Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAF77EE4CF3911EFAF6C7364762E951A.roa
File: AAF77EE4CF3911EFAF6C7364762E951A.roa (raw, json)
Hash identifier: LOEiuBfEkItWKe8tQ0STlm8Yizcy96Ab74QcVtbBqcA=
Subject key identifier: 51:21:8C:F4:55:2C:79:E0:BA:E2:53:CE:9A:03:3C:C9:75:26:04:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAF77EE4CF3911EFAF6C7364762E951A.roa
Signing time: Fri 10 Jan 2025 10:00:06 +0000
ROA not before: Fri 10 Jan 2025 10:00:02 +0000
ROA not after: Wed 17 Dec 2025 10:00:02 +0000
asID: 17557
IP address blocks: 154.198.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80363 (0x139eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 10:00:02 2025 GMT
Not After : Dec 17 10:00:02 2025 GMT
Subject: CN=6780efa6-c86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:69:96:d0:aa:ca:cc:5a:64:ea:68:3c:c8:
72:b3:79:e0:a2:87:e3:2c:e8:48:5a:d1:78:7b:63:
45:9a:05:18:8c:eb:d6:82:49:e8:07:16:f4:b8:4c:
aa:a6:85:8c:0c:a6:34:74:8b:b3:31:b7:68:f8:47:
99:89:b4:0b:22:e5:b6:e1:67:3e:97:23:76:87:03:
d7:fa:35:f9:d9:bd:15:87:47:28:0c:45:39:2d:56:
bf:e9:e3:b5:7c:5c:8c:01:1a:07:05:6b:e6:9b:db:
62:2a:fa:fe:9f:8d:50:04:eb:5b:90:79:9e:42:9d:
a1:85:00:94:2c:cd:07:3c:9f:38:cd:45:67:d6:04:
93:df:cc:92:35:c3:1f:3b:7c:08:c5:94:3e:b5:a7:
56:3f:9d:83:bf:94:be:25:1e:e9:51:50:30:4f:1d:
42:0d:33:20:c8:b9:2e:2a:21:9b:2e:c8:be:1c:c9:
4d:c3:a1:28:3a:77:ab:e9:1a:f7:4c:79:ac:fa:43:
9e:25:c7:8e:b0:4f:6b:be:28:38:76:6b:03:d9:0b:
33:df:b0:17:59:82:b7:df:7e:35:b0:ba:af:bb:59:
9b:c3:b9:3d:92:70:1c:0d:f6:cb:19:20:70:e2:c3:
50:9d:c5:1a:4c:b6:74:f5:5d:c3:60:65:e4:dd:60:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:21:8C:F4:55:2C:79:E0:BA:E2:53:CE:9A:03:3C:C9:75:26:04:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAF77EE4CF3911EFAF6C7364762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.13.0/24
Signature Algorithm: sha256WithRSAEncryption
95:79:ea:53:b7:ca:ab:46:2e:ba:39:27:c4:7f:99:be:de:93:
25:66:09:c3:70:ef:6d:e0:0a:42:8a:27:82:d3:80:ea:c6:74:
7d:37:79:c1:a8:b7:44:50:27:28:be:52:54:a2:6a:33:86:a3:
dc:d8:92:f9:e0:de:da:3a:11:cf:e0:c3:87:05:88:7a:a3:b5:
42:8d:84:b8:29:96:15:e4:0b:ee:bc:2e:3b:5f:9f:f1:99:64:
76:df:d7:15:6b:8a:dd:db:e4:93:7d:4f:22:f7:2a:17:ce:1e:
3c:cb:d2:2f:52:2d:cc:80:c5:19:ca:f6:00:94:f1:a3:87:e7:
39:67:0b:58:b0:7f:d6:b4:16:a1:d1:ba:b8:66:c2:c4:8c:4d:
f8:1d:5b:6e:2b:7b:09:5e:17:9f:cb:82:7d:2f:6f:f8:a9:b0:
56:ec:51:35:c1:0d:8d:49:1f:a6:96:3f:1c:78:0c:50:95:72:
74:6f:1b:aa:9a:34:c7:7b:69:6c:af:16:4c:f3:a8:4a:1b:c7:
cf:91:43:ca:47:95:29:47:8f:6f:be:c1:ea:f0:53:b0:41:85:
26:51:c8:b5:39:a1:fb:c4:c0:81:8d:f5:85:ed:80:82:0f:4a:
cb:85:18:e2:d6:58:9d:a1:ad:98:1d:3f:c8:c3:d3:57:5f:22:
3b:af:48:76
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATnrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTEwMTAwMDAyWhcNMjUxMjE3MTAwMDAyWjAYMRYw
FAYDVQQDEw02NzgwZWZhNi1jODZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtqZpltCqysxaZOpoPMhys3ngoofjLOhIWtF4e2NFmgUYjOvWgknoBxb0
uEyqpoWMDKY0dIuzMbdo+EeZibQLIuW24Wc+lyN2hwPX+jX52b0Vh0coDEU5LVa/
6eO1fFyMARoHBWvmm9tiKvr+n41QBOtbkHmeQp2hhQCULM0HPJ84zUVn1gST38yS
NcMfO3wIxZQ+tadWP52Dv5S+JR7pUVAwTx1CDTMgyLkuKiGbLsi+HMlNw6EoOner
6Rr3THms+kOeJceOsE9rvig4dmsD2Qsz37AXWYK33341sLqvu1mbw7k9knAcDfbL
GSBw4sNQncUaTLZ09V3DYGXk3WAQDQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFEh
jPRVLHnguuJTzpoDPMl1JgR3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQUY3N0VFNENGMzkxMUVGQUY2QzczNjQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsYNMA0GCSqGSIb3DQEB
CwUAA4IBAQCVeepTt8qrRi66OSfEf5m+3pMlZgnDcO9t4ApCiieC04DqxnR9N3nB
qLdEUCcovlJUomozhqPc2JL54N7aOhHP4MOHBYh6o7VCjYS4KZYV5AvuvC47X5/x
mWR239cVa4rd2+STfU8i9yoXzh48y9IvUi3MgMUZyvYAlPGjh+c5ZwtYsH/WtBah
0bq4ZsLEjE34HVtuK3sJXhefy4J9L2/4qbBW7FE1wQ2NSR+mlj8ceAxQlXJ0bxuq
mjTHe2lsrxZM86hKG8fPkUPKR5UpR49vvsHq8FOwQYUmUci1OaH7xMCBjfWF7YCC
D0rLhRji1lidoa2YHT/Iw9NXXyI7r0h2
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:12 2025 by rpki-client