Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/444C39D6C91811EFAF587456762E951A.roa
File: 444C39D6C91811EFAF587456762E951A.roa (raw, json)
Hash identifier: keZ51Fg2YL7LeaBptXEh8l7JHCxlJcR7FIkAhKxyACs=
Subject key identifier: 84:4E:EA:AB:61:BC:65:BC:EA:21:95:10:41:6C:01:18:E4:45:82:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/444C39D6C91811EFAF587456762E951A.roa
Signing time: Thu 02 Jan 2025 14:45:54 +0000
ROA not before: Thu 02 Jan 2025 14:45:50 +0000
ROA not after: Mon 13 Dec 2027 14:45:50 +0000
asID: 17561
IP address blocks: 154.221.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78563 (0x132e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 14:45:50 2025 GMT
Not After : Dec 13 14:45:50 2027 GMT
Subject: CN=6776a6a1-8c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:2e:75:d9:60:82:c1:9e:65:62:37:47:50:
14:31:cb:0a:03:c1:0b:54:34:c6:ad:a3:29:d5:e1:
db:37:9a:8c:6c:43:03:4a:72:7e:0b:ac:7b:ac:38:
cb:62:bd:26:a2:10:50:59:dc:9b:eb:5e:d8:4d:a3:
55:40:06:b5:0b:69:56:6a:16:7c:74:86:0d:40:85:
d7:35:5b:51:cb:af:67:07:21:25:90:2a:2d:af:0c:
d6:80:14:6e:95:30:05:8c:97:94:9a:10:2f:3b:e5:
a8:91:a9:cc:fe:19:ed:8e:a1:81:11:dc:0d:1a:cd:
0e:b9:ee:01:ce:d7:c2:f8:84:b2:0f:ca:c2:15:e2:
e8:3a:41:e4:61:5d:75:80:b0:3d:10:91:a9:fc:e1:
37:e1:10:4b:50:f5:97:8e:ac:7b:02:25:d8:c8:ef:
32:ac:c0:46:f4:c7:bf:57:17:d7:6e:b8:2d:7f:76:
1a:f3:3a:fa:2d:d2:47:a8:50:61:17:56:bb:ad:b7:
e3:ed:46:7f:42:15:58:99:db:08:3e:65:a1:93:43:
65:a6:39:06:fe:3f:e4:29:01:4b:a3:d0:cc:8d:f1:
d3:3e:27:f4:11:c7:92:cb:59:bc:c9:86:47:71:0f:
8d:9e:01:60:ff:3e:42:0c:03:9c:af:ee:e6:f8:cb:
65:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4E:EA:AB:61:BC:65:BC:EA:21:95:10:41:6C:01:18:E4:45:82:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/444C39D6C91811EFAF587456762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.254.0/24
Signature Algorithm: sha256WithRSAEncryption
01:2e:a7:c5:d8:9f:17:c5:d4:98:a1:02:08:09:64:24:1e:eb:
69:22:7d:85:cc:c0:34:c8:e9:da:f7:b6:e4:b3:66:a7:23:ed:
04:cb:70:d7:62:a6:6f:54:16:21:c0:ce:39:53:4a:d2:a9:65:
5a:36:a5:d8:c1:48:a2:00:a7:c2:e3:b7:e1:b4:f7:53:dd:76:
bd:d1:b2:9c:55:67:e3:ab:bd:8f:c2:3c:11:9f:65:65:ef:e0:
9c:2c:6c:7b:4b:5b:96:c7:f5:36:c8:1c:19:2a:2f:b7:64:89:
24:af:be:d1:a8:33:75:83:2d:3b:8d:d7:7a:26:ed:70:0d:95:
2d:9f:35:81:5e:b9:3d:8d:86:1d:13:98:f4:9a:8e:4b:55:62:
a7:01:e3:47:e6:d1:33:1d:69:ac:8b:de:26:76:70:b0:dd:48:
15:ac:e9:f2:7f:a2:1c:15:fd:9f:ea:24:59:f0:2f:83:1d:29:
3e:bf:3a:03:00:0b:2f:95:8f:78:65:f3:d2:3d:e3:44:11:f2:
ec:83:66:51:62:bc:90:f8:7f:01:84:cc:6e:a0:29:f6:64:be:
7a:38:10:e8:f1:b2:8a:df:bc:e5:29:b3:cb:37:e2:aa:98:ae:
df:42:8d:66:e1:39:c5:84:fe:b8:d3:c2:db:c1:1d:39:18:3a:
80:d1:4d:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATLjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTQ0NTUwWhcNMjcxMjEzMTQ0NTUwWjAYMRYw
FAYDVQQDEw02Nzc2YTZhMS04YzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoewuddlggsGeZWI3R1AUMcsKA8ELVDTGraMp1eHbN5qMbEMDSnJ+C6x7
rDjLYr0mohBQWdyb617YTaNVQAa1C2lWahZ8dIYNQIXXNVtRy69nByElkCotrwzW
gBRulTAFjJeUmhAvO+WokanM/hntjqGBEdwNGs0Oue4BztfC+ISyD8rCFeLoOkHk
YV11gLA9EJGp/OE34RBLUPWXjqx7AiXYyO8yrMBG9Me/VxfXbrgtf3Ya8zr6LdJH
qFBhF1a7rbfj7UZ/QhVYmdsIPmWhk0NlpjkG/j/kKQFLo9DMjfHTPif0EceSy1m8
yYZHcQ+NngFg/z5CDAOcr+7m+MtlMwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIRO
6qthvGW86iGVEEFsARjkRYJmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NDRDMzlENkM5MTgxMUVGQUY1ODc0NTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt3+MA0GCSqGSIb3DQEB
CwUAA4IBAQABLqfF2J8XxdSYoQIICWQkHutpIn2FzMA0yOna97bks2anI+0Ey3DX
YqZvVBYhwM45U0rSqWVaNqXYwUiiAKfC47fhtPdT3Xa90bKcVWfjq72PwjwRn2Vl
7+CcLGx7S1uWx/U2yBwZKi+3ZIkkr77RqDN1gy07jdd6Ju1wDZUtnzWBXrk9jYYd
E5j0mo5LVWKnAeNH5tEzHWmsi94mdnCw3UgVrOnyf6IcFf2f6iRZ8C+DHSk+vzoD
AAsvlY94ZfPSPeNEEfLsg2ZRYryQ+H8BhMxuoCn2ZL56OBDo8bKK37zlKbPLN+Kq
mK7fQo1m4TnFhP6408LbwR05GDqA0U0S
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:54 2025 by rpki-client