Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F59DB74C3D211EF9D0BCE4E762E951A.roa
File: 6F59DB74C3D211EF9D0BCE4E762E951A.roa (raw, json)
Hash identifier: IbTq2cAGiIRdsolG2ysd/pbESrmwBkrc79SwRyX65Qo=
Subject key identifier: 60:38:C0:D7:46:4F:05:B2:3A:3C:3A:47:6F:4C:86:49:90:B7:2C:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01284E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F59DB74C3D211EF9D0BCE4E762E951A.roa
Signing time: Thu 26 Dec 2024 21:43:25 +0000
ROA not before: Thu 26 Dec 2024 21:43:21 +0000
ROA not after: Fri 12 Dec 2025 21:43:21 +0000
asID: 984
IP address blocks: 154.83.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75854 (0x1284e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:43:21 2024 GMT
Not After : Dec 12 21:43:21 2025 GMT
Subject: CN=676dcdfd-2dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:29:c1:d5:fb:02:ea:8f:60:05:bc:ad:ac:
65:19:8f:c7:b0:d7:b2:04:e8:cf:28:2b:07:00:ff:
51:24:41:98:e7:1a:7f:46:bd:88:39:2f:dd:91:77:
67:83:48:c4:7f:bc:4b:33:5a:2d:7c:68:11:07:2d:
af:18:12:9f:81:42:13:c9:ae:ee:bd:8c:c3:b5:84:
98:f8:0d:73:aa:48:aa:d2:9d:cc:7d:50:6e:f5:bd:
e2:54:21:4e:4a:d7:77:de:22:20:3d:9d:58:6a:85:
d9:fa:0e:60:bf:69:65:42:47:35:fc:ea:44:24:17:
d5:50:ac:97:66:a8:54:42:5c:0e:5b:88:d3:e7:5f:
19:ee:30:b2:e2:86:3f:bb:f9:97:6c:a9:f1:bf:f6:
bf:c5:f3:8c:86:b8:be:f6:80:d9:e1:b1:ad:25:83:
f1:03:df:a7:de:50:7f:a3:60:96:12:fb:10:2f:4c:
a9:70:69:db:e7:11:8d:21:a3:e7:b6:3e:96:cd:ba:
77:44:64:53:17:92:cf:1d:39:c0:fb:73:2d:fb:cc:
75:0a:fa:e0:be:20:53:8f:8d:00:e4:b3:33:91:0f:
1d:da:bb:a8:af:d7:5c:55:e3:24:4c:76:c1:ae:9c:
63:3a:c2:8c:47:d7:bf:6c:2a:f5:6d:67:c2:21:cf:
ae:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:38:C0:D7:46:4F:05:B2:3A:3C:3A:47:6F:4C:86:49:90:B7:2C:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F59DB74C3D211EF9D0BCE4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.189.0/24
Signature Algorithm: sha256WithRSAEncryption
46:20:5a:45:72:46:52:2e:21:ec:1a:c9:d5:e7:06:08:9f:4d:
c7:d5:b0:99:28:82:ce:3d:55:8c:4f:72:57:51:d5:76:54:8a:
7e:8c:41:d6:a4:3a:78:31:e9:b9:10:a6:6b:65:b3:e3:44:06:
5e:3f:b6:c7:b8:88:e8:a9:4f:3b:ba:63:4b:5b:95:d5:d3:0d:
01:a8:f1:95:b1:a8:7c:49:e7:2b:6a:35:c6:c7:78:2f:f7:00:
fb:6c:b7:09:ef:b2:7f:89:30:8a:5e:84:c3:cc:21:93:e2:f5:
1f:e1:21:03:12:19:27:6a:2e:f0:db:23:3c:00:b3:9e:98:76:
75:55:cd:cd:0a:51:af:f6:22:17:99:e2:20:f5:d2:ed:1a:d7:
65:3e:60:43:a8:20:fa:4f:68:29:d5:c5:a4:28:e1:ca:30:97:
f1:4c:64:34:7a:eb:c9:bf:f4:d4:5e:9e:95:70:bc:2e:92:8b:
e9:99:ee:87:fa:40:9f:43:0e:e1:17:ee:f0:82:40:01:18:2c:
04:49:ce:7e:95:e3:c7:4a:72:63:78:51:e1:e8:7b:45:a2:8a:
2a:84:37:e0:46:3d:1a:53:08:b7:46:30:0a:9d:f5:3a:49:89:
23:72:c8:db:8f:2a:fe:f0:af:9a:14:ac:43:cc:d6:e2:42:fa:
5a:77:c7:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAShOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MjE0MzIxWhcNMjUxMjEyMjE0MzIxWjAYMRYw
FAYDVQQDEw02NzZkY2RmZC0yZGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvBspwdX7AuqPYAW8raxlGY/HsNeyBOjPKCsHAP9RJEGY5xp/Rr2IOS/d
kXdng0jEf7xLM1otfGgRBy2vGBKfgUITya7uvYzDtYSY+A1zqkiq0p3MfVBu9b3i
VCFOStd33iIgPZ1YaoXZ+g5gv2llQkc1/OpEJBfVUKyXZqhUQlwOW4jT518Z7jCy
4oY/u/mXbKnxv/a/xfOMhri+9oDZ4bGtJYPxA9+n3lB/o2CWEvsQL0ypcGnb5xGN
IaPntj6Wzbp3RGRTF5LPHTnA+3Mt+8x1CvrgviBTj40A5LMzkQ8d2ruor9dcVeMk
THbBrpxjOsKMR9e/bCr1bWfCIc+umwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGA4
wNdGTwWyOjw6R29MhkmQtyygMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82RjU5REI3NEMzRDIxMUVGOUQwQkNFNEU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlO9MA0GCSqGSIb3DQEB
CwUAA4IBAQBGIFpFckZSLiHsGsnV5wYIn03H1bCZKILOPVWMT3JXUdV2VIp+jEHW
pDp4Mem5EKZrZbPjRAZeP7bHuIjoqU87umNLW5XV0w0BqPGVsah8SecrajXGx3gv
9wD7bLcJ77J/iTCKXoTDzCGT4vUf4SEDEhknai7w2yM8ALOemHZ1Vc3NClGv9iIX
meIg9dLtGtdlPmBDqCD6T2gp1cWkKOHKMJfxTGQ0euvJv/TUXp6VcLwukovpme6H
+kCfQw7hF+7wgkABGCwESc5+lePHSnJjeFHh6HtFoooqhDfgRj0aUwi3RjAKnfU6
SYkjcsjbjyr+8K+aFKxDzNbiQvpad8dZ
-----END CERTIFICATE-----
Generated at Fri Apr 11 02:01:39 2025 by rpki-client