Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DF4A00CCDEE11EFACA8479D762E951A.roa
File: 3DF4A00CCDEE11EFACA8479D762E951A.roa (raw, json)
Hash identifier: W3LL2wfauFm//EgnumCpOqEEzRaD13BmMoPfWwWON/I=
Subject key identifier: 54:9E:84:9E:19:CA:3C:C9:72:75:53:42:86:68:16:32:63:4F:E1:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013821
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DF4A00CCDEE11EFACA8479D762E951A.roa
Signing time: Wed 08 Jan 2025 18:27:40 +0000
ROA not before: Wed 08 Jan 2025 18:27:36 +0000
ROA not after: Sat 03 Jan 2026 18:27:36 +0000
asID: 984
IP address blocks: 154.89.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79905 (0x13821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 18:27:36 2025 GMT
Not After : Jan 3 18:27:36 2026 GMT
Subject: CN=677ec39c-b7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:bb:5f:06:c4:57:49:97:b6:3e:16:c9:1d:
e1:da:d7:e1:62:d0:a8:20:01:f0:02:08:14:29:04:
33:9b:21:7a:53:b7:bf:7d:1a:85:64:6b:9f:e6:3e:
f2:62:68:4a:c3:31:ac:3d:e8:e8:ef:c7:2b:84:e5:
9f:5f:29:c5:38:09:0a:3a:22:47:28:59:3b:56:a8:
a0:c3:fd:86:b6:71:70:b4:70:6f:9b:57:f1:72:e3:
f2:89:64:55:d0:b5:ee:94:a5:e0:83:d6:a3:bd:06:
7b:c8:f2:8e:ed:7d:f8:c2:d1:56:de:e1:73:70:99:
81:63:b2:38:e0:c9:63:2b:9b:4b:39:4c:d3:5d:2a:
ff:9d:db:5a:66:af:c0:17:78:26:2a:95:18:25:6c:
57:cc:1e:e8:bb:f5:65:9a:ad:b5:de:de:f1:68:0c:
25:c3:d8:8a:5e:43:d1:ed:a6:6f:28:24:a5:00:01:
ab:80:54:94:e1:51:6d:96:39:dd:76:e1:1e:82:6a:
dc:58:03:a2:50:60:5b:af:d3:25:b4:77:45:30:ed:
c8:1b:85:b9:a4:c2:9d:d7:5e:45:03:25:43:50:d0:
24:9d:69:fd:71:a7:14:f0:e4:de:a8:8d:a8:44:98:
4c:27:03:48:3d:1c:bd:16:fa:01:1e:60:84:af:3b:
c9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9E:84:9E:19:CA:3C:C9:72:75:53:42:86:68:16:32:63:4F:E1:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DF4A00CCDEE11EFACA8479D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.223.0/24
Signature Algorithm: sha256WithRSAEncryption
24:42:8a:b8:fe:02:01:35:89:83:13:ef:46:fb:19:fa:ad:50:
85:07:01:20:5d:3e:5f:e9:5a:8f:ff:b7:73:bd:8e:0b:5f:ad:
ab:08:87:17:29:4f:d8:02:26:e5:db:e4:12:22:ee:0d:6e:ff:
1c:39:8b:cd:af:54:82:18:8e:7d:c9:67:fb:92:f9:ff:e0:7b:
69:83:7d:fd:c8:70:90:0c:97:f9:ef:1c:2f:fe:64:16:f5:a4:
1e:f2:f1:9c:57:39:41:29:94:12:75:24:c9:b8:a2:da:87:fc:
1c:05:c4:f6:2d:9f:e5:83:ba:ff:e2:64:f2:5e:47:d4:8a:52:
86:78:9d:86:7b:a2:c1:b1:03:78:01:6c:50:16:40:72:f7:c1:
cf:82:12:5d:9b:4c:21:01:02:94:b9:d5:a4:19:e1:51:17:bf:
bc:47:66:51:7c:34:4a:24:6a:01:20:67:7d:75:d7:5e:68:a4:
73:97:d7:7a:30:82:6c:23:b8:23:b4:29:bc:c3:69:b9:f7:8e:
01:81:54:d5:42:c4:c7:1f:9b:c8:55:0a:55:09:48:9a:0c:ba:
c2:0e:1d:95:1a:a9:bc:3a:d2:7d:b7:35:bc:fb:d2:4f:0d:9a:
4a:40:38:49:3d:a1:d3:d5:47:65:80:bb:bf:f8:b2:ee:78:02:
26:63:09:32
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATghMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA4MTgyNzM2WhcNMjYwMTAzMTgyNzM2WjAYMRYw
FAYDVQQDEw02NzdlYzM5Yy1iN2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuAO7XwbEV0mXtj4WyR3h2tfhYtCoIAHwAggUKQQzmyF6U7e/fRqFZGuf
5j7yYmhKwzGsPejo78crhOWfXynFOAkKOiJHKFk7Vqigw/2GtnFwtHBvm1fxcuPy
iWRV0LXulKXgg9ajvQZ7yPKO7X34wtFW3uFzcJmBY7I44MljK5tLOUzTXSr/ndta
Zq/AF3gmKpUYJWxXzB7ou/Vlmq213t7xaAwlw9iKXkPR7aZvKCSlAAGrgFSU4VFt
ljndduEegmrcWAOiUGBbr9MltHdFMO3IG4W5pMKd115FAyVDUNAknWn9cacU8OTe
qI2oRJhMJwNIPRy9FvoBHmCErzvJSQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFSe
hJ4ZyjzJcnVTQoZoFjJjT+EGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zREY0QTAwQ0NERUUxMUVGQUNBODQ3OUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlnfMA0GCSqGSIb3DQEB
CwUAA4IBAQAkQoq4/gIBNYmDE+9G+xn6rVCFBwEgXT5f6VqP/7dzvY4LX62rCIcX
KU/YAibl2+QSIu4Nbv8cOYvNr1SCGI59yWf7kvn/4Htpg339yHCQDJf57xwv/mQW
9aQe8vGcVzlBKZQSdSTJuKLah/wcBcT2LZ/lg7r/4mTyXkfUilKGeJ2Ge6LBsQN4
AWxQFkBy98HPghJdm0whAQKUudWkGeFRF7+8R2ZRfDRKJGoBIGd9dddeaKRzl9d6
MIJsI7gjtCm8w2m5944BgVTVQsTHH5vIVQpVCUiaDLrCDh2VGqm8OtJ9tzW8+9JP
DZpKQDhJPaHT1UdlgLu/+LLueAImYwky
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:40:40 2025 by rpki-client