Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AACAB81AC38511EF897A986B762E951A.roa
File: AACAB81AC38511EF897A986B762E951A.roa (raw, json)
Hash identifier: SVpo7DCAFmZ0MrITkgKUqTzXrl9ev1l77fr2Lu6u/+I=
Subject key identifier: F5:C5:E1:19:BF:01:C8:0E:C0:9F:CA:05:D9:71:93:36:09:78:A9:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01278E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AACAB81AC38511EF897A986B762E951A.roa
Signing time: Thu 26 Dec 2024 12:33:54 +0000
ROA not before: Thu 26 Dec 2024 12:33:50 +0000
ROA not after: Sun 12 Dec 2027 12:33:50 +0000
asID: 17561
IP address blocks: 154.94.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75662 (0x1278e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 12:33:50 2024 GMT
Not After : Dec 12 12:33:50 2027 GMT
Subject: CN=676d4d31-8a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:fa:2d:35:32:ea:93:4d:92:fe:c4:e9:a5:
be:43:c2:36:35:d3:c9:37:6a:53:c8:c1:9c:1f:a6:
51:88:18:2b:f3:49:58:28:6e:2e:b1:fc:f7:57:77:
9e:78:56:9c:20:6f:cc:f1:69:dc:fa:de:1c:7c:9e:
03:02:7a:ac:8b:81:8f:93:77:85:db:7b:3f:bf:4e:
46:74:8b:d5:0f:04:cc:2b:df:6b:ae:8f:2f:54:5a:
f5:89:a6:e6:e0:66:6e:05:e8:50:3c:2e:a5:9f:35:
08:7c:d5:1f:80:10:56:71:82:e0:99:8c:96:3c:fa:
be:69:b3:ab:81:11:19:d5:e3:4b:43:6a:84:c1:19:
d0:0d:51:42:4c:20:27:e6:4e:e7:b1:3b:18:4f:5f:
8d:a2:14:50:b6:85:3d:a6:96:9d:11:93:82:5f:c2:
07:c0:18:bb:fd:19:60:c4:e7:21:da:73:ca:df:a5:
14:f8:ec:a3:97:85:40:31:4c:54:e9:d3:c0:a6:8a:
92:a9:09:1b:e3:6d:ab:d1:cf:50:43:be:48:2b:29:
c7:e7:53:86:ff:16:72:d3:5b:3a:b5:03:40:94:86:
8e:2a:5d:18:92:aa:87:2f:0b:a2:67:a5:87:d4:b8:
bc:e5:0a:e8:1d:e3:be:39:7a:02:3c:bd:82:b5:ff:
b7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C5:E1:19:BF:01:C8:0E:C0:9F:CA:05:D9:71:93:36:09:78:A9:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AACAB81AC38511EF897A986B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.222.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:e3:22:63:46:16:60:08:e1:b0:ff:53:76:6e:30:dd:50:10:
89:11:90:8b:3e:87:b3:74:57:ec:52:5b:33:f0:72:17:86:27:
56:84:52:7b:9f:87:36:c5:b3:18:b6:c7:37:8f:5e:ec:fc:0b:
c8:c8:13:84:47:3e:09:1f:8a:f2:9f:59:c9:65:e7:8e:26:ed:
54:95:ad:22:d5:a6:3a:31:84:59:54:31:ca:80:b1:f6:fe:70:
8f:24:51:8d:90:d8:80:e0:87:d6:da:46:f9:c7:3c:58:45:4e:
3b:58:8e:4a:50:79:37:f5:11:7d:fd:ae:67:3e:1a:77:a6:c8:
6d:ac:a6:04:49:c3:d9:ed:a7:61:3b:a7:69:3a:b8:e3:bd:b7:
28:e0:60:49:34:35:a9:e1:d6:8f:bc:71:ba:0f:04:0c:4c:a8:
9d:31:e9:f2:67:2f:ff:32:e7:16:e6:c9:ed:6c:67:94:b7:32:
ae:d9:50:7a:79:3d:c7:e7:21:57:8f:67:88:1d:9d:4d:1d:f7:
a0:04:2b:9c:3f:c1:f4:44:8f:59:03:03:2d:cc:5a:28:2f:04:
fe:fb:38:66:55:e6:a1:12:04:6f:30:d4:a7:88:a8:20:70:2a:
80:18:f6:2c:70:b2:94:02:9e:35:a8:6e:fc:af:d3:b5:c9:0b:
5c:53:e5:53
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASeOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MTIzMzUwWhcNMjcxMjEyMTIzMzUwWjAYMRYw
FAYDVQQDEw02NzZkNGQzMS04YTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwW76LTUy6pNNkv7E6aW+Q8I2NdPJN2pTyMGcH6ZRiBgr80lYKG4usfz3
V3eeeFacIG/M8Wnc+t4cfJ4DAnqsi4GPk3eF23s/v05GdIvVDwTMK99rro8vVFr1
iabm4GZuBehQPC6lnzUIfNUfgBBWcYLgmYyWPPq+abOrgREZ1eNLQ2qEwRnQDVFC
TCAn5k7nsTsYT1+NohRQtoU9ppadEZOCX8IHwBi7/RlgxOch2nPK36UU+Oyjl4VA
MUxU6dPApoqSqQkb422r0c9QQ75IKynH51OG/xZy01s6tQNAlIaOKl0YkqqHLwui
Z6WH1Li85QroHeO+OXoCPL2Ctf+3UQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPXF
4Rm/AcgOwJ/KBdlxkzYJeKnRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQUNBQjgxQUMzODUxMUVGODk3QTk4NkI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml7eMA0GCSqGSIb3DQEB
CwUAA4IBAQC64yJjRhZgCOGw/1N2bjDdUBCJEZCLPoezdFfsUlsz8HIXhidWhFJ7
n4c2xbMYtsc3j17s/AvIyBOERz4JH4ryn1nJZeeOJu1Ula0i1aY6MYRZVDHKgLH2
/nCPJFGNkNiA4IfW2kb5xzxYRU47WI5KUHk39RF9/a5nPhp3pshtrKYEScPZ7adh
O6dpOrjjvbco4GBJNDWp4daPvHG6DwQMTKidMenyZy//MucW5sntbGeUtzKu2VB6
eT3H5yFXj2eIHZ1NHfegBCucP8H0RI9ZAwMtzFooLwT++zhmVeahEgRvMNSniKgg
cCqAGPYscLKUAp41qG78r9O1yQtcU+VT
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:44:10 2025 by rpki-client