Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACCFF134FF2B11EFB9BE359C762E951A.roa
File: ACCFF134FF2B11EFB9BE359C762E951A.roa (raw, json)
Hash identifier: UftJiQkDPegzbWYV2DnHxxa4nOf7q+h6obvQenX/eyQ=
Subject key identifier: 1E:BA:4C:BE:7B:13:82:80:04:45:E7:75:01:BD:4A:31:CD:60:00:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACCFF134FF2B11EFB9BE359C762E951A.roa
Signing time: Wed 12 Mar 2025 10:20:52 +0000
ROA not before: Wed 12 Mar 2025 10:20:48 +0000
ROA not after: Thu 24 Apr 2025 10:20:48 +0000
asID: 61414
IP address blocks: 154.217.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95206 (0x173e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 10:20:48 2025 GMT
Not After : Apr 24 10:20:48 2025 GMT
Subject: CN=67d16004-d5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:b4:4b:85:23:da:ac:72:56:f5:c9:5e:1e:
fd:94:af:58:37:6c:96:b7:ba:86:80:d7:a1:48:13:
bf:f8:0b:14:dc:71:8f:0b:d4:3f:6a:4c:09:6e:f0:
87:d2:d2:06:c0:60:04:c7:54:0f:ed:01:42:7d:41:
d9:29:93:d3:c3:09:4f:fb:79:3d:12:47:33:24:be:
34:45:95:d3:cf:ee:0a:3e:9b:66:6d:6c:70:b3:c2:
77:fe:dd:c4:e2:f4:81:89:08:67:27:84:f5:02:14:
a6:18:45:97:ec:f6:d7:b1:13:b5:4f:ce:24:99:1c:
9a:7b:f4:3e:b4:d3:ae:df:61:b8:4b:ab:f3:52:5e:
8d:a9:1e:72:9a:81:c8:87:69:2f:4f:6d:a4:54:b4:
aa:42:86:03:cb:fd:82:83:f4:76:81:66:f5:41:05:
1e:2c:8c:30:f7:98:c3:b3:d0:c5:83:ac:6a:db:dc:
25:95:fb:a9:f6:cb:fb:15:c1:8f:f6:eb:22:3a:6e:
95:5d:7b:1d:c3:1d:0a:ec:92:8a:2a:ec:3d:51:c7:
8c:61:3d:62:b5:59:7c:a8:ab:aa:11:cd:10:f7:fb:
7e:e6:95:57:29:e7:a6:49:f7:af:c5:51:af:3a:da:
3e:62:27:69:d9:a7:79:f0:1d:60:20:7c:6d:ac:3b:
c2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BA:4C:BE:7B:13:82:80:04:45:E7:75:01:BD:4A:31:CD:60:00:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACCFF134FF2B11EFB9BE359C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.248.0/21
Signature Algorithm: sha256WithRSAEncryption
16:69:20:39:22:0a:f8:44:bd:af:1b:7e:72:1c:93:11:74:52:
fd:32:10:35:8e:7e:4e:19:54:92:cd:5f:14:7d:7a:4e:14:ec:
2e:1b:7f:d3:1f:e7:19:09:0f:16:7d:cf:c7:7d:9b:4b:5d:a2:
fe:7c:7f:2d:63:3b:c7:0c:fe:a0:ac:3e:cc:dc:c4:33:e6:95:
84:6c:52:0e:a9:4c:94:74:42:85:41:76:6b:52:a0:7e:91:82:
09:dc:66:41:50:b6:ff:57:10:b1:a9:bf:79:d8:c7:80:77:34:
e0:21:45:aa:9e:33:33:26:f6:16:de:5b:33:44:3a:f0:9e:cc:
da:fe:4d:3e:d0:b2:33:1d:cb:40:d6:80:fe:15:b2:84:4e:94:
fd:bb:a4:30:e4:47:32:2d:dc:e5:9b:5c:9a:28:f3:66:e3:3e:
f7:dd:a0:22:e1:52:2f:93:4b:cb:7a:00:4d:2a:fd:56:5b:b8:
45:b0:c9:71:66:e3:df:3a:4e:18:91:4c:7c:b4:87:36:e0:0c:
bb:47:c1:c8:ec:73:8a:c6:9c:56:18:fe:fd:c0:22:a2:43:0a:
70:78:0e:cb:2a:46:ea:46:7f:5c:cf:75:fd:62:9c:4e:a4:25:
98:3a:9e:43:e0:c9:c5:06:82:87:be:a7:96:28:be:d5:f3:c3:
bb:38:aa:cb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXPmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzEyMTAyMDQ4WhcNMjUwNDI0MTAyMDQ4WjAYMRYw
FAYDVQQDEw02N2QxNjAwNC1kNWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtr60S4Uj2qxyVvXJXh79lK9YN2yWt7qGgNehSBO/+AsU3HGPC9Q/akwJ
bvCH0tIGwGAEx1QP7QFCfUHZKZPTwwlP+3k9EkczJL40RZXTz+4KPptmbWxws8J3
/t3E4vSBiQhnJ4T1AhSmGEWX7PbXsRO1T84kmRyae/Q+tNOu32G4S6vzUl6NqR5y
moHIh2kvT22kVLSqQoYDy/2Cg/R2gWb1QQUeLIww95jDs9DFg6xq29wllfup9sv7
FcGP9usiOm6VXXsdwx0K7JKKKuw9UceMYT1itVl8qKuqEc0Q9/t+5pVXKeemSfev
xVGvOto+Yidp2ad58B1gIHxtrDvC3wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB66
TL57E4KABEXndQG9SjHNYACBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQ0NGRjEzNEZGMkIxMUVGQjlCRTM1OUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmtn4MA0GCSqGSIb3DQEB
CwUAA4IBAQAWaSA5Igr4RL2vG35yHJMRdFL9MhA1jn5OGVSSzV8UfXpOFOwuG3/T
H+cZCQ8Wfc/HfZtLXaL+fH8tYzvHDP6grD7M3MQz5pWEbFIOqUyUdEKFQXZrUqB+
kYIJ3GZBULb/VxCxqb952MeAdzTgIUWqnjMzJvYW3lszRDrwnsza/k0+0LIzHctA
1oD+FbKETpT9u6Qw5EcyLdzlm1yaKPNm4z733aAi4VIvk0vLegBNKv1WW7hFsMlx
ZuPfOk4YkUx8tIc24Ay7R8HI7HOKxpxWGP79wCKiQwpweA7LKkbqRn9cz3X9YpxO
pCWYOp5D4MnFBoKHvqeWKL7V88O7OKrL
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:15 2025 by rpki-client