Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/564DD910C8BD11EF9252A69F762E951A.roa
File: 564DD910C8BD11EF9252A69F762E951A.roa (raw, json)
Hash identifier: qhDm8SNF4jzJVRlGlJpC8v720M9h2Ec8OJIDaWimAuk=
Subject key identifier: D8:99:87:14:0B:48:FE:A0:E8:69:1D:38:DF:5C:72:FB:A3:01:AC:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/564DD910C8BD11EF9252A69F762E951A.roa
Signing time: Thu 02 Jan 2025 03:54:59 +0000
ROA not before: Thu 02 Jan 2025 03:54:56 +0000
ROA not after: Mon 13 Dec 2027 03:54:56 +0000
asID: 17561
IP address blocks: 154.221.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78306 (0x131e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 03:54:56 2025 GMT
Not After : Dec 13 03:54:56 2027 GMT
Subject: CN=67760e13-439d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:63:8c:b8:aa:57:99:e5:f4:0d:fd:66:37:80:
16:cd:2c:98:c1:d5:31:a5:7d:15:62:81:03:d5:5e:
8f:e4:81:2d:ea:6b:0b:8e:9b:78:40:eb:0a:56:1e:
2a:bc:9f:b3:1e:5c:c5:19:b5:09:50:08:c7:ce:4c:
b4:4f:22:96:47:73:33:06:ea:d2:c4:57:af:ef:c5:
78:d2:cb:7f:77:2a:5c:fd:64:93:cb:76:be:32:de:
aa:1c:d4:e0:dd:36:6d:60:24:4d:0a:e0:d6:73:11:
65:6b:f1:ca:12:fe:70:bc:c4:f3:37:dd:5f:e3:d5:
a2:9b:b4:0b:60:dc:2e:83:45:40:a2:bf:e8:a3:54:
c4:62:e2:52:e3:85:f7:90:9b:e3:b4:55:be:37:82:
b6:6a:e2:68:4f:18:ca:b9:86:73:ed:5e:58:b5:98:
35:b3:5b:bc:dc:be:78:78:f9:d7:c4:3f:11:cc:8d:
8e:b7:66:40:0b:4e:a2:69:2e:28:b7:35:be:7b:eb:
3b:39:77:80:f5:f9:76:ff:2e:5d:72:19:26:cb:ec:
b7:52:5e:50:50:15:0c:cc:2d:d0:a6:06:f3:0a:8d:
79:83:f2:78:e2:03:c6:7c:cd:76:a1:ed:fc:13:76:
bf:85:51:50:79:11:09:28:f6:e7:f5:d3:30:cf:33:
ab:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:99:87:14:0B:48:FE:A0:E8:69:1D:38:DF:5C:72:FB:A3:01:AC:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/564DD910C8BD11EF9252A69F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.49.0/24
Signature Algorithm: sha256WithRSAEncryption
53:28:ab:0f:63:88:2f:c5:46:fb:84:0f:50:39:ee:9c:d7:02:
2a:b1:5c:31:80:e9:ce:96:56:cc:ca:a3:a3:8b:4c:97:e7:76:
10:af:13:73:89:a6:ca:61:48:72:b5:71:9d:c4:e0:fb:7c:3e:
d9:69:eb:5a:d8:3a:de:70:1d:0a:e7:7d:1c:15:70:60:96:3e:
83:fa:5e:13:0c:a0:6d:42:10:bc:4f:e4:e7:4c:31:19:90:5b:
5d:f1:c0:d5:2c:9b:4f:36:1a:de:d2:f4:87:45:8d:12:f0:b9:
5b:f0:c3:39:45:f4:65:c4:53:7f:18:90:d9:d7:88:93:10:b2:
66:2d:7e:72:e9:00:9a:48:d5:b3:6c:fc:20:14:7e:b8:b5:01:
f3:7b:c9:dd:40:89:55:f9:4c:b5:83:86:7c:78:70:73:07:db:
35:d5:ad:38:f2:fb:8a:4b:24:9c:c6:81:ad:66:b3:0e:8b:25:
9d:3c:1b:a5:9f:51:aa:48:a8:40:41:df:3b:ab:a2:32:23:22:
99:61:2a:8b:58:a3:06:87:5c:f0:c5:23:55:62:cf:b3:30:41:
65:e2:3e:49:ae:fa:43:a3:25:af:38:20:d6:34:17:16:00:c5:
d3:8e:ad:b4:5d:e3:d9:ee:67:49:1e:ad:4a:08:de:40:cf:cd:
0d:b0:4c:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATHiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMDM1NDU2WhcNMjcxMjEzMDM1NDU2WjAYMRYw
FAYDVQQDEw02Nzc2MGUxMy00MzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1WOMuKpXmeX0Df1mN4AWzSyYwdUxpX0VYoED1V6P5IEt6msLjpt4QOsK
Vh4qvJ+zHlzFGbUJUAjHzky0TyKWR3MzBurSxFev78V40st/dypc/WSTy3a+Mt6q
HNTg3TZtYCRNCuDWcxFla/HKEv5wvMTzN91f49Wim7QLYNwug0VAor/oo1TEYuJS
44X3kJvjtFW+N4K2auJoTxjKuYZz7V5YtZg1s1u83L54ePnXxD8RzI2Ot2ZAC06i
aS4otzW+e+s7OXeA9fl2/y5dchkmy+y3Ul5QUBUMzC3QpgbzCo15g/J44gPGfM12
oe38E3a/hVFQeREJKPbn9dMwzzOrVwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNiZ
hxQLSP6g6GkdON9ccvujAayLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NjRERDkxMEM4QkQxMUVGOTI1MkE2OUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt0xMA0GCSqGSIb3DQEB
CwUAA4IBAQBTKKsPY4gvxUb7hA9QOe6c1wIqsVwxgOnOllbMyqOji0yX53YQrxNz
iabKYUhytXGdxOD7fD7Zaeta2DrecB0K530cFXBglj6D+l4TDKBtQhC8T+TnTDEZ
kFtd8cDVLJtPNhre0vSHRY0S8Llb8MM5RfRlxFN/GJDZ14iTELJmLX5y6QCaSNWz
bPwgFH64tQHze8ndQIlV+Uy1g4Z8eHBzB9s11a048vuKSyScxoGtZrMOiyWdPBul
n1GqSKhAQd87q6IyIyKZYSqLWKMGh1zwxSNVYs+zMEFl4j5JrvpDoyWvOCDWNBcW
AMXTjq20XePZ7mdJHq1KCN5Az80NsExc
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:55 2025 by rpki-client