Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59DA3886C1A511EFBE724A75762E951A.roa
File: 59DA3886C1A511EFBE724A75762E951A.roa (raw, json)
Hash identifier: CyuJ/X7CR16SI74c/UbGa1/zlXGRXwyyxQ/oGvrl2uc=
Subject key identifier: 1B:79:C2:63:03:BE:E0:FB:16:B8:4D:B6:2A:94:67:96:33:82:80:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59DA3886C1A511EFBE724A75762E951A.roa
Signing time: Tue 24 Dec 2024 03:15:39 +0000
ROA not before: Tue 24 Dec 2024 03:15:36 +0000
ROA not after: Wed 10 Dec 2025 03:15:36 +0000
asID: 984
IP address blocks: 154.92.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73959 (0x120e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:15:36 2024 GMT
Not After : Dec 10 03:15:36 2025 GMT
Subject: CN=676a275b-06ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:44:0e:b9:f9:20:3a:bf:b8:89:03:be:d6:
90:b2:54:69:d7:de:c2:27:ec:18:77:de:75:f4:3d:
b5:c0:72:70:fc:77:ae:58:35:07:d2:9b:ca:92:5e:
05:62:5f:5d:45:a9:23:13:27:82:5f:10:01:3b:e8:
6b:48:3b:25:84:74:a1:48:94:65:29:de:d8:29:b3:
aa:d6:4f:2d:43:2c:b0:1c:16:f0:b6:ba:6e:7d:ac:
0e:19:e6:80:70:3b:e3:99:e2:51:9d:67:64:fa:d5:
6a:65:60:f5:1a:53:5f:08:be:c8:06:0e:d7:28:05:
a9:4a:31:80:d1:ec:ac:96:75:dc:b0:94:77:49:78:
18:8a:04:be:74:ed:e6:9d:ef:b3:16:54:67:a2:64:
c0:24:5f:be:53:56:1f:79:34:53:0e:2f:34:43:d9:
3f:e6:0b:01:df:e2:23:b2:9f:f1:09:46:7c:c5:89:
db:bc:4e:90:2c:10:fc:86:e9:21:b6:48:41:5d:68:
b1:9d:32:67:15:d2:b3:fd:47:25:33:15:9d:14:77:
c2:0a:a2:b2:74:13:b4:fe:be:ab:5f:51:ab:bd:57:
4e:e3:ea:ec:f6:3b:7d:39:65:e6:47:e9:39:53:1e:
24:33:04:8d:7b:8d:35:7c:04:35:a2:fe:cb:37:b3:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:79:C2:63:03:BE:E0:FB:16:B8:4D:B6:2A:94:67:96:33:82:80:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59DA3886C1A511EFBE724A75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.155.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:68:6d:af:7b:70:7e:18:d8:83:69:f8:31:6d:92:50:e8:82:
be:54:38:18:9d:1c:72:20:a0:60:28:bf:67:0d:ad:c9:3a:10:
4e:57:57:c6:60:fe:ea:ed:5c:1a:d9:09:a2:09:8a:85:9f:be:
2a:a4:61:bf:47:f0:9c:f4:25:0f:4f:91:d6:b4:3b:13:d3:83:
8e:89:5f:d7:f9:3a:8e:b6:1f:cd:4c:7b:19:aa:15:40:eb:95:
b9:49:8b:b4:bb:a0:6f:c0:32:14:40:02:46:91:65:0d:44:b4:
db:08:6c:72:4d:9a:31:df:7c:58:53:ee:17:e0:37:27:13:74:
ed:58:48:1a:fc:29:bf:c2:3a:dd:0a:6f:40:66:85:82:bf:60:
df:85:97:57:cb:3e:9d:05:f6:2a:55:87:eb:c5:a7:d9:11:f1:
1b:64:dd:56:d6:22:4c:a1:bd:82:94:a4:bf:85:c7:51:56:e0:
ca:cb:38:cc:c5:86:32:4a:2b:44:aa:fc:5b:9e:80:ec:8f:1f:
44:e3:89:75:e0:b2:2b:ea:09:4d:8e:82:92:85:19:5b:8e:0f:
33:f8:40:f0:86:8b:fb:f8:a3:84:ce:06:06:e3:d1:d8:c1:8e:
a2:63:6a:c5:ef:24:f0:b9:f0:46:2d:84:dc:c2:cd:a5:80:3e:
61:04:0c:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASDnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDMxNTM2WhcNMjUxMjEwMDMxNTM2WjAYMRYw
FAYDVQQDEw02NzZhMjc1Yi0wNmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0MpEDrn5IDq/uIkDvtaQslRp197CJ+wYd9519D21wHJw/HeuWDUH0pvK
kl4FYl9dRakjEyeCXxABO+hrSDslhHShSJRlKd7YKbOq1k8tQyywHBbwtrpufawO
GeaAcDvjmeJRnWdk+tVqZWD1GlNfCL7IBg7XKAWpSjGA0eyslnXcsJR3SXgYigS+
dO3mne+zFlRnomTAJF++U1YfeTRTDi80Q9k/5gsB3+Ijsp/xCUZ8xYnbvE6QLBD8
hukhtkhBXWixnTJnFdKz/UclMxWdFHfCCqKydBO0/r6rX1GrvVdO4+rs9jt9OWXm
R+k5Ux4kMwSNe401fAQ1ov7LN7MWCQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBt5
wmMDvuD7FrhNtiqUZ5YzgoA9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81OURBMzg4NkMxQTUxMUVGQkU3MjRBNzU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlybMA0GCSqGSIb3DQEB
CwUAA4IBAQAtaG2ve3B+GNiDafgxbZJQ6IK+VDgYnRxyIKBgKL9nDa3JOhBOV1fG
YP7q7Vwa2QmiCYqFn74qpGG/R/Cc9CUPT5HWtDsT04OOiV/X+TqOth/NTHsZqhVA
65W5SYu0u6BvwDIUQAJGkWUNRLTbCGxyTZox33xYU+4X4DcnE3TtWEga/Cm/wjrd
Cm9AZoWCv2DfhZdXyz6dBfYqVYfrxafZEfEbZN1W1iJMob2ClKS/hcdRVuDKyzjM
xYYySitEqvxbnoDsjx9E44l14LIr6glNjoKShRlbjg8z+EDwhov7+KOEzgYG49HY
wY6iY2rF7yTwufBGLYTcws2lgD5hBAyA
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:11 2025 by rpki-client