Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FB00A20CDE311EFBA9F7359762E951A.roa
File: 5FB00A20CDE311EFBA9F7359762E951A.roa (raw, json)
Hash identifier: nnukOaNqS6j3QA3vdjk/qYgU2HhKZNUuHenVB2axns8=
Subject key identifier: DE:77:62:91:73:5D:C9:16:05:74:5C:07:69:CD:3A:1A:42:2B:BB:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FB00A20CDE311EFBA9F7359762E951A.roa
Signing time: Wed 08 Jan 2025 17:09:52 +0000
ROA not before: Wed 08 Jan 2025 17:09:47 +0000
ROA not after: Sat 03 Jan 2026 17:09:47 +0000
asID: 984
IP address blocks: 154.89.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79825 (0x137d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 17:09:47 2025 GMT
Not After : Jan 3 17:09:47 2026 GMT
Subject: CN=677eb160-df2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:c5:d9:59:34:1f:58:af:3f:69:b9:bd:48:
c7:71:90:e8:86:b4:f7:b8:8b:a1:f7:af:ee:99:9b:
e1:34:6c:d0:cb:70:7a:6c:a5:f3:3a:d7:8a:16:50:
ee:f8:da:e5:98:af:b2:ff:0e:0c:ae:5d:87:db:7c:
0b:8d:b6:a6:98:88:37:95:48:e2:52:75:75:d7:d1:
75:21:28:8b:70:ac:f3:d3:fa:bc:2b:95:d8:55:ae:
cb:64:94:42:a6:bb:36:95:bd:3b:11:22:27:d1:49:
ca:d8:f6:7a:db:78:7b:dc:82:f3:ae:f3:6a:02:28:
59:c1:6d:92:2c:6e:59:26:fd:20:cc:f5:30:10:2f:
10:dd:7d:b2:f9:a1:a3:2a:44:f1:74:41:eb:56:94:
b1:3e:c7:f8:3f:cb:27:8e:14:cd:48:06:09:ad:56:
4a:f6:7e:f8:16:c3:7e:50:ff:2c:09:a8:4f:12:d2:
6b:79:8a:a2:d2:e9:2f:3c:ec:80:a7:a0:5a:6a:a8:
8a:e9:96:6d:58:36:00:a3:48:2b:fd:ba:d4:55:b4:
f6:1e:94:40:30:bd:c3:e6:94:56:78:05:2d:60:f2:
54:8a:ca:54:e1:91:4c:dc:dd:f0:0e:88:6d:e0:0a:
37:00:c2:1b:d7:00:72:7f:d1:3f:12:46:dd:2b:4e:
c6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:77:62:91:73:5D:C9:16:05:74:5C:07:69:CD:3A:1A:42:2B:BB:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FB00A20CDE311EFBA9F7359762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.183.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:39:45:9b:b9:96:bb:80:f2:e4:c0:16:ca:bd:e1:85:67:ff:
72:c8:90:1a:d0:80:ad:0d:35:f6:6a:d8:35:0b:53:7d:0a:e1:
e6:98:a9:d9:f0:ba:55:a2:6c:c5:ca:41:e4:30:eb:7c:91:b4:
e8:2b:6f:6b:4a:5f:02:99:68:2d:bd:e7:25:16:d4:4d:63:f1:
15:88:1e:7d:a3:bd:60:37:3d:c0:85:e1:dc:11:f6:6f:2a:5f:
a0:1c:39:2f:fb:1b:19:42:cc:f9:8c:d0:9e:7f:88:1e:1a:7a:
e8:85:ad:f2:fe:fa:31:e3:94:99:0b:1b:93:a9:d0:0c:26:89:
03:55:c1:f4:b7:39:67:08:29:7f:f7:8c:a0:af:66:3d:a8:5b:
5b:38:7a:0d:9d:5a:d5:f9:a0:e6:0d:51:5a:46:d1:f4:0c:d0:
61:51:c1:dd:d8:3f:56:66:6b:bb:63:f2:c4:02:4b:3a:b0:11:
48:a0:c5:97:7f:ff:62:62:0e:8a:29:01:93:59:f8:48:31:4d:
83:8f:6b:ac:10:74:6e:19:65:14:dc:b0:a1:99:7c:d2:f8:2c:
c5:79:b5:72:a3:f2:32:6d:ef:86:06:c4:4f:e3:3c:f4:b4:85:
da:83:1e:c7:41:a2:5f:80:bd:23:43:05:48:94:ec:eb:e7:f8:
03:d1:4d:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATfRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA4MTcwOTQ3WhcNMjYwMTAzMTcwOTQ3WjAYMRYw
FAYDVQQDEw02NzdlYjE2MC1kZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtx7F2Vk0H1ivP2m5vUjHcZDohrT3uIuh96/umZvhNGzQy3B6bKXzOteK
FlDu+NrlmK+y/w4Mrl2H23wLjbammIg3lUjiUnV119F1ISiLcKzz0/q8K5XYVa7L
ZJRCprs2lb07ESIn0UnK2PZ623h73ILzrvNqAihZwW2SLG5ZJv0gzPUwEC8Q3X2y
+aGjKkTxdEHrVpSxPsf4P8snjhTNSAYJrVZK9n74FsN+UP8sCahPEtJreYqi0ukv
POyAp6BaaqiK6ZZtWDYAo0gr/brUVbT2HpRAML3D5pRWeAUtYPJUispU4ZFM3N3w
Doht4Ao3AMIb1wByf9E/EkbdK07G/wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN53
YpFzXckWBXRcB2nNOhpCK7s7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RkIwMEEyMENERTMxMUVGQkE5RjczNTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlm3MA0GCSqGSIb3DQEB
CwUAA4IBAQDMOUWbuZa7gPLkwBbKveGFZ/9yyJAa0ICtDTX2atg1C1N9CuHmmKnZ
8LpVomzFykHkMOt8kbToK29rSl8CmWgtveclFtRNY/EViB59o71gNz3AheHcEfZv
Kl+gHDkv+xsZQsz5jNCef4geGnroha3y/vox45SZCxuTqdAMJokDVcH0tzlnCCl/
94ygr2Y9qFtbOHoNnVrV+aDmDVFaRtH0DNBhUcHd2D9WZmu7Y/LEAks6sBFIoMWX
f/9iYg6KKQGTWfhIMU2Dj2usEHRuGWUU3LChmXzS+CzFebVyo/Iybe+GBsRP4zz0
tIXagx7HQaJfgL0jQwVIlOzr5/gD0U3I
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:22 2025 by rpki-client