Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A948318EC36C11EFBA1F4651762E951A.roa
File: A948318EC36C11EFBA1F4651762E951A.roa (raw, json)
Hash identifier: zRlEyHM1rVA7DegX6gctz4edXzjVh7DSszshn5ZsrKk=
Subject key identifier: 58:D2:66:3F:83:98:40:13:72:E7:75:3E:9B:2B:16:E8:9A:A1:CC:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A948318EC36C11EFBA1F4651762E951A.roa
Signing time: Thu 26 Dec 2024 09:34:54 +0000
ROA not before: Thu 26 Dec 2024 09:34:50 +0000
ROA not after: Fri 12 Dec 2025 09:34:50 +0000
asID: 984
IP address blocks: 154.94.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75516 (0x126fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:34:50 2024 GMT
Not After : Dec 12 09:34:50 2025 GMT
Subject: CN=676d233d-d39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ac:15:e0:35:80:36:91:8e:85:ed:ec:55:ee:
79:48:94:cc:da:a9:5f:91:d3:a5:36:d8:29:a9:ae:
13:c0:60:df:51:76:56:67:a7:f4:c3:71:0c:89:b4:
c5:7b:58:65:ef:4a:d6:f0:f0:d2:97:b5:3a:7d:8a:
c3:2b:41:87:1f:34:0b:55:f5:98:96:cc:b7:6f:d6:
27:3f:03:ac:cc:f6:e8:80:0c:b0:5a:89:20:1f:93:
cb:ca:a4:bf:3d:8a:3f:c1:9d:9b:c7:dc:19:d3:03:
79:ea:11:8d:0b:6a:1f:cd:86:62:12:ae:b6:2a:f4:
eb:6f:f7:5f:20:35:d6:b5:f0:7a:85:da:d5:80:43:
0b:19:51:9e:99:32:eb:d3:ff:5f:70:69:20:aa:db:
48:a3:ca:76:88:6a:7c:f9:43:99:18:5e:ab:bd:90:
60:40:dd:b2:87:25:47:b6:6f:2e:3f:d7:49:fa:f0:
77:ef:9d:42:ee:d4:bd:ee:82:26:25:7d:1e:fb:00:
0e:5d:8b:55:50:55:32:4c:57:87:2a:77:1e:cd:73:
54:a3:80:7b:f2:d6:bc:90:2d:9f:ea:f4:61:4d:72:
9c:f7:a0:5f:63:73:8c:27:9d:8f:68:f4:c2:0b:ad:
b1:7f:a5:31:05:da:f3:cc:81:4c:a1:53:86:27:88:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D2:66:3F:83:98:40:13:72:E7:75:3E:9B:2B:16:E8:9A:A1:CC:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A948318EC36C11EFBA1F4651762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.149.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:02:76:ef:5e:d0:71:df:f6:25:ce:c2:51:60:32:4b:7e:8f:
23:ce:76:2d:f5:88:89:e1:86:d2:c3:16:3f:84:e9:52:01:22:
d2:4e:5e:d0:4a:a3:09:8e:6b:14:7c:94:e4:fb:cb:b3:57:ac:
4a:d7:d7:06:1e:92:07:a7:1a:da:33:41:01:b3:ce:ab:91:82:
49:b3:78:0f:d2:d6:18:5d:bd:1f:cb:c5:b0:1f:c5:66:d8:bb:
7a:7b:b2:fc:ed:aa:58:b7:e9:e8:91:6b:08:1d:62:07:a2:41:
fd:20:a6:df:0d:e9:36:87:9c:de:8f:34:25:36:ed:76:a7:bf:
bf:42:da:3e:9f:e4:84:c6:be:72:3b:3a:3c:2f:46:2e:cc:53:
33:11:5a:db:85:2e:2c:0a:ac:96:37:17:92:11:d0:d4:d9:61:
cd:39:b7:85:a7:b4:1d:57:fa:7b:37:45:01:af:f0:c1:d8:7f:
62:9b:bc:a7:28:59:82:76:44:4d:b4:2f:cc:64:24:de:ee:42:
af:d3:4a:d5:17:58:37:f5:ab:a2:ed:06:b0:c8:0c:46:f0:62:
47:ff:70:af:9f:9c:69:67:b5:31:bd:e9:55:7a:2f:1f:e2:03:
ee:5b:22:e0:7d:6c:8b:28:e4:bd:bc:ab:0f:13:f4:28:5e:2f:
bd:e2:1d:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASb8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDkzNDUwWhcNMjUxMjEyMDkzNDUwWjAYMRYw
FAYDVQQDEw02NzZkMjMzZC1kMzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA16wV4DWANpGOhe3sVe55SJTM2qlfkdOlNtgpqa4TwGDfUXZWZ6f0w3EM
ibTFe1hl70rW8PDSl7U6fYrDK0GHHzQLVfWYlsy3b9YnPwOszPbogAywWokgH5PL
yqS/PYo/wZ2bx9wZ0wN56hGNC2ofzYZiEq62KvTrb/dfIDXWtfB6hdrVgEMLGVGe
mTLr0/9fcGkgqttIo8p2iGp8+UOZGF6rvZBgQN2yhyVHtm8uP9dJ+vB3751C7tS9
7oImJX0e+wAOXYtVUFUyTFeHKncezXNUo4B78ta8kC2f6vRhTXKc96BfY3OMJ52P
aPTCC62xf6UxBdrzzIFMoVOGJ4iGywIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFjS
Zj+DmEATcud1PpsrFuiaocxUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BOTQ4MzE4RUMzNkMxMUVGQkExRjQ2NTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml6VMA0GCSqGSIb3DQEB
CwUAA4IBAQCmAnbvXtBx3/YlzsJRYDJLfo8jznYt9YiJ4YbSwxY/hOlSASLSTl7Q
SqMJjmsUfJTk+8uzV6xK19cGHpIHpxraM0EBs86rkYJJs3gP0tYYXb0fy8WwH8Vm
2Lt6e7L87apYt+nokWsIHWIHokH9IKbfDek2h5zejzQlNu12p7+/Qto+n+SExr5y
Ozo8L0YuzFMzEVrbhS4sCqyWNxeSEdDU2WHNObeFp7QdV/p7N0UBr/DB2H9im7yn
KFmCdkRNtC/MZCTe7kKv00rVF1g39aui7QawyAxG8GJH/3Cvn5xpZ7UxvelVei8f
4gPuWyLgfWyLKOS9vKsPE/QoXi+94h3d
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:01 2025 by rpki-client