Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81401018CDE811EFAA11D577762E951A.roa
File: 81401018CDE811EFAA11D577762E951A.roa (raw, json)
Hash identifier: qbU4iaFv9q+oK34nONiVxkYKhQwzLWSgsPLhkLpu/Ho=
Subject key identifier: EA:B0:81:CC:B9:71:F5:7A:D8:63:AB:E0:8C:9C:AA:6B:03:18:D8:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137F5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81401018CDE811EFAA11D577762E951A.roa
Signing time: Wed 08 Jan 2025 17:46:36 +0000
ROA not before: Wed 08 Jan 2025 17:46:32 +0000
ROA not after: Sat 03 Jan 2026 17:46:32 +0000
asID: 984
IP address blocks: 154.89.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79861 (0x137f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 17:46:32 2025 GMT
Not After : Jan 3 17:46:32 2026 GMT
Subject: CN=677eb9fc-c50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f3:f9:5f:69:2b:f5:d5:a5:6f:01:b9:06:c1:
42:7a:64:be:fd:8c:90:58:72:c0:3c:57:f1:9c:15:
ff:87:e8:98:c5:2c:20:3f:98:20:f1:91:16:bc:d8:
e3:86:5c:a1:d9:05:df:ed:55:37:e6:03:01:68:56:
b6:24:e9:8e:6d:36:ae:c7:fe:1c:96:21:9d:83:fe:
ab:61:58:83:e9:2e:48:0e:d3:c5:53:b6:fa:8e:cc:
c0:b7:11:a5:26:c6:b6:42:3e:19:a7:0d:5d:2b:a4:
5b:6c:f0:f3:c1:1f:af:9e:b2:95:9f:d3:af:5b:87:
3f:ab:62:cf:6d:36:89:bf:cc:22:9e:67:37:78:f4:
7d:16:a0:27:c7:c3:7a:a9:5a:af:b4:51:9d:38:f7:
35:59:ff:42:62:7c:6b:77:20:3c:b1:de:44:13:e8:
cf:78:88:09:e2:7c:96:e2:1b:9c:43:ac:7b:63:dc:
d3:e5:75:72:04:00:7c:fb:df:5d:8a:fe:16:3f:7a:
7f:ef:ae:15:9f:6b:49:9c:e7:d6:0a:44:1d:b2:cd:
2c:45:3d:7f:19:73:45:bc:09:92:42:af:7e:81:31:
f4:29:84:0c:d0:b7:d1:0a:70:dd:cf:2f:ba:49:95:
cd:13:10:6d:ae:20:7b:4d:7c:4a:b0:51:0f:b0:e8:
1b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B0:81:CC:B9:71:F5:7A:D8:63:AB:E0:8C:9C:AA:6B:03:18:D8:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81401018CDE811EFAA11D577762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.201.0/24
Signature Algorithm: sha256WithRSAEncryption
78:cc:3e:34:1f:2e:e5:5f:ab:26:70:e8:7c:8e:38:76:98:c8:
83:76:61:d2:db:3a:9d:0d:b0:0d:50:27:ae:64:13:e6:13:05:
e9:77:44:0f:02:00:6a:22:bc:8c:ca:6c:d2:72:69:bc:e4:ac:
db:26:c2:13:49:a1:fe:c6:d5:e2:87:d6:e4:e5:60:0f:3b:82:
99:7e:9f:0d:f6:17:03:b4:ea:63:dc:2a:0c:d1:5e:6e:d5:e1:
d1:0b:6c:a2:61:75:ea:59:a7:fb:f5:68:3d:01:35:61:ba:ef:
2e:13:50:1a:ac:e7:0c:79:22:88:cc:54:61:ea:75:cf:06:23:
11:2e:55:4f:eb:00:79:7d:9d:b1:55:08:1c:dd:5d:ce:03:79:
0c:50:6e:db:2c:fe:6d:0a:ff:2f:e0:99:09:2a:eb:4b:20:30:
8a:9d:56:33:ca:50:0e:8d:b1:fb:25:da:b5:75:08:87:18:30:
83:42:b7:09:43:90:c4:45:7d:f1:b9:b3:25:4d:74:87:f0:17:
22:50:a6:d1:9a:25:c0:45:a5:16:1e:06:c8:39:86:f9:d6:ff:
9d:f8:c1:eb:62:fe:19:7e:af:53:37:6a:49:e3:24:52:c6:21:
75:59:ff:0a:f3:3f:76:1d:33:d3:1e:05:bb:26:af:d2:92:8e:
d0:9f:a7:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATf1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA4MTc0NjMyWhcNMjYwMTAzMTc0NjMyWjAYMRYw
FAYDVQQDEw02NzdlYjlmYy1jNTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0/P5X2kr9dWlbwG5BsFCemS+/YyQWHLAPFfxnBX/h+iYxSwgP5gg8ZEW
vNjjhlyh2QXf7VU35gMBaFa2JOmObTaux/4cliGdg/6rYViD6S5IDtPFU7b6jszA
txGlJsa2Qj4Zpw1dK6RbbPDzwR+vnrKVn9OvW4c/q2LPbTaJv8winmc3ePR9FqAn
x8N6qVqvtFGdOPc1Wf9CYnxrdyA8sd5EE+jPeIgJ4nyW4hucQ6x7Y9zT5XVyBAB8
+99div4WP3p/764Vn2tJnOfWCkQdss0sRT1/GXNFvAmSQq9+gTH0KYQM0LfRCnDd
zy+6SZXNExBtriB7TXxKsFEPsOgbowIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOqw
gcy5cfV62GOr4IycqmsDGNhrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MTQwMTAxOENERTgxMUVGQUExMUQ1Nzc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlnJMA0GCSqGSIb3DQEB
CwUAA4IBAQB4zD40Hy7lX6smcOh8jjh2mMiDdmHS2zqdDbANUCeuZBPmEwXpd0QP
AgBqIryMymzScmm85KzbJsITSaH+xtXih9bk5WAPO4KZfp8N9hcDtOpj3CoM0V5u
1eHRC2yiYXXqWaf79Wg9ATVhuu8uE1AarOcMeSKIzFRh6nXPBiMRLlVP6wB5fZ2x
VQgc3V3OA3kMUG7bLP5tCv8v4JkJKutLIDCKnVYzylAOjbH7Jdq1dQiHGDCDQrcJ
Q5DERX3xubMlTXSH8BciUKbRmiXARaUWHgbIOYb51v+d+MHrYv4Zfq9TN2pJ4yRS
xiF1Wf8K8z92HTPTHgW7Jq/Sko7Qn6d+
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:45 2025 by rpki-client