Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74B503B2C0DC11EFA7451680762E951A.roa
File: 74B503B2C0DC11EFA7451680762E951A.roa (raw, json)
Hash identifier: w4cBA8RNaj9b+zgrL5Z8nlhdnoCkDhS4cEiScfq4jFQ=
Subject key identifier: 69:09:D9:7F:CA:F2:40:49:01:79:1D:F1:4F:25:AB:85:56:42:09:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EB0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74B503B2C0DC11EFA7451680762E951A.roa
Signing time: Mon 23 Dec 2024 03:17:35 +0000
ROA not before: Mon 23 Dec 2024 03:17:32 +0000
ROA not after: Wed 10 Dec 2025 03:17:32 +0000
asID: 984
IP address blocks: 154.89.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73392 (0x11eb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:17:32 2024 GMT
Not After : Dec 10 03:17:32 2025 GMT
Subject: CN=6768d64f-e8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:eb:3d:b6:9d:fd:d6:68:8e:d6:5d:c3:ae:
3d:59:41:06:e8:32:3b:41:8c:f3:42:67:30:49:70:
79:7e:ca:1c:24:53:c6:fa:52:2f:a0:e7:7a:07:14:
be:ee:6c:af:4f:71:38:8c:13:58:94:62:f8:3a:28:
d9:c7:b6:ea:e4:ee:5a:22:96:82:0b:83:64:0d:f0:
c8:ea:4a:f6:e9:b9:c3:7e:38:9c:b5:88:03:3f:3e:
42:01:11:20:d7:27:83:b8:c5:26:8c:83:36:7c:a6:
b9:ad:c3:53:9c:56:be:80:4b:d2:63:41:f6:10:a5:
52:9f:f2:cc:f3:3d:82:81:b3:53:15:89:08:fb:ee:
97:4e:39:5b:f5:89:2b:c0:8d:73:74:6c:90:1c:a2:
d1:79:49:14:4a:da:90:17:1a:45:0a:ea:63:d9:fe:
c7:f4:cf:59:fa:1f:97:bc:a9:24:0d:e7:b4:f5:06:
06:2c:2f:86:ae:02:d7:f7:fd:1a:e3:d3:d0:05:61:
ed:58:42:41:9f:62:ba:36:88:21:5b:e5:a0:97:1e:
39:54:1f:44:fa:fe:f9:da:12:1f:02:2f:9c:71:f7:
b8:19:b5:94:6e:73:40:5e:c6:cb:00:74:2e:22:43:
ac:40:a7:3d:20:d6:d2:e6:62:58:4b:68:c7:b6:fa:
d0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:09:D9:7F:CA:F2:40:49:01:79:1D:F1:4F:25:AB:85:56:42:09:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74B503B2C0DC11EFA7451680762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.182.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:92:80:0d:e3:ef:00:63:2e:58:ed:1f:18:ab:05:f1:5d:ad:
dd:dc:09:36:47:9a:2d:ab:32:60:4b:64:96:8e:b8:7e:38:8e:
ac:21:83:0c:af:17:06:1a:91:ac:e6:29:3c:a1:7b:da:a5:36:
ce:ec:26:45:3d:1f:7c:c1:35:60:db:62:99:70:44:c7:8b:8b:
f5:c1:fa:46:70:25:5d:cb:46:21:35:26:66:10:5f:e3:c7:b1:
2f:e4:f0:25:82:a9:c0:d6:cd:cc:13:5a:68:12:b1:d5:c5:5a:
74:7f:13:de:71:b3:90:06:22:09:c8:1f:46:de:07:73:68:19:
1f:ef:50:d4:37:f9:7f:91:f6:38:04:f2:7e:85:e4:b5:45:e4:
f7:91:4b:11:40:1b:2b:71:2a:00:ee:82:ba:b3:29:3f:a7:d0:
f0:1d:d3:25:0d:da:d1:40:f0:41:ff:fe:fa:35:ba:8e:ad:df:
fe:e2:a2:87:19:80:2b:65:92:5a:85:9d:f9:0e:6b:f2:e3:96:
e5:df:dd:4d:e9:34:04:ff:b8:df:b6:21:ac:e4:01:d1:b6:6a:
cc:7d:c9:e3:d9:24:3f:6d:ad:b3:16:3f:43:34:82:43:e6:91:
4e:a5:4c:73:2d:46:db:e0:0c:86:be:5a:0a:bf:44:55:09:94:
76:2e:5a:a6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR6wMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDMxNzMyWhcNMjUxMjEwMDMxNzMyWjAYMRYw
FAYDVQQDEw02NzY4ZDY0Zi1lOGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA033rPbad/dZojtZdw649WUEG6DI7QYzzQmcwSXB5fsocJFPG+lIvoOd6
BxS+7myvT3E4jBNYlGL4OijZx7bq5O5aIpaCC4NkDfDI6kr26bnDfjictYgDPz5C
AREg1yeDuMUmjIM2fKa5rcNTnFa+gEvSY0H2EKVSn/LM8z2CgbNTFYkI++6XTjlb
9YkrwI1zdGyQHKLReUkUStqQFxpFCupj2f7H9M9Z+h+XvKkkDee09QYGLC+GrgLX
9/0a49PQBWHtWEJBn2K6NoghW+Wglx45VB9E+v752hIfAi+ccfe4GbWUbnNAXsbL
AHQuIkOsQKc9INbS5mJYS2jHtvrQowIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGkJ
2X/K8kBJAXkd8U8lq4VWQgnKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NEI1MDNCMkMwREMxMUVGQTc0NTE2ODA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlm2MA0GCSqGSIb3DQEB
CwUAA4IBAQC7koAN4+8AYy5Y7R8YqwXxXa3d3Ak2R5otqzJgS2SWjrh+OI6sIYMM
rxcGGpGs5ik8oXvapTbO7CZFPR98wTVg22KZcETHi4v1wfpGcCVdy0YhNSZmEF/j
x7Ev5PAlgqnA1s3ME1poErHVxVp0fxPecbOQBiIJyB9G3gdzaBkf71DUN/l/kfY4
BPJ+heS1ReT3kUsRQBsrcSoA7oK6syk/p9DwHdMlDdrRQPBB//76NbqOrd/+4qKH
GYArZZJahZ35Dmvy45bl391N6TQE/7jftiGs5AHRtmrMfcnj2SQ/ba2zFj9DNIJD
5pFOpUxzLUbb4AyGvloKv0RVCZR2Llqm
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:01 2025 by rpki-client