Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5C8C5AAC61E11EF9DC66965762E951A.roa
File: A5C8C5AAC61E11EF9DC66965762E951A.roa (raw, json)
Hash identifier: hHDEqevOq3ib+cQAiZuBRCx19VERJJQpkXE4cW8W+LY=
Subject key identifier: 9F:50:78:BF:6E:7D:02:26:B1:37:39:C7:2A:5F:37:F0:97:36:39:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5C8C5AAC61E11EF9DC66965762E951A.roa
Signing time: Sun 29 Dec 2024 19:54:00 +0000
ROA not before: Sun 29 Dec 2024 19:53:57 +0000
ROA not after: Sun 12 Dec 2027 19:53:57 +0000
asID: 17561
IP address blocks: 154.217.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77656 (0x12f58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 19:53:57 2024 GMT
Not After : Dec 12 19:53:57 2027 GMT
Subject: CN=6771a8d8-2152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:4a:a8:6e:87:b2:5a:d1:83:cf:3c:ca:48:
11:35:cd:6b:ef:b7:94:07:c2:ce:d0:13:21:dd:37:
19:70:c2:66:69:2c:10:58:47:41:42:e1:49:d2:31:
13:16:d6:8a:57:2d:c8:af:32:0d:08:7d:28:b1:ff:
07:c2:d2:0c:1f:6d:8d:76:26:3e:1c:be:de:23:8a:
ca:fd:06:33:11:b2:4a:2c:ee:d1:26:08:77:43:05:
d6:b0:79:d8:b4:a0:97:94:69:54:d4:2b:d6:e7:48:
61:b0:f1:ba:2b:eb:52:83:23:20:72:78:15:34:b6:
20:58:5e:43:d4:32:42:26:56:ea:97:11:e7:18:9f:
7c:21:8b:26:18:40:f2:29:90:4e:26:c6:fd:48:3f:
27:7c:b6:5b:7b:90:0b:4a:f1:67:8d:80:b3:25:56:
cd:92:ef:08:9e:75:a1:44:6d:c6:7c:93:03:4d:03:
66:42:88:58:9e:87:d6:00:91:67:c1:c8:a5:97:2b:
b4:da:6c:67:8d:8a:cc:c5:fd:f3:a3:4b:61:79:c3:
ea:43:0f:1f:b5:a7:ba:bb:1c:68:d7:49:fa:60:9f:
62:36:67:e3:63:97:07:b0:25:73:b0:eb:68:a0:8b:
0e:db:3c:1b:1a:6d:e1:d2:04:79:37:c9:ab:dd:75:
53:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:50:78:BF:6E:7D:02:26:B1:37:39:C7:2A:5F:37:F0:97:36:39:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5C8C5AAC61E11EF9DC66965762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.143.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:63:10:53:c7:43:dd:2f:eb:d1:42:2a:65:50:14:8b:1c:9c:
60:a9:e8:1c:2b:02:ad:fc:57:0f:1e:dd:bf:ac:ac:75:2b:9c:
33:c8:67:52:0b:ef:1d:54:f7:b4:99:62:6d:29:27:c0:56:95:
a3:55:be:d1:03:14:4e:ea:1f:e9:7b:6e:3c:2b:e7:8f:ae:f9:
9e:78:17:fb:ee:8c:55:d6:36:82:2a:63:79:ec:b7:71:7a:bf:
65:26:bc:66:ad:c3:6c:f5:18:67:7e:3b:1e:64:d1:d0:96:9c:
02:70:a1:8a:c1:6d:ce:92:0b:36:41:62:e8:d9:ed:b6:8f:26:
c7:13:3a:1d:02:3a:e9:d2:f3:fb:49:4e:6d:57:c3:21:53:e1:
24:ff:1b:e4:f1:ac:bc:23:9a:11:b9:86:72:2e:b6:c0:f4:9c:
cc:57:8b:a4:5d:fb:24:65:4d:9e:f0:6a:c5:e0:e1:56:ee:90:
14:50:67:c7:d6:62:0a:9e:81:b5:7a:cc:65:f3:47:f9:74:a6:
2b:9b:bd:36:dc:f4:14:3b:f5:ef:0a:56:c8:c3:47:7e:1a:41:
35:f3:64:3a:cc:32:f4:2f:74:1d:d6:55:c3:44:4f:da:de:f3:
23:fa:71:57:91:cf:e6:b6:4a:45:91:bb:77:f5:4c:34:b7:49:
83:3e:e8:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS9YMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTk1MzU3WhcNMjcxMjEyMTk1MzU3WjAYMRYw
FAYDVQQDEw02NzcxYThkOC0yMTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz6lKqG6HslrRg888ykgRNc1r77eUB8LO0BMh3TcZcMJmaSwQWEdBQuFJ
0jETFtaKVy3IrzINCH0osf8HwtIMH22NdiY+HL7eI4rK/QYzEbJKLO7RJgh3QwXW
sHnYtKCXlGlU1CvW50hhsPG6K+tSgyMgcngVNLYgWF5D1DJCJlbqlxHnGJ98IYsm
GEDyKZBOJsb9SD8nfLZbe5ALSvFnjYCzJVbNku8InnWhRG3GfJMDTQNmQohYnofW
AJFnwcillyu02mxnjYrMxf3zo0thecPqQw8ftae6uxxo10n6YJ9iNmfjY5cHsCVz
sOtooIsO2zwbGm3h0gR5N8mr3XVTDwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJ9Q
eL9ufQImsTc5xypfN/CXNjkFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNUM4QzVBQUM2MUUxMUVGOURDNjY5NjU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtmPMA0GCSqGSIb3DQEB
CwUAA4IBAQCpYxBTx0PdL+vRQiplUBSLHJxgqegcKwKt/FcPHt2/rKx1K5wzyGdS
C+8dVPe0mWJtKSfAVpWjVb7RAxRO6h/pe248K+ePrvmeeBf77oxV1jaCKmN57Ldx
er9lJrxmrcNs9RhnfjseZNHQlpwCcKGKwW3Okgs2QWLo2e22jybHEzodAjrp0vP7
SU5tV8MhU+Ek/xvk8ay8I5oRuYZyLrbA9JzMV4ukXfskZU2e8GrF4OFW7pAUUGfH
1mIKnoG1esxl80f5dKYrm7023PQUO/XvClbIw0d+GkE182Q6zDL0L3Qd1lXDRE/a
3vMj+nFXkc/mtkpFkbt39Uw0t0mDPuhD
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:55:33 2025 by rpki-client