Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6741DC26AB3511EFB8E6D7AA762E951A.roa
File: 6741DC26AB3511EFB8E6D7AA762E951A.roa (raw, json)
Hash identifier: MDnIbF2e6PLGFnzUM4DUT01zyAGIBhNzATpPiaCnJYc=
Subject key identifier: DB:62:C7:68:5C:D8:31:94:F7:34:57:9C:C5:67:6B:20:8B:D2:A5:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011358
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6741DC26AB3511EFB8E6D7AA762E951A.roa
Signing time: Mon 25 Nov 2024 13:58:53 +0000
ROA not before: Mon 25 Nov 2024 13:58:49 +0000
ROA not after: Wed 07 Jan 2026 13:58:49 +0000
asID: 18004
IP address blocks: 154.85.80.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70488 (0x11358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 25 13:58:49 2024 GMT
Not After : Jan 7 13:58:49 2026 GMT
Subject: CN=6744829c-344e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:0e:ad:82:64:d7:bc:9a:2e:5a:40:72:b1:
51:1f:df:47:81:4b:9e:08:1b:e7:70:01:95:73:7a:
02:31:95:9b:d7:46:99:2f:20:d6:75:3b:dd:af:4c:
5c:b7:53:8d:87:f6:0e:a2:0a:ba:f4:cf:64:0e:fb:
d2:53:81:90:8c:21:be:9d:93:11:85:42:3a:58:9d:
39:88:b2:ed:9a:f4:b4:bb:af:55:cc:14:87:72:f2:
22:87:58:cd:86:8a:8c:d1:3a:b8:6e:b8:e4:25:ca:
95:a8:15:b2:52:1a:49:89:11:39:85:da:87:e8:ea:
05:85:5b:fb:09:ab:3f:f7:4d:cd:14:87:3e:11:25:
13:7c:08:69:0e:00:e3:03:31:f1:db:e4:9d:f0:87:
d7:6b:b6:ee:fb:73:9d:20:9e:c1:51:e1:ac:35:7f:
5d:8b:71:bc:dd:ea:fa:6d:59:10:07:83:f5:83:04:
0d:62:d9:9c:1a:54:7d:ed:d5:3b:53:8e:50:4f:33:
47:47:11:79:5b:c1:e9:f5:f8:6a:46:f8:cd:8c:ea:
1c:e2:f3:ec:da:e7:a4:07:b5:5d:6d:0f:99:f2:22:
9a:98:09:2f:bf:f6:96:5f:c2:43:18:fd:33:f6:90:
ac:d6:76:4c:1f:68:cf:d2:1a:1f:da:78:bd:bf:1d:
b3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:62:C7:68:5C:D8:31:94:F7:34:57:9C:C5:67:6B:20:8B:D2:A5:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6741DC26AB3511EFB8E6D7AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.80.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:1b:d5:58:a5:8e:3c:60:41:c3:11:cd:12:c2:a0:2d:be:46:
80:03:4a:71:d4:51:70:f2:95:0e:22:de:57:21:01:df:f6:7c:
1e:11:ed:2c:31:5f:ce:b3:b8:6f:7d:39:cf:b5:cb:bc:2e:ac:
b2:be:7a:9f:75:f9:34:5c:2a:d9:a8:68:67:95:85:9f:ae:c8:
ee:20:fe:76:ca:75:e4:c4:53:1f:c9:6a:72:0a:28:c1:0a:57:
71:6f:d8:ad:b5:ac:97:87:c6:aa:be:af:32:83:dd:76:15:4c:
ee:14:d2:58:bf:44:ab:bc:6f:53:91:6c:b9:5a:00:dc:f9:ea:
e3:8d:dd:60:c4:3d:e4:c5:be:35:7c:07:be:fd:25:e5:e4:ab:
b6:49:87:c7:ce:96:18:51:3d:d0:c0:c0:06:6e:1c:33:9d:40:
cc:94:8c:7d:5e:9b:3b:ca:c4:64:fa:a8:6c:5e:c0:92:50:1f:
b8:ef:af:5d:25:2d:fb:a1:0a:98:fe:1b:70:a2:16:f6:1e:94:
1a:2f:08:19:e6:a8:92:65:73:4d:ef:f4:32:07:7b:2c:ab:9a:
83:b6:bd:bc:41:1c:09:22:2f:9c:9e:e6:ed:7d:63:99:22:fa:
4e:9b:36:c6:2c:a1:ee:42:35:b0:93:e1:39:26:b7:df:3d:47:
49:2e:de:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARNYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTI1MTM1ODQ5WhcNMjYwMTA3MTM1ODQ5WjAYMRYw
FAYDVQQDEw02NzQ0ODI5Yy0zNDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwy4OrYJk17yaLlpAcrFRH99HgUueCBvncAGVc3oCMZWb10aZLyDWdTvd
r0xct1ONh/YOogq69M9kDvvSU4GQjCG+nZMRhUI6WJ05iLLtmvS0u69VzBSHcvIi
h1jNhoqM0Tq4brjkJcqVqBWyUhpJiRE5hdqH6OoFhVv7Cas/903NFIc+ESUTfAhp
DgDjAzHx2+Sd8IfXa7bu+3OdIJ7BUeGsNX9di3G83er6bVkQB4P1gwQNYtmcGlR9
7dU7U45QTzNHRxF5W8Hp9fhqRvjNjOoc4vPs2uekB7VdbQ+Z8iKamAkvv/aWX8JD
GP0z9pCs1nZMH2jP0hof2ni9vx2zkwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNti
x2hc2DGU9zRXnMVnayCL0qWwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NzQxREMyNkFCMzUxMUVGQjhFNkQ3QUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlVQMA0GCSqGSIb3DQEB
CwUAA4IBAQBtG9VYpY48YEHDEc0SwqAtvkaAA0px1FFw8pUOIt5XIQHf9nweEe0s
MV/Os7hvfTnPtcu8Lqyyvnqfdfk0XCrZqGhnlYWfrsjuIP52ynXkxFMfyWpyCijB
Cldxb9ittayXh8aqvq8yg912FUzuFNJYv0SrvG9TkWy5WgDc+erjjd1gxD3kxb41
fAe+/SXl5Ku2SYfHzpYYUT3QwMAGbhwznUDMlIx9Xps7ysRk+qhsXsCSUB+4769d
JS37oQqY/htwohb2HpQaLwgZ5qiSZXNN7/QyB3ssq5qDtr28QRwJIi+cnubtfWOZ
IvpOmzbGLKHuQjWwk+E5JrffPUdJLt6+
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:12:53 2025 by rpki-client