Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92999614CDDD11EFB4BE5AB3762E951A.roa
File: 92999614CDDD11EFB4BE5AB3762E951A.roa (raw, json)
Hash identifier: 46xwoeCxr/1feqYvuE6q65hQuFPzgANU/JVIMUxjsts=
Subject key identifier: 44:9C:62:38:2E:31:12:41:84:6B:87:29:7B:39:ED:49:E4:AD:70:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92999614CDDD11EFB4BE5AB3762E951A.roa
Signing time: Wed 08 Jan 2025 16:28:20 +0000
ROA not before: Wed 08 Jan 2025 16:28:17 +0000
ROA not after: Sat 03 Jan 2026 16:28:17 +0000
asID: 984
IP address blocks: 154.89.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79781 (0x137a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 16:28:17 2025 GMT
Not After : Jan 3 16:28:17 2026 GMT
Subject: CN=677ea7a4-775e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:e1:8f:43:1b:ea:34:29:43:c8:94:04:97:
82:08:05:16:26:3b:fc:49:b2:25:4a:19:1a:46:3a:
14:38:2e:d0:a9:e9:be:a0:f6:ae:d5:fb:16:92:b1:
e2:cf:6d:e6:fa:78:6f:ca:2a:e1:78:eb:4c:4c:62:
86:78:bb:e0:bb:e9:56:98:42:12:58:7e:0a:bb:fc:
a3:ba:6f:6d:85:aa:a2:a2:47:68:15:02:e3:3a:ff:
b3:57:10:e5:ef:49:12:13:7c:ad:dc:8c:7a:27:f1:
20:35:50:3d:fa:de:47:6f:47:f1:89:79:05:75:3f:
16:4e:89:7c:cf:cf:04:59:8b:7d:f5:08:b2:97:7e:
fb:96:16:a7:4b:d0:5e:f4:e4:4a:fb:60:2f:7f:09:
80:f1:03:ae:12:5a:10:82:1f:b1:04:17:1d:69:91:
a5:07:48:65:d3:9f:75:25:34:c3:f5:3e:e4:e4:5c:
09:c1:42:23:c8:28:c2:6f:11:84:b8:ce:57:c6:08:
cf:96:b9:19:93:2d:35:36:16:a1:63:48:91:6b:26:
b9:dc:ac:4c:14:64:ef:14:61:41:cf:fe:08:e8:7e:
8e:92:82:f7:86:12:9c:82:be:7f:07:ac:46:e3:94:
f1:30:9d:27:e4:58:30:1e:fe:aa:4d:93:c9:02:e0:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9C:62:38:2E:31:12:41:84:6B:87:29:7B:39:ED:49:E4:AD:70:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92999614CDDD11EFB4BE5AB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.161.0/24
Signature Algorithm: sha256WithRSAEncryption
77:fb:b6:b8:6e:c7:a0:4f:82:d9:32:ec:6c:e2:83:89:50:bf:
19:6d:28:21:75:0b:14:22:0e:b5:d6:b3:2f:61:1e:9c:b2:da:
57:6f:8d:c1:43:88:0f:2b:67:9c:b5:56:27:e4:30:6e:e6:ed:
b2:71:59:aa:31:e1:17:d9:c2:1c:09:d9:ec:f4:30:80:d8:1c:
61:46:10:54:89:d3:f6:dc:d3:71:4b:c8:ae:34:f1:17:63:49:
cc:ea:2d:00:9a:da:b3:dd:f2:ab:92:2b:df:1d:61:73:c7:dc:
c7:10:c4:cf:4f:05:80:1e:e3:e4:57:0f:97:e0:0e:12:38:47:
c9:ba:d8:e6:f1:7d:e6:10:54:a9:9d:16:ec:7b:03:13:d4:79:
b4:74:db:ad:e4:cc:b7:82:7e:0a:fd:1b:f7:80:9c:b0:f5:fd:
14:81:aa:68:1b:02:01:51:5c:9d:3a:28:81:ba:e3:40:a0:85:
af:8c:91:d8:8b:9d:60:22:8b:3d:87:d4:3c:04:6c:3f:9e:a7:
50:77:84:b7:14:db:a3:63:c0:e4:b2:52:88:ea:d2:4d:70:ed:
31:06:36:27:ff:0f:82:b9:3e:05:3d:70:34:35:53:bb:dd:9d:
a2:57:5f:01:12:8e:ca:07:f5:ba:f9:79:e7:bb:75:69:d0:ff:
30:1e:34:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATelMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA4MTYyODE3WhcNMjYwMTAzMTYyODE3WjAYMRYw
FAYDVQQDEw02NzdlYTdhNC03NzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwSrhj0Mb6jQpQ8iUBJeCCAUWJjv8SbIlShkaRjoUOC7Qqem+oPau1fsW
krHiz23m+nhvyirheOtMTGKGeLvgu+lWmEISWH4Ku/yjum9thaqiokdoFQLjOv+z
VxDl70kSE3yt3Ix6J/EgNVA9+t5Hb0fxiXkFdT8WTol8z88EWYt99Qiyl377lhan
S9Be9ORK+2AvfwmA8QOuEloQgh+xBBcdaZGlB0hl0591JTTD9T7k5FwJwUIjyCjC
bxGEuM5XxgjPlrkZky01NhahY0iRaya53KxMFGTvFGFBz/4I6H6OkoL3hhKcgr5/
B6xG45TxMJ0n5FgwHv6qTZPJAuCbTwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFESc
YjguMRJBhGuHKXs57UnkrXCcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85Mjk5OTYxNENEREQxMUVGQjRCRTVBQjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlmhMA0GCSqGSIb3DQEB
CwUAA4IBAQB3+7a4bsegT4LZMuxs4oOJUL8ZbSghdQsUIg611rMvYR6cstpXb43B
Q4gPK2ectVYn5DBu5u2ycVmqMeEX2cIcCdns9DCA2BxhRhBUidP23NNxS8iuNPEX
Y0nM6i0Amtqz3fKrkivfHWFzx9zHEMTPTwWAHuPkVw+X4A4SOEfJutjm8X3mEFSp
nRbsewMT1Hm0dNut5My3gn4K/Rv3gJyw9f0UgapoGwIBUVydOiiBuuNAoIWvjJHY
i51gIos9h9Q8BGw/nqdQd4S3FNujY8DkslKI6tJNcO0xBjYn/w+CuT4FPXA0NVO7
3Z2iV18BEo7KB/W6+Xnnu3Vp0P8wHjS3
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:53 2025 by rpki-client