Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1D0F46EC1BC11EF87F86188762E951A.roa
File: B1D0F46EC1BC11EF87F86188762E951A.roa (raw, json)
Hash identifier: kAg0h6AS3F5izlSt7v4/0WaDwRUvJreku2gUFo/gVK8=
Subject key identifier: 6C:2F:DE:CB:24:89:24:B4:65:D5:33:E9:C0:1E:E8:C2:C3:FD:47:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1D0F46EC1BC11EF87F86188762E951A.roa
Signing time: Tue 24 Dec 2024 06:02:45 +0000
ROA not before: Tue 24 Dec 2024 06:02:42 +0000
ROA not after: Wed 10 Dec 2025 06:02:42 +0000
asID: 984
IP address blocks: 154.193.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74239 (0x121ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 06:02:42 2024 GMT
Not After : Dec 10 06:02:42 2025 GMT
Subject: CN=676a4e85-a80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:f8:bd:51:5c:3f:fc:8d:77:b5:16:34:51:
5e:8f:11:18:f7:a4:b9:f8:89:44:ad:23:0e:d6:b1:
bc:92:c7:fe:83:4a:fc:e6:3a:99:56:e0:b7:88:c7:
2a:36:a9:58:e6:05:12:21:0b:fa:cd:b2:bc:b6:df:
09:76:8d:37:4e:a1:33:6c:2b:d1:c9:ac:e4:54:06:
44:ae:79:51:c1:4a:7f:0f:98:bc:e2:bc:28:1b:48:
7a:29:67:24:69:85:00:86:f6:2d:d9:b5:dd:87:41:
2c:fc:5b:b7:be:31:87:e4:6e:15:4c:b7:9e:16:5e:
29:6a:41:c7:ea:f4:a5:ce:f2:5a:0c:a5:a9:5c:38:
fe:aa:ef:d1:0a:58:1c:c1:cd:7d:d4:5d:38:ed:a8:
db:3c:b4:52:93:76:e4:af:4b:56:38:13:9c:6b:28:
68:ed:0f:0c:be:14:7b:c7:57:52:13:40:8e:97:d4:
62:68:12:07:9e:e6:25:f0:81:ad:5d:3e:bd:16:8a:
86:e7:2b:5e:7f:c3:8a:e8:61:92:7f:d7:1d:83:8e:
27:8f:28:31:7c:67:bd:ae:7e:06:c5:4a:27:98:c5:
c7:e9:72:af:6f:e2:93:a9:1b:88:92:a5:24:cb:55:
eb:38:8b:23:13:ca:c6:10:25:0d:95:9e:fb:83:94:
e0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2F:DE:CB:24:89:24:B4:65:D5:33:E9:C0:1E:E8:C2:C3:FD:47:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1D0F46EC1BC11EF87F86188762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.185.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b8:d4:c7:6f:85:79:92:cc:a9:cc:9b:38:64:57:b2:f6:2e:
c5:9c:52:64:30:b3:ff:e2:f2:8f:32:f6:92:e7:89:04:6a:c0:
0d:f6:d3:0d:90:6f:4e:6d:92:79:22:18:ea:73:d9:7c:77:49:
0c:42:84:ff:f2:a0:be:6a:69:b1:37:e5:7d:9f:9d:d6:ac:ee:
a1:bc:3e:04:69:36:ac:7c:5c:e6:03:bb:00:23:38:30:37:0c:
ba:da:78:5f:c1:68:ef:e8:e7:f2:71:3a:08:fb:6b:b3:b4:21:
b0:53:65:cf:69:ba:af:83:1d:8a:3c:ef:39:9e:3e:b6:df:09:
aa:99:e1:5c:fa:a1:ee:31:e0:64:a1:a8:05:2f:57:5a:ea:87:
22:89:af:a3:17:38:cc:0b:70:4c:fd:ab:7d:9b:f8:5d:a6:96:
51:10:86:51:36:28:60:38:12:23:1a:e2:f2:18:03:15:c7:82:
21:e0:54:1e:9a:ac:1d:d0:23:41:7b:5e:bb:78:0b:a7:78:f9:
1f:bc:73:b0:c2:ea:ac:a9:ec:db:07:a1:95:d0:66:3d:b6:9f:
8c:6a:b5:f7:48:fe:ed:cc:de:3e:bb:6f:38:2a:e2:f5:ae:f0:
7c:45:7f:5a:e5:a3:78:66:ce:9d:56:6a:22:7b:a4:12:bf:1f:
7f:b7:de:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASH/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDYwMjQyWhcNMjUxMjEwMDYwMjQyWjAYMRYw
FAYDVQQDEw02NzZhNGU4NS1hODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAztb4vVFcP/yNd7UWNFFejxEY96S5+IlErSMO1rG8ksf+g0r85jqZVuC3
iMcqNqlY5gUSIQv6zbK8tt8Jdo03TqEzbCvRyazkVAZErnlRwUp/D5i84rwoG0h6
KWckaYUAhvYt2bXdh0Es/Fu3vjGH5G4VTLeeFl4pakHH6vSlzvJaDKWpXDj+qu/R
Clgcwc191F047ajbPLRSk3bkr0tWOBOcayho7Q8MvhR7x1dSE0COl9RiaBIHnuYl
8IGtXT69FoqG5ytef8OK6GGSf9cdg44njygxfGe9rn4GxUonmMXH6XKvb+KTqRuI
kqUky1XrOIsjE8rGECUNlZ77g5TgwwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGwv
3sskiSS0ZdUz6cAe6MLD/UdOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMUQwRjQ2RUMxQkMxMUVGODdGODYxODg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsG5MA0GCSqGSIb3DQEB
CwUAA4IBAQCouNTHb4V5ksypzJs4ZFey9i7FnFJkMLP/4vKPMvaS54kEasAN9tMN
kG9ObZJ5Ihjqc9l8d0kMQoT/8qC+ammxN+V9n53WrO6hvD4EaTasfFzmA7sAIzgw
Nwy62nhfwWjv6OfycToI+2uztCGwU2XPabqvgx2KPO85nj623wmqmeFc+qHuMeBk
oagFL1da6ociia+jFzjMC3BM/at9m/hdppZREIZRNihgOBIjGuLyGAMVx4Ih4FQe
mqwd0CNBe167eAunePkfvHOwwuqsqezbB6GV0GY9tp+MarX3SP7tzN4+u284KuL1
rvB8RX9a5aN4Zs6dVmoie6QSvx9/t95/
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:47 2025 by rpki-client