Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B264BDCDAFC11EF84ECDC63762E951A.roa
File: 1B264BDCDAFC11EF84ECDC63762E951A.roa (raw, json)
Hash identifier: xknJIgIyU6bBTQ2WnGKUHU1jSOsJo1wsXKbtPBGBOCQ=
Subject key identifier: 5D:54:AD:01:EE:7B:75:EC:73:26:A0:52:BC:55:F4:19:E2:A1:BE:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014919
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B264BDCDAFC11EF84ECDC63762E951A.roa
Signing time: Sat 25 Jan 2025 09:09:39 +0000
ROA not before: Sat 25 Jan 2025 09:09:36 +0000
ROA not after: Sun 30 Mar 2025 09:09:36 +0000
asID: 63139
IP address blocks: 154.94.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84249 (0x14919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 09:09:36 2025 GMT
Not After : Mar 30 09:09:36 2025 GMT
Subject: CN=6794aa53-eacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ba:a5:3f:44:43:f4:f2:d3:b9:1e:7c:93:41:
33:c9:56:d0:63:4d:7d:dd:c0:c4:e4:75:68:86:da:
f8:6d:91:21:fa:17:e5:d9:49:6e:09:1f:bc:c9:a0:
ca:a8:ff:df:de:79:99:76:f5:28:b1:a9:02:3e:86:
84:22:9c:d1:ac:63:b9:d9:e9:92:30:fd:81:f6:ab:
fa:c7:2a:7f:72:ba:1a:2e:f0:21:bb:b6:17:55:68:
b4:ff:79:e9:03:c1:50:2f:9e:a2:82:92:c3:99:3d:
d2:30:60:85:d4:32:15:6b:c6:5f:79:d4:71:79:35:
e6:5f:9a:e8:b1:ea:bb:db:7d:e7:8f:02:a8:0d:20:
75:92:17:c2:4b:45:cc:1e:e0:f9:dc:22:71:fa:02:
6a:25:5a:2a:5f:b4:6f:1f:f2:4d:0a:62:61:1f:67:
95:3d:64:22:ef:64:08:cf:29:02:83:f2:bf:80:ac:
89:b7:58:2c:29:30:32:9e:a2:be:b7:42:cd:91:e9:
d1:ca:e6:9f:87:f4:31:f5:7e:ce:1e:fc:bf:18:20:
ce:11:06:47:2d:d2:95:75:2c:8d:89:31:49:b7:4f:
08:43:7f:22:61:0e:18:cf:cb:a6:5e:9d:04:3a:cb:
d4:90:11:92:be:27:8d:66:75:b4:7b:96:68:b3:88:
a0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:54:AD:01:EE:7B:75:EC:73:26:A0:52:BC:55:F4:19:E2:A1:BE:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B264BDCDAFC11EF84ECDC63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c2:42:6d:82:32:0d:3f:c8:ea:c7:01:22:09:12:0a:53:38:
8a:3f:ad:c5:05:8d:ab:c9:22:18:71:06:24:27:30:33:f7:06:
f9:70:a6:cd:30:12:b1:fb:69:8d:7a:78:22:95:77:4b:af:95:
ba:ed:7a:d5:b6:05:5a:36:b6:fb:db:9f:fb:5e:15:3b:26:f9:
dc:c8:6f:db:08:dd:09:17:e4:06:de:1b:a8:10:34:e7:07:a9:
8f:1f:01:b2:ef:f6:47:3c:75:86:52:23:9a:62:1c:2f:96:66:
c9:08:9a:84:66:dd:ad:9f:d4:1d:fa:c3:50:4a:8f:b5:ac:da:
b0:17:2f:5f:3f:a6:59:90:d0:ff:5f:ee:af:cb:d7:05:56:71:
87:98:52:48:34:b8:b5:ae:7e:ee:7b:f9:d6:21:06:96:11:af:
ed:a0:05:c4:84:4c:82:97:fd:4f:a5:75:bd:89:ff:c4:8e:1f:
01:05:8d:14:6c:4b:b8:85:b4:d7:20:75:6c:f0:75:69:f4:f0:
6f:a6:1f:2a:6b:32:10:55:5a:6f:ac:30:a5:c3:af:eb:36:49:
48:f1:d6:e1:f9:27:c3:10:80:1c:67:76:76:33:0b:98:6a:ab:
d9:cb:78:0b:8b:fa:08:84:ce:ec:66:b3:cd:92:93:d6:0e:81:
a0:96:a3:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUkZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI1MDkwOTM2WhcNMjUwMzMwMDkwOTM2WjAYMRYw
FAYDVQQDEw02Nzk0YWE1My1lYWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnrqlP0RD9PLTuR58k0EzyVbQY0193cDE5HVohtr4bZEh+hfl2UluCR+8
yaDKqP/f3nmZdvUosakCPoaEIpzRrGO52emSMP2B9qv6xyp/croaLvAhu7YXVWi0
/3npA8FQL56igpLDmT3SMGCF1DIVa8ZfedRxeTXmX5roseq7233njwKoDSB1khfC
S0XMHuD53CJx+gJqJVoqX7RvH/JNCmJhH2eVPWQi72QIzykCg/K/gKyJt1gsKTAy
nqK+t0LNkenRyuafh/Qx9X7OHvy/GCDOEQZHLdKVdSyNiTFJt08IQ38iYQ4Yz8um
Xp0EOsvUkBGSvieNZnW0e5Zos4ig4QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF1U
rQHue3XscyagUrxV9Bniob5SMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xQjI2NEJEQ0RBRkMxMUVGODRFQ0RDNjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml53MA0GCSqGSIb3DQEB
CwUAA4IBAQClwkJtgjINP8jqxwEiCRIKUziKP63FBY2rySIYcQYkJzAz9wb5cKbN
MBKx+2mNengilXdLr5W67XrVtgVaNrb725/7XhU7JvncyG/bCN0JF+QG3huoEDTn
B6mPHwGy7/ZHPHWGUiOaYhwvlmbJCJqEZt2tn9Qd+sNQSo+1rNqwFy9fP6ZZkND/
X+6vy9cFVnGHmFJINLi1rn7ue/nWIQaWEa/toAXEhEyCl/1PpXW9if/Ejh8BBY0U
bEu4hbTXIHVs8HVp9PBvph8qazIQVVpvrDClw6/rNklI8dbh+SfDEIAcZ3Z2MwuY
aqvZy3gLi/oIhM7sZrPNkpPWDoGglqNm
-----END CERTIFICATE-----
Generated at Sat Apr 12 04:56:53 2025 by rpki-client