Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B83E18BCCDED11EFA8B20499762E951A.roa
File: B83E18BCCDED11EFA8B20499762E951A.roa (raw, json)
Hash identifier: FLbNro5WVdTb02DP3xZ0IO2pFjxNyROgp1g3qlBR4es=
Subject key identifier: 70:FE:37:45:4C:77:E6:AA:3D:12:57:CC:EB:95:CF:DD:9C:08:D2:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01381D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B83E18BCCDED11EFA8B20499762E951A.roa
Signing time: Wed 08 Jan 2025 18:23:55 +0000
ROA not before: Wed 08 Jan 2025 18:23:52 +0000
ROA not after: Sat 03 Jan 2026 18:23:52 +0000
asID: 984
IP address blocks: 154.89.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79901 (0x1381d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 18:23:52 2025 GMT
Not After : Jan 3 18:23:52 2026 GMT
Subject: CN=677ec2bb-5cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:57:9e:da:67:11:19:1a:f6:60:21:83:78:
b5:03:53:4d:7e:96:76:27:e0:13:c9:23:06:05:a6:
05:04:00:73:7c:68:fd:a4:a0:a9:70:02:e9:d3:73:
03:c7:fc:b7:ab:fe:14:a8:9e:4a:69:b9:f7:5d:cc:
0d:fd:cb:78:02:66:39:d7:2d:1a:75:a3:78:53:96:
08:66:7b:55:3f:de:4d:21:65:27:53:8d:05:f3:31:
9d:2a:f3:6a:ce:c4:e2:13:40:db:d2:90:c2:12:7f:
b8:8a:90:03:1c:e2:2b:07:63:ec:dc:95:cf:4e:03:
50:45:25:5d:d5:66:7c:12:d0:a1:15:3c:e3:13:d6:
06:d5:bc:e6:2d:ba:c1:37:02:0e:39:b9:15:6b:91:
45:43:49:84:1a:23:d1:9b:fe:9d:29:0e:75:c6:a9:
b9:f3:a6:48:19:2e:bd:ac:37:65:db:93:2c:2f:f1:
92:c5:bf:83:60:5d:b9:bc:7d:44:4a:85:a1:c5:30:
76:1c:f6:51:73:a6:a0:80:9e:d4:2d:71:72:08:51:
86:e9:d5:2b:d9:ce:63:95:39:c6:2d:9f:5e:2c:f3:
7f:05:bd:71:8d:c8:23:c7:c7:4a:79:8f:a3:ef:89:
b0:41:97:b5:2c:28:10:a9:15:b2:71:c2:12:a3:53:
c3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FE:37:45:4C:77:E6:AA:3D:12:57:CC:EB:95:CF:DD:9C:08:D2:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B83E18BCCDED11EFA8B20499762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.221.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:4d:a4:a2:83:6d:aa:18:c2:61:b7:7a:f6:8d:65:c0:1f:fd:
94:d1:c4:2e:92:ef:a3:b9:07:de:ac:a3:68:45:ca:a8:8f:c7:
01:4e:ed:35:50:a9:26:c0:55:40:44:54:e5:f5:b7:ec:c4:43:
ad:64:8b:24:b6:c1:84:84:1f:f9:fd:9a:3b:8e:d0:00:f3:da:
cb:f9:91:c8:43:4c:54:32:e2:87:9f:11:fe:67:ac:db:c8:58:
b4:97:fa:c3:09:a3:20:9e:ce:3b:cb:cd:fb:7d:46:18:3f:0f:
3f:db:f5:a1:24:30:38:d5:d4:56:79:1c:a7:90:35:96:91:d9:
4c:2e:71:d5:92:85:0f:7a:9a:2a:98:46:c4:28:87:0c:cd:26:
68:d1:99:f2:fd:97:3d:dd:48:d2:ed:2a:e3:55:fd:c8:ab:8e:
45:80:7f:d4:80:d5:7e:65:c7:35:10:47:99:f8:c9:b7:34:db:
9d:a5:ff:81:ae:5e:10:8c:85:ed:d1:0d:54:97:7c:13:52:99:
ac:bd:89:16:1f:2a:dd:4d:27:6c:5a:87:ba:fd:71:89:87:03:
bf:ad:57:57:33:13:d5:2a:43:83:90:d2:da:e6:6c:b6:f8:e5:
34:56:7f:a0:be:48:98:34:91:24:83:50:ce:47:67:f7:92:d9:
28:8a:60:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATgdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA4MTgyMzUyWhcNMjYwMTAzMTgyMzUyWjAYMRYw
FAYDVQQDEw02NzdlYzJiYi01Y2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuR5XntpnERka9mAhg3i1A1NNfpZ2J+ATySMGBaYFBABzfGj9pKCpcALp
03MDx/y3q/4UqJ5Kabn3XcwN/ct4AmY51y0adaN4U5YIZntVP95NIWUnU40F8zGd
KvNqzsTiE0Db0pDCEn+4ipADHOIrB2Ps3JXPTgNQRSVd1WZ8EtChFTzjE9YG1bzm
LbrBNwIOObkVa5FFQ0mEGiPRm/6dKQ51xqm586ZIGS69rDdl25MsL/GSxb+DYF25
vH1ESoWhxTB2HPZRc6aggJ7ULXFyCFGG6dUr2c5jlTnGLZ9eLPN/Bb1xjcgjx8dK
eY+j74mwQZe1LCgQqRWyccISo1PDoQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHD+
N0VMd+aqPRJXzOuVz92cCNLHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CODNFMThCQ0NERUQxMUVGQThCMjA0OTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlndMA0GCSqGSIb3DQEB
CwUAA4IBAQA6TaSig22qGMJht3r2jWXAH/2U0cQuku+juQferKNoRcqoj8cBTu01
UKkmwFVARFTl9bfsxEOtZIsktsGEhB/5/Zo7jtAA89rL+ZHIQ0xUMuKHnxH+Z6zb
yFi0l/rDCaMgns47y837fUYYPw8/2/WhJDA41dRWeRynkDWWkdlMLnHVkoUPepoq
mEbEKIcMzSZo0Zny/Zc93UjS7SrjVf3Iq45FgH/UgNV+Zcc1EEeZ+Mm3NNudpf+B
rl4QjIXt0Q1Ul3wTUpmsvYkWHyrdTSdsWoe6/XGJhwO/rVdXMxPVKkODkNLa5my2
+OU0Vn+gvkiYNJEkg1DOR2f3ktkoimDP
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:13:14 2025 by rpki-client