Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A90CCDD4CDD911EFAC17BB9B762E951A.roa
File: A90CCDD4CDD911EFAC17BB9B762E951A.roa (raw, json)
Hash identifier: grEDUKOt4Ump6WxmyFbLl3ypYp8JQnj5ve6ouNscP10=
Subject key identifier: 53:29:41:6B:62:72:80:30:32:0E:DC:01:76:58:23:0F:92:0C:4D:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013787
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A90CCDD4CDD911EFAC17BB9B762E951A.roa
Signing time: Wed 08 Jan 2025 16:00:20 +0000
ROA not before: Wed 08 Jan 2025 16:00:16 +0000
ROA not after: Sat 03 Jan 2026 16:00:16 +0000
asID: 984
IP address blocks: 154.89.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79751 (0x13787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 16:00:16 2025 GMT
Not After : Jan 3 16:00:16 2026 GMT
Subject: CN=677ea114-d86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:60:f5:a5:9c:1f:2c:77:7c:2e:c7:d3:e2:
6b:48:60:1b:3e:e2:a8:c8:01:4a:d7:1a:ca:77:9e:
8f:a0:ef:b0:a6:af:47:b4:fb:6a:c0:4f:88:06:13:
4e:f7:e8:00:6a:93:3f:98:a4:a2:e4:09:95:0e:8d:
29:27:d7:06:10:c5:bb:9e:56:7b:e7:e8:94:97:0e:
76:9b:0e:f5:d3:39:b5:ac:1e:ed:02:ce:e1:df:a5:
ee:5e:c7:ca:75:a0:2d:80:0f:be:64:26:b3:c5:54:
1a:12:3e:53:6b:7a:72:44:d1:3e:2d:5a:0b:41:87:
70:19:7a:e0:55:b9:ea:0e:66:5e:91:71:5b:26:6a:
a2:df:f7:e6:43:05:61:7c:d5:f4:d1:20:ae:76:d0:
7b:d5:30:ab:3d:15:51:29:5c:14:d5:b0:5c:29:81:
a5:b3:65:3e:3a:38:c1:62:4c:96:f6:bb:88:b7:e0:
e1:38:c2:8a:86:e8:ce:e6:f6:9a:17:b2:63:a9:50:
43:df:83:cd:14:c6:e9:3b:75:4f:b8:2a:8a:50:fa:
64:ad:df:2c:e1:81:54:55:a2:c3:5f:2f:9a:a1:87:
ce:1d:bb:9f:0f:ac:89:d4:1a:37:d6:c6:b8:18:de:
4c:2f:28:cf:35:d0:ff:cc:67:b7:47:66:d5:22:26:
24:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:29:41:6B:62:72:80:30:32:0E:DC:01:76:58:23:0F:92:0C:4D:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A90CCDD4CDD911EFAC17BB9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.146.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:4c:e2:6d:13:eb:5e:f6:99:0a:f6:10:12:72:a0:c5:57:4f:
20:08:25:e3:43:b0:e0:56:ea:05:fd:cd:85:68:ae:19:c5:79:
42:0e:c2:e3:ad:b8:fe:54:aa:56:f4:0a:d0:09:d1:bc:f5:8f:
40:b2:52:e4:74:64:b7:03:8b:07:f2:f0:34:de:97:ba:8e:44:
ce:24:9f:61:ea:cd:18:b6:66:66:f0:48:ee:9e:c4:51:16:09:
44:94:e5:7b:28:66:8b:2a:41:a6:c5:4d:33:79:85:e2:30:67:
bc:9b:44:9a:da:da:bc:f4:f4:07:66:38:63:48:9c:e3:f8:45:
27:d2:8b:ee:00:a3:2a:57:62:ec:45:c8:f9:d8:c2:7c:1e:b7:
99:ac:28:8c:12:4f:bd:ee:94:8e:ff:d5:a5:58:2b:c4:81:db:
6b:08:46:0c:89:6d:4c:37:79:30:4a:10:0b:32:3c:25:75:bc:
f1:89:ca:e0:fe:5a:29:2c:be:85:45:be:04:ab:1d:19:c0:2f:
f0:a5:81:aa:70:b0:a0:3c:e8:be:62:20:df:27:ff:51:ff:5c:
20:ac:0b:b1:7b:d6:f6:55:08:eb:66:a6:29:fe:3a:6c:cb:f5:
cf:25:be:e3:3b:ce:05:c4:38:6d:f3:36:75:f0:99:5e:72:4f:
c8:c0:16:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATeHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA4MTYwMDE2WhcNMjYwMTAzMTYwMDE2WjAYMRYw
FAYDVQQDEw02NzdlYTExNC1kODZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxFBg9aWcHyx3fC7H0+JrSGAbPuKoyAFK1xrKd56PoO+wpq9HtPtqwE+I
BhNO9+gAapM/mKSi5AmVDo0pJ9cGEMW7nlZ75+iUlw52mw710zm1rB7tAs7h36Xu
XsfKdaAtgA++ZCazxVQaEj5Ta3pyRNE+LVoLQYdwGXrgVbnqDmZekXFbJmqi3/fm
QwVhfNX00SCudtB71TCrPRVRKVwU1bBcKYGls2U+OjjBYkyW9ruIt+DhOMKKhujO
5vaaF7JjqVBD34PNFMbpO3VPuCqKUPpkrd8s4YFUVaLDXy+aoYfOHbufD6yJ1Bo3
1sa4GN5MLyjPNdD/zGe3R2bVIiYk9wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFMp
QWticoAwMg7cAXZYIw+SDE0mMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BOTBDQ0RENENERDkxMUVGQUMxN0JCOUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlmSMA0GCSqGSIb3DQEB
CwUAA4IBAQA8TOJtE+te9pkK9hAScqDFV08gCCXjQ7DgVuoF/c2FaK4ZxXlCDsLj
rbj+VKpW9ArQCdG89Y9AslLkdGS3A4sH8vA03pe6jkTOJJ9h6s0YtmZm8EjunsRR
FglElOV7KGaLKkGmxU0zeYXiMGe8m0Sa2tq89PQHZjhjSJzj+EUn0ovuAKMqV2Ls
Rcj52MJ8HreZrCiMEk+97pSO/9WlWCvEgdtrCEYMiW1MN3kwShALMjwldbzxicrg
/lopLL6FRb4Eqx0ZwC/wpYGqcLCgPOi+YiDfJ/9R/1wgrAuxe9b2VQjrZqYp/jps
y/XPJb7jO84FxDht8zZ18Jleck/IwBav
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:48 2025 by rpki-client