Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B91F88A8DAFC11EF85798C68762E951A.roa
File: B91F88A8DAFC11EF85798C68762E951A.roa (raw, json)
Hash identifier: 1TVzOwYUViselgoq4KrSmQHJzzzBjKbrwFuYvknlRwc=
Subject key identifier: 04:EF:C1:27:0B:6D:E3:29:EB:4B:A4:1B:7D:94:86:0F:B0:A5:0A:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01491D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B91F88A8DAFC11EF85798C68762E951A.roa
Signing time: Sat 25 Jan 2025 09:14:04 +0000
ROA not before: Sat 25 Jan 2025 09:14:01 +0000
ROA not after: Sun 30 Mar 2025 09:14:01 +0000
asID: 63139
IP address blocks: 154.94.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84253 (0x1491d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 09:14:01 2025 GMT
Not After : Mar 30 09:14:01 2025 GMT
Subject: CN=6794ab5c-247e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:07:cf:01:53:e1:b0:4d:19:20:a7:1f:1f:
14:a9:ba:f3:c9:f1:bb:6a:04:2c:ad:20:75:0b:7d:
ae:b7:21:ba:af:2d:02:40:f6:4b:07:40:67:f8:05:
8f:4b:7b:8b:ca:09:a7:c7:db:52:ea:e5:7b:44:11:
5e:19:19:cb:69:67:d1:61:e5:f2:60:89:64:58:55:
f9:a3:40:c1:31:95:05:07:f5:14:cf:ff:9b:9d:62:
4a:c7:80:10:9b:44:44:97:b9:02:5d:9e:c6:96:5f:
a4:e9:26:ee:51:7f:a7:7b:69:f3:1b:22:de:f6:54:
5f:c1:8c:c6:1c:af:ab:a7:70:9d:68:ef:82:84:a3:
b1:d1:f1:6a:33:db:12:8e:10:56:56:ab:59:c5:93:
c1:62:e0:50:49:d5:4b:b4:ed:5d:92:03:44:1e:e5:
b8:37:ed:77:af:37:8c:40:80:11:3c:ce:10:17:b8:
79:66:4a:23:9a:9e:05:eb:6d:f4:00:de:3a:2e:eb:
8e:c9:b6:a0:06:36:9e:30:fd:3f:2f:74:cc:44:d2:
aa:ff:95:90:8d:57:ad:6c:1f:ff:ef:f7:54:f6:6c:
9b:1a:7e:af:05:a6:0e:a5:bd:d7:ae:24:84:51:67:
81:3f:bb:26:9a:f3:71:ee:ce:26:6f:f5:4f:44:45:
d5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EF:C1:27:0B:6D:E3:29:EB:4B:A4:1B:7D:94:86:0F:B0:A5:0A:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B91F88A8DAFC11EF85798C68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.121.0/24
Signature Algorithm: sha256WithRSAEncryption
15:73:fe:45:e4:c7:37:48:d1:15:a6:2e:f3:d3:26:c6:54:61:
5c:58:3e:f6:66:df:5d:0e:9c:bb:97:93:ad:83:84:c0:75:b9:
6e:04:8b:fb:5c:bf:59:20:9c:9a:7b:06:0a:6c:e5:51:72:0d:
4a:71:37:17:8a:a6:87:30:72:ba:2e:7c:47:ce:f3:06:2f:4d:
db:75:2a:69:b3:9b:d3:6a:dd:53:40:6b:7a:5b:97:2b:a5:89:
1a:ce:d5:46:90:7a:ae:9b:57:b5:4b:56:88:28:97:17:10:85:
60:89:13:99:a8:20:15:06:66:1c:b0:49:58:c1:ee:55:59:0c:
8b:a3:ed:88:81:30:52:e0:bd:9d:bd:5e:ac:0b:e3:d1:db:60:
82:99:c7:55:ea:64:78:6f:c1:d3:ec:85:32:8b:f7:a6:f8:78:
f0:ea:5b:9e:c8:33:08:01:43:62:a1:c0:77:88:98:09:bc:2a:
3b:fa:75:d0:3e:89:4c:d3:a5:84:a0:27:05:82:ba:0e:54:f0:
31:02:37:bf:2f:4f:5f:1e:79:be:66:e2:63:db:48:ee:f2:7a:
f8:49:c6:8f:2a:de:dd:f7:b1:91:8a:ad:8f:1e:e6:67:a5:a3:
3c:74:40:c6:f4:47:39:cf:7c:14:8a:dd:64:dd:24:64:9d:28:
5c:4e:e6:1a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUkdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI1MDkxNDAxWhcNMjUwMzMwMDkxNDAxWjAYMRYw
FAYDVQQDEw02Nzk0YWI1Yy0yNDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvX0HzwFT4bBNGSCnHx8UqbrzyfG7agQsrSB1C32utyG6ry0CQPZLB0Bn
+AWPS3uLygmnx9tS6uV7RBFeGRnLaWfRYeXyYIlkWFX5o0DBMZUFB/UUz/+bnWJK
x4AQm0REl7kCXZ7Gll+k6SbuUX+ne2nzGyLe9lRfwYzGHK+rp3CdaO+ChKOx0fFq
M9sSjhBWVqtZxZPBYuBQSdVLtO1dkgNEHuW4N+13rzeMQIARPM4QF7h5Zkojmp4F
6230AN46LuuOybagBjaeMP0/L3TMRNKq/5WQjVetbB//7/dU9mybGn6vBaYOpb3X
riSEUWeBP7smmvNx7s4mb/VPREXVVwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFATv
wScLbeMp60ukG32Uhg+wpQpFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9COTFGODhBOERBRkMxMUVGODU3OThDNjg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml55MA0GCSqGSIb3DQEB
CwUAA4IBAQAVc/5F5Mc3SNEVpi7z0ybGVGFcWD72Zt9dDpy7l5Otg4TAdbluBIv7
XL9ZIJyaewYKbOVRcg1KcTcXiqaHMHK6LnxHzvMGL03bdSpps5vTat1TQGt6W5cr
pYkaztVGkHqum1e1S1aIKJcXEIVgiROZqCAVBmYcsElYwe5VWQyLo+2IgTBS4L2d
vV6sC+PR22CCmcdV6mR4b8HT7IUyi/em+Hjw6lueyDMIAUNiocB3iJgJvCo7+nXQ
PolM06WEoCcFgroOVPAxAje/L09fHnm+ZuJj20ju8nr4ScaPKt7d97GRiq2PHuZn
paM8dEDG9Ec5z3wUit1k3SRknShcTuYa
-----END CERTIFICATE-----
Generated at Sat Apr 12 04:55:02 2025 by rpki-client