Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE5670B0C91A11EF9EA38365762E951A.roa
File: AE5670B0C91A11EF9EA38365762E951A.roa (raw, json)
Hash identifier: xMnpi6l0BUN7Z6bSysFFI41bWM4X6pSTSgl3nBkDqVk=
Subject key identifier: 1F:C3:1D:7B:E1:A6:4F:E1:1A:58:73:E2:B5:9C:09:7C:BA:2D:FB:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE5670B0C91A11EF9EA38365762E951A.roa
Signing time: Thu 02 Jan 2025 15:03:10 +0000
ROA not before: Thu 02 Jan 2025 15:03:06 +0000
ROA not after: Mon 13 Dec 2027 15:03:06 +0000
asID: 17561
IP address blocks: 154.222.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78583 (0x132f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 15:03:06 2025 GMT
Not After : Dec 13 15:03:06 2027 GMT
Subject: CN=6776aaae-904c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:c4:26:82:af:4e:1e:ec:0b:23:1d:04:74:
47:cd:e9:43:f1:22:9b:38:fd:d0:33:da:9e:15:62:
ea:53:e6:58:b3:57:29:67:a4:70:79:ba:d3:d8:e7:
2f:c4:ae:68:7d:72:2d:07:47:b3:c6:f5:5d:72:3d:
be:4a:b1:51:67:dc:aa:09:3b:f9:53:2e:6f:45:47:
af:df:51:0e:93:8c:b2:c3:85:c6:72:73:0c:93:32:
0c:2e:12:9a:56:34:bb:f9:53:58:35:c6:64:8d:0b:
42:3e:9b:64:c6:2a:ae:6b:a4:3a:48:f7:3a:d8:3c:
95:66:ba:96:c4:c6:72:a3:97:d7:2c:9f:1f:88:51:
61:d9:39:3d:14:f1:81:13:6f:77:3d:b2:21:a5:60:
dc:59:15:57:d4:8b:24:94:54:d9:5d:aa:d9:51:1b:
e7:03:d8:70:84:3f:7b:96:a4:73:6a:65:a8:81:d2:
43:5b:fc:06:a2:35:36:2b:ad:c2:4e:fc:8b:35:ae:
7a:af:53:9c:64:94:0b:62:20:46:48:78:81:e7:86:
e0:c7:05:ef:95:e9:3d:5c:64:bc:4d:84:aa:bd:ff:
6e:c9:32:76:bd:de:b7:f0:73:2e:8a:c6:c8:c3:2c:
f8:31:0e:94:b5:07:dc:b6:d2:b3:d2:34:f6:6c:89:
fe:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C3:1D:7B:E1:A6:4F:E1:1A:58:73:E2:B5:9C:09:7C:BA:2D:FB:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE5670B0C91A11EF9EA38365762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.38.0/24
Signature Algorithm: sha256WithRSAEncryption
09:04:67:a5:94:f8:cb:55:9e:57:49:f9:70:98:e8:46:63:b9:
a6:61:3f:e9:70:2d:18:2b:dc:da:44:9e:c3:87:e4:59:4d:2b:
c5:6a:c2:33:be:78:c9:83:1e:d5:a8:ab:66:b7:65:83:9b:20:
8c:c1:c8:03:75:24:3a:a6:b5:3e:45:16:93:25:0d:3a:a8:07:
b7:84:ea:48:df:0a:16:87:58:6e:39:7e:e5:7b:7b:b5:20:b2:
39:2b:18:0b:0e:b1:e9:c1:ea:77:e1:57:83:d1:2c:d2:e2:29:
93:7f:82:b4:5b:a3:0b:bf:ad:53:51:ff:de:cc:49:46:46:5c:
aa:ac:25:80:5d:04:1e:57:ea:7d:1f:93:f4:6a:0f:03:7f:95:
40:15:55:b9:69:73:4d:d0:e4:5a:b5:02:4d:df:21:a1:bb:de:
cb:4f:8e:6f:37:25:5a:8f:eb:5b:c1:fc:5b:2f:1e:ca:a2:3c:
84:aa:d1:d7:fb:1e:7d:2b:ae:4d:8c:94:2a:8b:41:79:a2:23:
85:0f:29:a1:77:1c:4c:a4:03:9c:be:86:0b:c3:01:b4:17:c9:
7f:5e:5f:7b:67:b3:8e:5a:3a:fe:d1:c9:98:f3:99:4d:ad:1e:
66:44:9c:9c:c7:94:8b:e2:18:b9:c8:a7:e1:e1:7d:e6:61:d5:
f8:96:be:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATL3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTUwMzA2WhcNMjcxMjEzMTUwMzA2WjAYMRYw
FAYDVQQDEw02Nzc2YWFhZS05MDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv5nEJoKvTh7sCyMdBHRHzelD8SKbOP3QM9qeFWLqU+ZYs1cpZ6RwebrT
2OcvxK5ofXItB0ezxvVdcj2+SrFRZ9yqCTv5Uy5vRUev31EOk4yyw4XGcnMMkzIM
LhKaVjS7+VNYNcZkjQtCPptkxiqua6Q6SPc62DyVZrqWxMZyo5fXLJ8fiFFh2Tk9
FPGBE293PbIhpWDcWRVX1IsklFTZXarZURvnA9hwhD97lqRzamWogdJDW/wGojU2
K63CTvyLNa56r1OcZJQLYiBGSHiB54bgxwXvlek9XGS8TYSqvf9uyTJ2vd638HMu
isbIwyz4MQ6UtQfcttKz0jT2bIn+zQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB/D
HXvhpk/hGlhz4rWcCXy6LftqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRTU2NzBCMEM5MUExMUVGOUVBMzgzNjU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt4mMA0GCSqGSIb3DQEB
CwUAA4IBAQAJBGellPjLVZ5XSflwmOhGY7mmYT/pcC0YK9zaRJ7Dh+RZTSvFasIz
vnjJgx7VqKtmt2WDmyCMwcgDdSQ6prU+RRaTJQ06qAe3hOpI3woWh1huOX7le3u1
ILI5KxgLDrHpwep34VeD0SzS4imTf4K0W6MLv61TUf/ezElGRlyqrCWAXQQeV+p9
H5P0ag8Df5VAFVW5aXNN0ORatQJN3yGhu97LT45vNyVaj+tbwfxbLx7KojyEqtHX
+x59K65NjJQqi0F5oiOFDymhdxxMpAOcvoYLwwG0F8l/Xl97Z7OOWjr+0cmY85lN
rR5mRJycx5SL4hi5yKfh4X3mYdX4lr4x
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:38:03 2025 by rpki-client