Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A54C09E0C53B11EF8A3CD949762E951A.roa
File: A54C09E0C53B11EF8A3CD949762E951A.roa (raw, json)
Hash identifier: xgHjh9sMExUF58S4aSWxy6kCdpzxsRrVAPaeYcrCRPY=
Subject key identifier: 61:26:50:6F:25:B4:8E:5E:A4:C0:FE:97:22:54:CB:EF:3D:EB:9C:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C4B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A54C09E0C53B11EF8A3CD949762E951A.roa
Signing time: Sat 28 Dec 2024 16:49:04 +0000
ROA not before: Sat 28 Dec 2024 16:49:00 +0000
ROA not after: Sun 12 Dec 2027 16:49:00 +0000
asID: 17561
IP address blocks: 154.205.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76875 (0x12c4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 16:49:00 2024 GMT
Not After : Dec 12 16:49:00 2027 GMT
Subject: CN=67702c00-3ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:bf:01:a1:a4:c1:5f:8c:de:aa:f6:fe:c0:
e2:0a:4e:9f:4e:c3:6c:43:47:6a:49:99:95:0b:8f:
96:d5:1b:ea:10:2c:1a:90:87:05:a1:b3:3c:04:e0:
5e:89:50:ce:73:c5:57:e1:28:4d:f0:c2:93:bf:ca:
f6:e2:6b:c3:3f:d8:b4:64:76:f8:14:05:e7:fa:ae:
b6:8f:4f:14:d6:54:06:29:d2:b2:15:f4:8a:91:aa:
7e:e8:9a:a2:67:52:41:9a:16:20:c5:65:9c:27:c7:
97:29:d7:09:40:d2:25:35:71:3b:71:1c:56:06:bd:
c3:ac:00:2b:f2:03:33:b6:3a:4e:66:f2:6f:66:00:
5c:d6:83:49:63:ac:a1:f3:f8:5f:a0:31:b6:e6:c7:
d0:01:1c:a0:2a:9e:b4:fa:54:a2:e8:e6:a4:5d:02:
7d:33:1e:b1:75:9b:54:fd:3d:47:be:2e:be:15:d8:
3b:b8:39:a0:a1:4d:6b:4f:b7:da:79:c0:2c:c6:3f:
85:56:f1:f4:ea:3f:13:90:15:55:06:6b:b0:25:d7:
01:5b:1f:84:f2:54:c8:38:e1:52:4a:ee:ef:7a:4a:
d9:71:31:27:34:94:21:c7:48:69:3d:e7:42:5e:ab:
63:cf:dc:68:46:8f:7b:c4:00:d7:19:63:1d:39:65:
c7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:26:50:6F:25:B4:8E:5E:A4:C0:FE:97:22:54:CB:EF:3D:EB:9C:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A54C09E0C53B11EF8A3CD949762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:8c:a4:f5:91:36:23:d9:63:6d:0e:c4:65:54:93:a2:1a:40:
11:09:4a:f1:e0:b2:c3:9b:75:13:f4:9c:47:3b:2a:a9:1a:c4:
3b:12:7a:fd:df:d3:bb:57:c3:6b:6b:1d:0e:c3:ed:d1:0f:3b:
a7:b9:13:22:5e:4b:7d:bd:31:7c:ea:4f:78:c1:17:e0:f5:bc:
bf:b4:9b:fe:da:03:ce:21:81:f2:2d:f5:64:a6:4d:17:de:40:
d7:de:8d:c6:c2:c5:ad:89:eb:07:8a:7b:95:5b:a7:d8:4b:b0:
4d:6f:b1:76:64:7b:07:6f:7c:31:74:e0:88:a9:08:02:05:4a:
e1:91:13:80:ca:f8:2f:56:1f:a0:8b:88:2e:bd:a5:1e:0d:1d:
33:7d:7f:8c:16:1c:57:6c:35:08:9c:0e:be:b2:9e:3b:30:8b:
01:af:b2:fc:01:11:7a:57:4b:41:4d:98:6b:69:1b:5e:2b:2a:
d4:0e:c5:a0:ab:06:06:e2:de:f9:9d:34:5f:3e:f9:44:3c:26:
94:e4:7f:d7:80:fa:54:5d:65:45:40:f5:e5:b3:2b:ce:3a:68:
6b:0e:13:14:3d:57:ef:80:6b:c8:10:0f:df:fa:3e:2c:ca:a6:
dc:66:c8:b8:99:28:b9:05:6b:71:db:57:1e:39:5d:a9:cf:18:
6d:bc:78:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASxLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTY0OTAwWhcNMjcxMjEyMTY0OTAwWjAYMRYw
FAYDVQQDEw02NzcwMmMwMC0zYWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvvK/AaGkwV+M3qr2/sDiCk6fTsNsQ0dqSZmVC4+W1RvqECwakIcFobM8
BOBeiVDOc8VX4ShN8MKTv8r24mvDP9i0ZHb4FAXn+q62j08U1lQGKdKyFfSKkap+
6JqiZ1JBmhYgxWWcJ8eXKdcJQNIlNXE7cRxWBr3DrAAr8gMztjpOZvJvZgBc1oNJ
Y6yh8/hfoDG25sfQARygKp60+lSi6OakXQJ9Mx6xdZtU/T1Hvi6+Fdg7uDmgoU1r
T7faecAsxj+FVvH06j8TkBVVBmuwJdcBWx+E8lTIOOFSSu7vekrZcTEnNJQhx0hp
PedCXqtjz9xoRo97xADXGWMdOWXHuQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGEm
UG8ltI5epMD+lyJUy+8965zvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNTRDMDlFMEM1M0IxMUVGOEEzQ0Q5NDk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms0uMA0GCSqGSIb3DQEB
CwUAA4IBAQCmjKT1kTYj2WNtDsRlVJOiGkARCUrx4LLDm3UT9JxHOyqpGsQ7Enr9
39O7V8Nrax0Ow+3RDzunuRMiXkt9vTF86k94wRfg9by/tJv+2gPOIYHyLfVkpk0X
3kDX3o3GwsWtiesHinuVW6fYS7BNb7F2ZHsHb3wxdOCIqQgCBUrhkROAyvgvVh+g
i4guvaUeDR0zfX+MFhxXbDUInA6+sp47MIsBr7L8ARF6V0tBTZhraRteKyrUDsWg
qwYG4t75nTRfPvlEPCaU5H/XgPpUXWVFQPXlsyvOOmhrDhMUPVfvgGvIEA/f+j4s
yqbcZsi4mSi5BWtx21ceOV2pzxhtvHhN
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:44:36 2025 by rpki-client