Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42506EC0C37F11EFBBACC944762E951A.roa
File: 42506EC0C37F11EFBBACC944762E951A.roa (raw, json)
Hash identifier: Va1DyjVRaJtgSK+jAu2A0+5vgrH7XOHOUVCyG7ccHTw=
Subject key identifier: FF:BB:9B:29:E0:41:2C:74:68:B8:36:B7:DC:30:CA:E8:A9:CE:47:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01274C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42506EC0C37F11EFBBACC944762E951A.roa
Signing time: Thu 26 Dec 2024 11:48:01 +0000
ROA not before: Thu 26 Dec 2024 11:47:57 +0000
ROA not after: Sun 12 Dec 2027 11:47:57 +0000
asID: 17561
IP address blocks: 154.94.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75596 (0x1274c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 11:47:57 2024 GMT
Not After : Dec 12 11:47:57 2027 GMT
Subject: CN=676d4271-700c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:25:0b:59:3e:76:83:08:19:ba:26:6f:7f:97:
11:aa:b9:ba:cb:70:b3:86:90:d6:9b:15:4c:3a:00:
95:32:a5:52:4d:56:07:d4:ab:d8:8b:c2:67:db:3c:
5a:d9:d3:a7:68:63:c7:e0:7e:a9:33:5c:18:36:85:
bf:d3:b8:b2:12:6d:32:d2:3c:2d:72:1c:3f:85:c3:
dc:8f:45:ea:f1:4c:1c:01:e4:ea:a3:8e:f0:3a:84:
c4:7d:28:f6:29:f7:e0:a5:85:ec:60:1a:4a:f4:ba:
19:2d:48:36:33:b2:05:b0:10:c1:4a:17:85:39:ce:
59:9c:8e:a6:19:82:23:08:73:02:30:eb:fb:06:f9:
d3:c7:40:44:12:51:64:fa:a9:9a:bf:31:2f:3e:f3:
d0:52:69:6f:8e:53:13:65:39:0c:b0:8d:1c:5d:3c:
35:f8:54:d6:08:56:ea:3e:c5:03:c2:a5:6f:b6:24:
75:72:6f:70:2a:fd:66:82:58:25:87:4c:a7:51:45:
3e:26:20:9f:f6:99:02:6c:0a:41:31:89:5e:0d:32:
78:3b:cc:24:1b:13:f8:52:00:86:1b:ce:4b:ca:58:
77:c6:16:4a:d8:ea:17:7d:b0:9c:7b:ae:51:43:77:
4b:cc:ea:e9:16:db:37:41:5d:fc:35:f0:e8:0c:dc:
7d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BB:9B:29:E0:41:2C:74:68:B8:36:B7:DC:30:CA:E8:A9:CE:47:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42506EC0C37F11EFBBACC944762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.189.0/24
Signature Algorithm: sha256WithRSAEncryption
26:00:dd:c6:22:d1:1d:0f:d5:ec:4d:c3:ab:2e:46:70:be:ee:
54:ce:02:2a:e5:7e:1f:82:02:4d:95:70:2e:89:ef:6d:db:89:
92:d7:9c:34:f6:46:ac:d1:38:1d:9c:a5:80:2b:31:cf:f0:9b:
fc:4f:89:77:56:f4:01:65:dc:dd:0f:c1:79:80:3a:8b:d6:25:
27:f1:91:f1:42:6e:9d:66:e5:46:6f:d3:2e:0e:8f:9c:37:4e:
e4:b9:ad:c2:9c:a1:84:0e:ba:b5:e3:e3:04:c6:75:ba:ec:b1:
32:68:c7:50:75:dd:a5:74:df:6d:ce:38:c8:88:01:64:2f:81:
4a:a1:ab:fa:77:a0:b7:ac:97:81:69:42:e2:ca:5a:0d:ef:79:
16:cb:e3:fb:d4:10:50:ba:c9:cb:52:da:3b:a9:6d:40:79:5d:
e8:be:09:03:43:f1:66:27:71:d9:ff:43:42:33:fc:f6:a7:93:
df:02:f2:f5:bf:19:27:38:49:7e:48:6b:b0:55:05:ba:06:b5:
37:b3:fd:4c:a7:9d:37:a2:2e:c9:a5:ba:ed:42:22:c9:5f:ac:
73:95:90:36:16:33:16:ee:8a:56:e2:ac:83:6b:34:50:8b:94:
a2:ea:71:cf:1f:83:87:ae:67:cb:a5:61:06:b9:8f:9f:08:a2:
a9:81:03:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASdMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MTE0NzU3WhcNMjcxMjEyMTE0NzU3WjAYMRYw
FAYDVQQDEw02NzZkNDI3MS03MDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2yULWT52gwgZuiZvf5cRqrm6y3CzhpDWmxVMOgCVMqVSTVYH1KvYi8Jn
2zxa2dOnaGPH4H6pM1wYNoW/07iyEm0y0jwtchw/hcPcj0Xq8UwcAeTqo47wOoTE
fSj2KffgpYXsYBpK9LoZLUg2M7IFsBDBSheFOc5ZnI6mGYIjCHMCMOv7BvnTx0BE
ElFk+qmavzEvPvPQUmlvjlMTZTkMsI0cXTw1+FTWCFbqPsUDwqVvtiR1cm9wKv1m
glglh0ynUUU+JiCf9pkCbApBMYleDTJ4O8wkGxP4UgCGG85Lylh3xhZK2OoXfbCc
e65RQ3dLzOrpFts3QV38NfDoDNx9EwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFP+7
myngQSx0aLg2t9wwyuipzkepMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MjUwNkVDMEMzN0YxMUVGQkJBQ0M5NDQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml69MA0GCSqGSIb3DQEB
CwUAA4IBAQAmAN3GItEdD9XsTcOrLkZwvu5UzgIq5X4fggJNlXAuie9t24mS15w0
9kas0TgdnKWAKzHP8Jv8T4l3VvQBZdzdD8F5gDqL1iUn8ZHxQm6dZuVGb9MuDo+c
N07kua3CnKGEDrq14+MExnW67LEyaMdQdd2ldN9tzjjIiAFkL4FKoav6d6C3rJeB
aULiyloN73kWy+P71BBQusnLUto7qW1AeV3ovgkDQ/FmJ3HZ/0NCM/z2p5PfAvL1
vxknOEl+SGuwVQW6BrU3s/1Mp503oi7JpbrtQiLJX6xzlZA2FjMW7opW4qyDazRQ
i5Si6nHPH4OHrmfLpWEGuY+fCKKpgQMv
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:42 2025 by rpki-client