Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7994696CC8AD11EFA8115AAD762E951A.roa
File: 7994696CC8AD11EFA8115AAD762E951A.roa (raw, json)
Hash identifier: CrKKljoXMcA4Rwh58nI7V5U97GohlwwchLASCm1ZlYw=
Subject key identifier: 06:09:52:13:29:45:CE:E7:A2:7B:81:7D:AD:37:04:C0:6C:19:3D:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01318A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7994696CC8AD11EFA8115AAD762E951A.roa
Signing time: Thu 02 Jan 2025 02:01:27 +0000
ROA not before: Thu 02 Jan 2025 02:01:23 +0000
ROA not after: Mon 13 Dec 2027 02:01:23 +0000
asID: 17561
IP address blocks: 154.220.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78218 (0x1318a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 02:01:23 2025 GMT
Not After : Dec 13 02:01:23 2027 GMT
Subject: CN=6775f377-9760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:42:5e:9b:19:5a:58:08:dc:e0:cc:fa:5b:
7e:72:e3:f5:18:64:ca:eb:8c:96:95:ed:52:38:fe:
59:d2:03:cf:7b:e7:0d:33:e1:66:60:a4:75:b5:0f:
fb:b4:6c:37:0d:6a:3a:43:4b:8e:b0:9b:50:2b:8c:
ff:11:87:c8:e7:72:ca:e8:d5:fc:97:60:7d:74:3b:
bc:9e:90:c6:61:3a:9c:62:42:1c:59:09:50:c0:80:
b1:15:e8:61:59:f3:0e:b1:1d:30:d9:9c:f3:94:8a:
d4:b8:73:1a:f9:c7:73:15:0e:c3:1e:4d:91:1d:59:
1f:d2:80:c1:a6:a4:cb:83:2d:27:b0:b6:65:4b:c1:
1a:da:c5:b7:1c:c2:05:ff:d7:68:2e:82:f2:3b:2e:
71:50:1c:77:5e:fb:d1:3b:a5:2b:09:e8:87:2e:6a:
c0:14:38:d3:25:e9:ad:44:8f:7e:35:e8:d9:02:6a:
a3:d1:fd:07:f0:d7:55:cb:1a:9e:09:ec:cb:c4:ea:
db:15:24:64:f2:e9:00:a1:b8:aa:1f:e3:86:60:43:
78:6d:0b:c3:44:0b:55:79:4f:2a:ac:6a:7c:b7:71:
43:62:46:6c:2d:e8:f2:f4:21:1b:79:83:8e:d0:cf:
ea:f2:79:d2:47:9c:55:38:af:4b:5f:c1:13:49:a8:
82:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:09:52:13:29:45:CE:E7:A2:7B:81:7D:AD:37:04:C0:6C:19:3D:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7994696CC8AD11EFA8115AAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.160.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:3f:45:64:fa:af:74:6d:b3:03:84:cd:ec:52:a8:e0:bf:ec:
12:6f:77:de:a3:02:8f:d6:76:ab:dc:14:3c:c2:1e:fb:6e:fb:
02:9f:84:0f:3b:ee:56:06:67:b3:ad:b7:92:64:f8:d1:d0:d0:
2e:73:87:71:16:75:29:02:88:a3:b5:2f:8d:9a:fc:f5:2b:66:
ad:21:37:26:da:6e:df:87:c5:1d:1a:ea:de:c1:27:c7:75:8a:
b6:ac:18:7f:9e:08:a7:d5:18:dd:96:d4:6c:f1:5d:11:6d:a9:
bd:c8:11:a4:40:2e:82:15:6a:23:17:61:bc:da:9d:fb:8f:e8:
19:78:2f:32:e5:a9:b3:a3:7e:9d:40:dd:81:de:d6:af:69:e9:
97:ec:5d:81:93:f9:ff:f3:a9:12:fd:95:a7:15:30:a1:25:ed:
f3:eb:75:fc:23:e4:3d:69:9b:96:2d:28:97:00:5c:a7:bf:48:
cf:82:41:f5:b9:48:9f:1f:de:e3:b8:71:13:41:cd:30:ec:dc:
de:65:6f:35:9a:ee:8a:e5:6d:ff:d4:63:e9:5d:66:0f:1b:18:
9e:0a:93:ea:35:a6:c4:e9:8c:e5:d6:4d:4b:af:3a:4e:2c:45:
55:ef:5e:0a:55:1e:1e:ba:94:57:9e:4f:27:2b:69:f7:a2:7d:
13:e6:5b:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATGKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMDIwMTIzWhcNMjcxMjEzMDIwMTIzWjAYMRYw
FAYDVQQDEw02Nzc1ZjM3Ny05NzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzAxCXpsZWlgI3ODM+lt+cuP1GGTK64yWle1SOP5Z0gPPe+cNM+FmYKR1
tQ/7tGw3DWo6Q0uOsJtQK4z/EYfI53LK6NX8l2B9dDu8npDGYTqcYkIcWQlQwICx
FehhWfMOsR0w2ZzzlIrUuHMa+cdzFQ7DHk2RHVkf0oDBpqTLgy0nsLZlS8Ea2sW3
HMIF/9doLoLyOy5xUBx3XvvRO6UrCeiHLmrAFDjTJemtRI9+NejZAmqj0f0H8NdV
yxqeCezLxOrbFSRk8ukAobiqH+OGYEN4bQvDRAtVeU8qrGp8t3FDYkZsLejy9CEb
eYOO0M/q8nnSR5xVOK9LX8ETSaiCdwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAYJ
UhMpRc7nonuBfa03BMBsGT2wMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OTk0Njk2Q0M4QUQxMUVGQTgxMTVBQUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtygMA0GCSqGSIb3DQEB
CwUAA4IBAQCsP0Vk+q90bbMDhM3sUqjgv+wSb3feowKP1nar3BQ8wh77bvsCn4QP
O+5WBmezrbeSZPjR0NAuc4dxFnUpAoijtS+Nmvz1K2atITcm2m7fh8UdGurewSfH
dYq2rBh/ngin1RjdltRs8V0Rbam9yBGkQC6CFWojF2G82p37j+gZeC8y5amzo36d
QN2B3tavaemX7F2Bk/n/86kS/ZWnFTChJe3z63X8I+Q9aZuWLSiXAFynv0jPgkH1
uUifH97juHETQc0w7NzeZW81mu6K5W3/1GPpXWYPGxieCpPqNabE6Yzl1k1LrzpO
LEVV714KVR4eupRXnk8nK2n3on0T5lsc
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:42 2025 by rpki-client