Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95CEB790D57811EF8B78E14E762E951A.roa
File: 95CEB790D57811EF8B78E14E762E951A.roa (raw, json)
Hash identifier: RTR9X3ACQeqPUeH/rdcHS28rAigZkS/nXEgVqH78fdg=
Subject key identifier: 3B:C5:B7:41:03:10:36:26:68:C4:4F:A3:93:80:E1:4F:E2:E9:75:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95CEB790D57811EF8B78E14E762E951A.roa
Signing time: Sat 18 Jan 2025 08:45:36 +0000
ROA not before: Sat 18 Jan 2025 08:45:32 +0000
ROA not after: Sat 22 Feb 2025 08:45:32 +0000
asID: 400619
IP address blocks: 154.89.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81372 (0x13ddc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 18 08:45:32 2025 GMT
Not After : Feb 22 08:45:32 2025 GMT
Subject: CN=678b6a30-b1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:80:5c:45:01:0f:bf:3f:08:ce:13:52:83:
c2:f1:ac:37:cd:b4:ea:5f:bd:87:2e:e5:cc:31:35:
bb:1e:da:7f:fd:ce:ba:39:24:0a:c8:ba:fa:bc:d6:
32:c8:61:19:73:8b:93:a6:4f:c9:44:b3:05:ae:ec:
d9:65:14:f8:2c:e4:9f:fd:23:d2:50:19:94:37:33:
2f:8a:81:15:2d:0e:b4:50:a4:31:f1:10:56:a8:3a:
98:78:c3:89:ad:18:2f:af:66:3d:60:02:4d:74:db:
83:49:92:fb:ba:c8:c2:f6:25:c8:9a:c7:78:bd:bb:
3b:64:d8:14:17:dc:b2:50:83:73:2b:01:50:da:94:
15:d2:c3:f0:d3:3f:df:7b:54:d8:f1:55:4a:e9:31:
00:24:89:0b:b6:00:00:ed:ff:9a:21:09:55:b5:ec:
56:f1:89:78:a2:df:61:c3:51:eb:55:ac:fa:09:bd:
e2:b4:f1:0f:8e:09:90:e8:0a:d6:12:8d:db:f1:8b:
c0:85:80:3e:e4:34:d6:ba:8a:65:af:26:79:9f:17:
05:0b:52:9b:a7:dc:1e:d7:b0:1f:a4:11:80:f9:75:
89:a0:d4:4d:41:2a:27:f4:f5:34:67:71:2c:61:2a:
d2:eb:11:06:fc:74:42:7a:4c:7b:cd:17:e0:d3:50:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C5:B7:41:03:10:36:26:68:C4:4F:A3:93:80:E1:4F:E2:E9:75:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95CEB790D57811EF8B78E14E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.160.0/19
Signature Algorithm: sha256WithRSAEncryption
79:55:53:f2:38:f9:25:2b:d3:ad:a9:ab:37:4e:1a:8b:31:5c:
8c:a9:02:ba:69:c2:9b:1c:13:59:37:e6:3f:6d:55:cb:23:65:
01:b2:d1:95:65:b4:53:c5:ed:29:0d:06:d7:80:81:51:9a:a5:
fb:2c:8d:f8:ac:d5:43:2b:72:86:09:67:3e:7d:0a:a9:ae:e7:
84:07:de:80:4d:8a:ae:98:02:37:cf:cd:cb:a8:cb:4c:0a:cd:
10:d7:77:31:1c:a7:b4:c1:d2:f2:39:34:4d:1f:b4:d9:32:8c:
aa:dc:a3:87:9f:03:6c:c0:71:53:9d:eb:80:b4:b6:5d:71:02:
d0:42:c3:b3:8b:96:aa:b7:27:b4:fe:36:f6:9f:62:e7:c4:c9:
81:aa:0a:6f:87:e6:fb:e3:d6:3d:44:1a:b8:67:9d:1d:89:58:
bc:0d:ef:18:95:26:ea:00:2d:f2:23:92:31:67:2a:b0:3d:9d:
a2:1e:aa:ee:22:91:db:e9:8a:13:13:72:25:d9:f1:32:63:7d:
6e:7d:32:e9:cf:6a:c2:6d:a5:80:ef:f0:1f:cb:ba:89:06:b4:
99:a9:92:c7:7d:6e:9e:b8:26:b5:77:ac:ba:f6:a4:72:21:62:
bb:33:63:78:06:6e:26:8c:3e:e4:06:d9:6f:a6:b6:f9:1e:64:
5e:1f:3f:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT3cMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE4MDg0NTMyWhcNMjUwMjIyMDg0NTMyWjAYMRYw
FAYDVQQDEw02NzhiNmEzMC1iMWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx7qAXEUBD78/CM4TUoPC8aw3zbTqX72HLuXMMTW7Htp//c66OSQKyLr6
vNYyyGEZc4uTpk/JRLMFruzZZRT4LOSf/SPSUBmUNzMvioEVLQ60UKQx8RBWqDqY
eMOJrRgvr2Y9YAJNdNuDSZL7usjC9iXImsd4vbs7ZNgUF9yyUINzKwFQ2pQV0sPw
0z/fe1TY8VVK6TEAJIkLtgAA7f+aIQlVtexW8Yl4ot9hw1HrVaz6Cb3itPEPjgmQ
6ArWEo3b8YvAhYA+5DTWuoplryZ5nxcFC1Kbp9we17AfpBGA+XWJoNRNQSon9PU0
Z3EsYSrS6xEG/HRCekx7zRfg01B/cQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDvF
t0EDEDYmaMRPo5OA4U/i6XUGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NUNFQjc5MEQ1NzgxMUVGOEI3OEUxNEU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlmgMA0GCSqGSIb3DQEB
CwUAA4IBAQB5VVPyOPklK9Otqas3ThqLMVyMqQK6acKbHBNZN+Y/bVXLI2UBstGV
ZbRTxe0pDQbXgIFRmqX7LI34rNVDK3KGCWc+fQqprueEB96ATYqumAI3z83LqMtM
Cs0Q13cxHKe0wdLyOTRNH7TZMoyq3KOHnwNswHFTneuAtLZdcQLQQsOzi5aqtye0
/jb2n2LnxMmBqgpvh+b749Y9RBq4Z50diVi8De8YlSbqAC3yI5IxZyqwPZ2iHqru
IpHb6YoTE3Il2fEyY31ufTLpz2rCbaWA7/Afy7qJBrSZqZLHfW6euCa1d6y69qRy
IWK7M2N4Bm4mjD7kBtlvprb5HmReHz/Q
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:36 2025 by rpki-client