a:1a:de:1c:
c9:ce:56:46:21:78:38:57:f9:44:5e:49:68:4f:a1:
c2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:46:60:4B:3D:92:48:AA:77:55:D5:2E:72:43:14:1A:78:49:BA:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12AE873CF62011EF8B8E4FAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.54.0/23
Signature Algorithm: sha256WithRSAEncryption
87:44:7c:ef:67:f8:69:05:cb:89:37:2f:cb:78:5a:89:a0:f4:
bf:24:40:61:53:ff:50:52:61:c1:44:30:8c:9c:77:c3:07:0c:
ab:d2:e5:0a:b7:9e:38:57:1b:98:fd:e2:dd:89:d2:3e:de:d8:
4f:76:ad:b6:d1:49:87:70:9a:07:e3:c7:81:ee:16:b2:98:ec:
db:a4:9d:d3:46:4b:52:7e:49:36:a8:d8:90:b5:20:1e:8e:09:
4d:ef:ba:c4:c4:51:40:db:9b:f1:46:d5:f4:1d:e3:c3:24:65:
ef:35:4a:9d:aa:92:c0:eb:c2:62:52:bd:b3:0d:b7:31:78:70:
32:b5:30:7e:dc:e5:26:22:38:b5:29:79:65:8e:3c:a4:d6:55:
cf:68:9e:aa:87:fd:cf:39:d6:e7:98:42:20:64:53:78:b9:7c:
bf:3c:e8:3e:37:25:05:22:dd:24:3c:f1:35:c1:2d:02:42:3d:
d4:dd:16:1b:fd:ee:ce:a4:34:bb:e3:5d:2e:63:87:3d:11:62:
94:a9:20:01:e2:eb:7a:16:41:7b:71:5f:22:21:f1:6f:39:cd:
85:da:b9:40:7d:e9:73:c2:55:a5:ae:60:18:44:f6:92:f9:b1:
3b:bc:4b:78:db:b0:c7:22:6b:41:73:fb:b4:6f:80:0e:96:77:
ef:e8:d1:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWxzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MjIwNTA1WhcNMjUwNDE5MjIwNTA1WjAYMRYw
FAYDVQQDEw02N2MyMzMxNC1iYjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1Tqb2VHONco7nZDswtVuajh/BW2befFxrPshu+SsZssKzqZM7MwPtMFC
jvS41osOIe6txKesJkEJsqqXBBcUPJJ4lL7OdspfsIybW3wrQxQeuA6fy4+140pF
erUpo+t/SMX+SQB4SyHj1sgKI63muCs+v3O4o9uTpW4GUvC717M17Ewt7NyoAEu6
BH81HNAsWOlJgR9ZM/3fQdP3+lgQJPhJYnvo/n10BTKl4VlyQ01eBPZSEd7cC7Zi
gs2W9VmR6un3Hd5ib5SrdRKjj8xslf4wBshIPNcSCYlKtSccVXIjKq9FuPZ3p9u/
EHoa3hzJzlZGIXg4V/lEXkloT6HCswIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFNG
YEs9kkiqd1XVLnJDFBp4SbrfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMkFFODczQ0Y2MjAxMUVGOEI4RTRGQUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlo2MA0GCSqGSIb3DQEB
CwUAA4IBAQCHRHzvZ/hpBcuJNy/LeFqJoPS/JEBhU/9QUmHBRDCMnHfDBwyr0uUK
t544VxuY/eLdidI+3thPdq220UmHcJoH48eB7haymOzbpJ3TRktSfkk2qNiQtSAe
jglN77rExFFA25vxRtX0HePDJGXvNUqdqpLA68JiUr2zDbcxeHAytTB+3OUmIji1
KXlljjyk1lXPaJ6qh/3POdbnmEIgZFN4uXy/POg+NyUFIt0kPPE1wS0CQj3U3RYb
/e7OpDS7410uY4c9EWKUqSAB4ut6FkF7cV8iIfFvOc2F2rlAfelzwlWlrmAYRPaS
+bE7vEt427DHImtBc/u0b4AOlnfv6NGY
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:06 2025 by rpki-client