Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8432DC60DC1111EFB01AE4AA762E951A.roa
File: 8432DC60DC1111EFB01AE4AA762E951A.roa (raw, json)
Hash identifier: 6N2MRGecb60reixoT2Uq/+Q1ZWlTPkiXtGjM1rDriuA=
Subject key identifier: 92:17:60:12:52:0E:73:6F:A7:3E:32:99:7E:AE:74:91:CC:DC:33:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8432DC60DC1111EFB01AE4AA762E951A.roa
Signing time: Sun 26 Jan 2025 18:15:26 +0000
ROA not before: Sun 26 Jan 2025 18:15:23 +0000
ROA not after: Tue 01 Apr 2025 18:15:23 +0000
asID: 63139
IP address blocks: 154.94.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84810 (0x14b4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 18:15:23 2025 GMT
Not After : Apr 1 18:15:23 2025 GMT
Subject: CN=67967bbe-d2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:79:cd:77:4d:c2:c9:c2:fe:67:48:12:57:34:
c4:7a:be:f5:1c:71:f0:34:f8:cd:2e:48:ea:99:71:
45:51:9c:e6:e6:dd:0d:ef:bc:6d:14:f0:07:53:b0:
6f:b2:80:fa:3c:f5:c3:06:76:60:72:6e:be:5a:c9:
b3:67:75:51:27:21:6a:f5:a6:44:af:86:e5:9a:18:
3d:55:4a:0d:49:36:51:6c:87:e4:bd:e5:5d:19:89:
fb:eb:b8:11:d9:4a:52:7a:bb:a1:1b:4e:a9:1e:39:
67:62:88:78:6f:6c:15:e7:cd:b4:e3:20:70:67:07:
80:9e:b0:a5:bb:34:c1:1e:b0:bf:49:e0:43:4a:b2:
cf:a6:69:52:8d:18:26:56:a7:03:aa:f1:d4:83:75:
d7:3c:8b:b7:36:26:c2:94:f6:38:40:d9:b6:fe:df:
a7:cc:94:2f:fe:b5:35:80:4c:2d:fd:e5:ee:00:a0:
19:5f:18:79:94:f9:3b:f9:66:92:9a:17:d4:74:1a:
17:60:be:92:fe:79:6c:0f:0c:57:f3:53:11:4d:d9:
30:23:94:1a:5d:e4:36:3d:2a:9b:03:11:7f:d4:f8:
85:7f:97:2a:8c:e7:66:5c:c9:83:0c:d1:45:ac:98:
df:f0:77:4c:e0:8e:6d:07:ab:38:03:eb:2f:8d:22:
22:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:17:60:12:52:0E:73:6F:A7:3E:32:99:7E:AE:74:91:CC:DC:33:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8432DC60DC1111EFB01AE4AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.95.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:44:28:3c:cc:fa:4c:60:1c:b7:ed:08:dd:6f:fa:ea:52:90:
48:96:29:b3:72:7f:5b:b9:95:4d:bf:a2:c3:d0:2a:2b:83:8c:
93:c1:6d:4f:52:d8:d5:b2:11:ce:a2:43:7c:08:41:98:4b:c1:
d6:8d:01:17:44:4f:17:19:ae:06:0c:c2:8b:d9:a5:cc:e5:7a:
5b:6a:58:47:46:1e:70:5e:8d:24:d1:17:c9:83:ef:fc:7d:45:
1d:b1:4a:35:97:f6:15:60:c3:df:25:e3:3a:6c:11:32:ce:7b:
e3:ca:ca:06:83:71:4b:b5:3b:e1:5b:a7:9d:8d:75:2c:97:ee:
a0:6b:6e:96:71:d7:18:6f:94:90:a7:83:45:94:c6:aa:65:4a:
ee:20:41:96:ef:46:85:53:40:1d:58:1c:3a:65:66:2f:be:23:
6f:65:65:02:5d:d5:46:b0:11:a0:dc:d4:50:d9:f4:71:bd:4f:
c6:b8:6c:81:c1:ff:cf:e7:2d:df:2d:24:d4:5d:df:ef:4e:34:
f5:8d:42:8a:2e:ae:8f:a5:1e:93:df:cb:b2:e7:e1:6f:c0:9b:
e2:26:c6:bd:2e:14:4d:8e:0e:2d:a7:25:c2:b1:9f:98:4c:50:
f7:6f:22:29:81:ec:f4:4d:ba:75:a8:6d:16:6e:dc:3d:81:ee:
4d:ac:80:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUtKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI2MTgxNTIzWhcNMjUwNDAxMTgxNTIzWjAYMRYw
FAYDVQQDEw02Nzk2N2JiZS1kMmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAznnNd03CycL+Z0gSVzTEer71HHHwNPjNLkjqmXFFUZzm5t0N77xtFPAH
U7BvsoD6PPXDBnZgcm6+WsmzZ3VRJyFq9aZEr4blmhg9VUoNSTZRbIfkveVdGYn7
67gR2UpSeruhG06pHjlnYoh4b2wV58204yBwZweAnrCluzTBHrC/SeBDSrLPpmlS
jRgmVqcDqvHUg3XXPIu3NibClPY4QNm2/t+nzJQv/rU1gEwt/eXuAKAZXxh5lPk7
+WaSmhfUdBoXYL6S/nlsDwxX81MRTdkwI5QaXeQ2PSqbAxF/1PiFf5cqjOdmXMmD
DNFFrJjf8HdM4I5tB6s4A+svjSIiKQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJIX
YBJSDnNvpz4ymX6udJHM3DMKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NDMyREM2MERDMTExMUVGQjAxQUU0QUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5fMA0GCSqGSIb3DQEB
CwUAA4IBAQC7RCg8zPpMYBy37Qjdb/rqUpBIlimzcn9buZVNv6LD0Corg4yTwW1P
UtjVshHOokN8CEGYS8HWjQEXRE8XGa4GDMKL2aXM5XpbalhHRh5wXo0k0RfJg+/8
fUUdsUo1l/YVYMPfJeM6bBEyznvjysoGg3FLtTvhW6edjXUsl+6ga26WcdcYb5SQ
p4NFlMaqZUruIEGW70aFU0AdWBw6ZWYvviNvZWUCXdVGsBGg3NRQ2fRxvU/GuGyB
wf/P5y3fLSTUXd/vTjT1jUKKLq6PpR6T38uy5+FvwJviJsa9LhRNjg4tpyXCsZ+Y
TFD3byIpgez0Tbp1qG0Wbtw9ge5NrID/
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:02:47 2025 by rpki-client