Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A026D1BAD2D911EFB4E61DBF762E951A.roa
File: A026D1BAD2D911EFB4E61DBF762E951A.roa (raw, json)
Hash identifier: 9XRHon9078g49EP0NyfOOVDVCQfAg6Vu9UuB7TJKIcQ=
Subject key identifier: 27:41:EE:16:FA:5D:15:D2:4F:4B:74:E2:04:10:3A:7A:54:99:8E:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B53
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A026D1BAD2D911EFB4E61DBF762E951A.roa
Signing time: Wed 15 Jan 2025 00:42:41 +0000
ROA not before: Wed 15 Jan 2025 00:00:37 +0000
ROA not after: Fri 12 Dec 2025 00:00:37 +0000
asID: 984
IP address blocks: 154.81.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80723 (0x13b53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 00:00:37 2025 GMT
Not After : Dec 12 00:00:37 2025 GMT
Subject: CN=67870481-5ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:eb:47:60:a3:cd:d4:50:74:39:40:6e:9b:05:
42:01:8d:f9:be:53:89:04:d8:5e:96:66:90:49:c1:
3f:d3:6a:4e:f4:e0:bb:b4:68:52:ed:6d:a2:cc:6a:
53:6e:db:3b:c5:16:44:9b:cf:18:05:b5:84:87:f2:
54:03:7b:f1:6a:7b:c1:41:a8:4a:c7:cf:ad:b3:62:
17:da:4e:97:e2:a0:bd:05:55:56:7f:51:d5:dc:bb:
a5:bb:6c:31:b2:30:6a:4b:c8:2d:c4:e3:b2:86:9d:
00:e9:81:b6:43:09:b6:44:92:c0:eb:c7:ec:32:fb:
4f:34:b5:ae:5f:a8:b6:a2:9c:0a:5f:df:8b:bb:89:
45:69:16:ad:6e:7b:bf:45:cc:c3:e1:2d:3b:4c:20:
0e:f5:95:6f:b3:b9:23:25:07:0e:6f:91:c5:d1:b8:
41:80:9d:e2:01:70:35:5c:29:d1:a3:b3:f6:f5:24:
81:ae:4b:ac:0a:5e:74:e2:d5:e9:eb:a1:f6:d2:33:
61:78:cd:67:07:58:d6:cc:fa:8c:c1:64:37:f2:1e:
9d:ea:29:4c:ac:44:80:1e:97:b3:a9:76:9c:25:87:
9a:85:fe:1e:19:09:88:cb:ed:56:43:45:8e:11:37:
ac:cc:5e:74:e9:e5:72:3a:93:2b:ed:ad:46:fe:22:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:41:EE:16:FA:5D:15:D2:4F:4B:74:E2:04:10:3A:7A:54:99:8E:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A026D1BAD2D911EFB4E61DBF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.173.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:1d:4e:9f:cb:6d:f2:af:4d:b7:ce:34:af:ff:c8:57:66:52:
50:0c:87:bd:ce:78:9b:2f:d9:b8:6b:18:0b:79:19:06:c1:4a:
5a:65:13:40:18:81:1f:59:21:a9:dd:2f:bf:3f:f6:ab:c6:23:
0b:64:24:6b:d5:42:b5:a6:1f:24:78:e2:ee:38:c9:44:d8:f7:
19:cf:77:bd:a2:fe:c9:5c:82:4b:ca:f1:f4:1c:28:0c:fe:60:
e0:7f:31:bc:91:1a:49:a6:46:7e:64:d7:1b:d3:0e:ca:4a:a5:
14:e2:31:ba:ab:51:a0:c6:54:b3:4d:fd:4f:1f:58:f0:6f:59:
d0:17:95:e7:72:93:09:46:92:7f:5f:c3:71:09:e3:d1:d1:12:
bd:d5:d6:d2:0f:19:d9:a4:c1:fa:b4:44:83:ca:cd:59:53:3b:
50:1b:75:cf:48:0f:f7:01:46:95:7d:c5:1e:35:79:cf:d3:6a:
b6:1c:4c:d8:8c:d1:b6:ee:bd:7b:d8:e6:d1:24:e8:32:80:4e:
dc:36:c4:e6:88:ec:a4:30:13:cb:88:9c:df:a2:9e:0f:cb:c8:
c6:e0:5c:d4:10:c3:66:9f:8f:0a:46:64:c5:77:1d:33:cd:5d:
81:24:af:84:07:c4:81:8c:6b:7c:18:18:b9:f3:73:32:b7:0f:
f2:b8:36:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATtTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE1MDAwMDM3WhcNMjUxMjEyMDAwMDM3WjAYMRYw
FAYDVQQDEw02Nzg3MDQ4MS01YmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2etHYKPN1FB0OUBumwVCAY35vlOJBNhelmaQScE/02pO9OC7tGhS7W2i
zGpTbts7xRZEm88YBbWEh/JUA3vxanvBQahKx8+ts2IX2k6X4qC9BVVWf1HV3Lul
u2wxsjBqS8gtxOOyhp0A6YG2Qwm2RJLA68fsMvtPNLWuX6i2opwKX9+Lu4lFaRat
bnu/RczD4S07TCAO9ZVvs7kjJQcOb5HF0bhBgJ3iAXA1XCnRo7P29SSBrkusCl50
4tXp66H20jNheM1nB1jWzPqMwWQ38h6d6ilMrESAHpezqXacJYeahf4eGQmIy+1W
Q0WOETeszF506eVyOpMr7a1G/iJgPwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCdB
7hb6XRXST0t04gQQOnpUmY40MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMDI2RDFCQUQyRDkxMUVGQjRFNjFEQkY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlGtMA0GCSqGSIb3DQEB
CwUAA4IBAQAMHU6fy23yr023zjSv/8hXZlJQDIe9znibL9m4axgLeRkGwUpaZRNA
GIEfWSGp3S+/P/arxiMLZCRr1UK1ph8keOLuOMlE2PcZz3e9ov7JXIJLyvH0HCgM
/mDgfzG8kRpJpkZ+ZNcb0w7KSqUU4jG6q1GgxlSzTf1PH1jwb1nQF5XncpMJRpJ/
X8NxCePR0RK91dbSDxnZpMH6tESDys1ZUztQG3XPSA/3AUaVfcUeNXnP02q2HEzY
jNG27r172ObRJOgygE7cNsTmiOykMBPLiJzfop4Py8jG4FzUEMNmn48KRmTFdx0z
zV2BJK+EB8SBjGt8GBi583Mytw/yuDaI
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:29:43 2025 by rpki-client