Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F85E5D0C19711EF94756E8C762E951A.roa
File: 1F85E5D0C19711EF94756E8C762E951A.roa (raw, json)
Hash identifier: r0aIIv76EHLwXoRN9taD0sX8Sl0nQvVjCqaDW5Rvsh8=
Subject key identifier: 31:DA:11:02:8E:95:F8:68:AA:E9:E2:FD:CF:C4:9C:9E:93:BD:D9:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012039
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F85E5D0C19711EF94756E8C762E951A.roa
Signing time: Tue 24 Dec 2024 01:33:48 +0000
ROA not before: Tue 24 Dec 2024 01:33:45 +0000
ROA not after: Wed 10 Dec 2025 01:33:45 +0000
asID: 984
IP address blocks: 154.90.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73785 (0x12039)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:33:45 2024 GMT
Not After : Dec 10 01:33:45 2025 GMT
Subject: CN=676a0f7c-a9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bc:2c:9e:7d:9c:92:f7:43:06:72:aa:23:98:
19:34:77:d1:d9:94:3a:d1:b4:ac:e2:f0:b9:43:eb:
96:14:db:39:27:fa:27:d9:3d:ea:5b:9c:bb:7d:65:
dc:3b:58:28:05:3d:dd:fa:a9:ea:41:ae:dd:a2:07:
78:f5:30:bf:a2:ef:3d:64:50:87:f8:a5:9b:0e:73:
2c:35:c4:80:27:93:5a:2d:2e:86:c4:08:7a:6d:a9:
80:7e:ac:db:23:36:f1:d4:36:a1:6e:d5:08:f3:86:
91:12:9a:05:88:46:37:15:20:fa:ff:b5:f9:1f:78:
bc:cd:ae:d7:02:d4:e8:86:fe:58:4a:82:9a:23:6e:
54:05:bf:e3:65:f9:78:db:ee:cb:71:ac:bb:6e:ac:
7d:0a:9f:74:f7:23:37:c1:54:32:a2:ec:15:3d:b2:
d8:e1:1a:34:5f:74:9c:35:a5:d6:14:41:b3:9d:a7:
a4:77:fd:a7:5c:95:75:78:cc:a8:6f:c7:d7:fd:d1:
57:92:5a:a5:2f:86:7b:43:5a:ed:b5:92:d2:85:52:
b7:2b:2d:e5:2c:74:5c:44:68:21:03:20:9d:eb:66:
24:cd:76:15:25:82:53:c5:35:07:e0:a5:71:24:09:
3e:8b:49:b6:f1:24:bc:d2:a6:c7:62:34:6a:a9:c8:
4d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DA:11:02:8E:95:F8:68:AA:E9:E2:FD:CF:C4:9C:9E:93:BD:D9:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F85E5D0C19711EF94756E8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.180.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b7:cb:b0:e4:32:32:3b:0a:e6:02:72:81:ae:ef:fd:d0:86:
ab:1c:98:15:66:fe:29:02:1a:0f:94:fd:72:ef:ae:0d:f3:32:
05:88:d0:09:d1:64:e3:00:e8:e9:31:58:f0:bb:35:15:07:45:
74:61:ea:db:ae:f9:5f:99:e7:3a:d6:11:7b:08:b4:79:e5:c3:
52:4a:92:fc:c3:b3:1c:86:86:0f:60:d1:67:c7:4f:5a:b4:ec:
bc:7a:cc:33:e3:d1:fb:58:aa:23:49:06:ba:46:ed:e7:b1:0f:
93:ac:8b:6b:ed:78:74:26:48:75:fb:ec:0e:b0:b5:e1:39:ca:
6e:62:9d:fe:6e:82:c0:35:d4:62:93:a7:5f:06:ea:12:3d:28:
1a:71:16:41:a5:76:74:f8:d3:02:aa:9b:e4:09:25:97:0b:f5:
57:8a:a6:df:a4:26:76:27:be:99:86:b6:f5:1c:53:42:75:59:
ab:2e:02:b7:5e:1b:d4:b1:e8:ce:c6:0d:27:04:59:6a:26:7e:
22:7f:ed:05:3d:de:7a:7d:d8:21:cd:84:ee:a8:88:b8:34:c6:
1c:56:98:e9:a8:1a:0d:91:ae:f9:de:68:20:fc:2b:59:7e:97:
f0:8c:23:dd:49:cd:8e:12:a8:d6:57:b5:0f:0a:f1:af:a1:4c:
5f:56:31:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASA5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDEzMzQ1WhcNMjUxMjEwMDEzMzQ1WjAYMRYw
FAYDVQQDEw02NzZhMGY3Yy1hOWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvLwsnn2ckvdDBnKqI5gZNHfR2ZQ60bSs4vC5Q+uWFNs5J/on2T3qW5y7
fWXcO1goBT3d+qnqQa7dogd49TC/ou89ZFCH+KWbDnMsNcSAJ5NaLS6GxAh6bamA
fqzbIzbx1DahbtUI84aREpoFiEY3FSD6/7X5H3i8za7XAtTohv5YSoKaI25UBb/j
Zfl42+7Lcay7bqx9Cp909yM3wVQyouwVPbLY4Ro0X3ScNaXWFEGznaekd/2nXJV1
eMyob8fX/dFXklqlL4Z7Q1rttZLShVK3Ky3lLHRcRGghAyCd62YkzXYVJYJTxTUH
4KVxJAk+i0m28SS80qbHYjRqqchNwwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDHa
EQKOlfhoquni/c/EnJ6TvdmoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRjg1RTVEMEMxOTcxMUVGOTQ3NTZFOEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlq0MA0GCSqGSIb3DQEB
CwUAA4IBAQAnt8uw5DIyOwrmAnKBru/90IarHJgVZv4pAhoPlP1y764N8zIFiNAJ
0WTjAOjpMVjwuzUVB0V0Yerbrvlfmec61hF7CLR55cNSSpL8w7MchoYPYNFnx09a
tOy8eswz49H7WKojSQa6Ru3nsQ+TrItr7Xh0Jkh1++wOsLXhOcpuYp3+boLANdRi
k6dfBuoSPSgacRZBpXZ0+NMCqpvkCSWXC/VXiqbfpCZ2J76Zhrb1HFNCdVmrLgK3
XhvUsejOxg0nBFlqJn4if+0FPd56fdghzYTuqIi4NMYcVpjpqBoNka753mgg/CtZ
fpfwjCPdSc2OEqjWV7UPCvGvoUxfVjF9
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:46 2025 by rpki-client