Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5B7874AC5E011EFB7497162762E951A.roa
File: C5B7874AC5E011EFB7497162762E951A.roa (raw, json)
Hash identifier: oOkrIYBzL2HFOrSxJITqC8drWPk5dawF9pzwtVF8X1A=
Subject key identifier: 8A:72:56:6B:45:04:B9:E6:B4:35:72:F2:38:CB:15:FC:4A:C8:1E:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D4C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5B7874AC5E011EFB7497162762E951A.roa
Signing time: Sun 29 Dec 2024 12:31:05 +0000
ROA not before: Sun 29 Dec 2024 12:31:02 +0000
ROA not after: Sun 12 Dec 2027 12:31:02 +0000
asID: 17561
IP address blocks: 154.210.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77132 (0x12d4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 12:31:02 2024 GMT
Not After : Dec 12 12:31:02 2027 GMT
Subject: CN=67714109-ec23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cd:7c:2f:0e:12:57:f5:01:2c:39:a6:4b:b8:
57:d6:73:d7:4f:dd:6d:74:21:e7:6d:73:b1:96:f8:
c6:db:bc:30:1b:1e:de:43:70:ae:bd:ef:b1:09:f4:
79:5a:23:3a:66:81:5a:40:a2:9b:cc:7b:16:de:c0:
2b:bc:1b:00:01:3c:6e:12:fe:d5:97:9c:25:03:0e:
0d:e9:d3:df:9d:0e:a3:b1:35:44:36:29:4d:6c:be:
dc:8a:67:76:2f:b8:2d:45:5d:a4:b0:87:27:ce:99:
c8:63:fd:9d:d2:37:fa:95:07:a1:2c:fb:e8:d8:8e:
97:e3:92:e2:c7:b1:1e:74:cb:97:86:a5:8f:a9:76:
21:37:af:e8:11:ce:e9:9e:b0:4c:8d:b3:b9:8f:c0:
7e:b4:f5:e1:60:c5:72:22:aa:1b:12:a2:6c:c9:ee:
18:a1:64:c4:0a:74:d5:af:04:f2:56:fa:5b:3c:35:
b7:4a:c1:19:f7:3b:c2:e6:05:84:39:13:c9:ea:ba:
d3:2d:67:5a:0e:50:bb:b1:3c:d7:04:b3:be:7e:66:
89:be:56:ef:00:e9:c0:5a:69:7c:a8:b3:c7:ef:b1:
2d:84:bc:20:f7:a5:38:5f:a2:a6:e9:fd:04:19:61:
84:93:1c:3f:f7:bc:7f:40:29:bf:55:64:08:7b:7a:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:72:56:6B:45:04:B9:E6:B4:35:72:F2:38:CB:15:FC:4A:C8:1E:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5B7874AC5E011EFB7497162762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.104.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:01:93:89:ba:fe:99:88:87:7e:9c:85:39:29:b7:b8:4a:8a:
fc:34:33:24:d5:ed:d3:e2:7f:33:44:67:12:32:33:ae:a5:95:
82:44:ba:dc:5c:4d:7d:36:9c:ac:e3:65:17:c0:3c:e9:10:19:
5a:36:90:b9:11:ae:19:67:63:ba:c5:c8:84:58:9a:9c:46:3c:
8c:40:32:bd:5b:5c:a9:d6:0a:96:ba:ba:12:93:73:c7:e4:0b:
81:b2:4e:da:d5:fc:6e:81:5c:31:38:56:70:0c:d5:14:4d:13:
e1:a7:75:b2:fa:82:e7:ba:8a:3a:56:86:9a:cc:5d:ce:c0:9f:
4f:ca:21:80:6a:da:e2:95:5a:1c:46:7f:7a:8a:4e:9d:ae:83:
49:f1:c9:89:c7:d4:d2:6f:b9:e9:30:6f:e4:b8:6e:c4:bd:85:
45:9c:d3:17:b8:9f:77:20:78:56:c0:aa:40:f6:41:d6:a7:74:
7d:31:3b:cd:78:8c:51:f3:50:55:65:b0:b2:db:fc:ef:35:70:
bc:7e:17:31:c7:5f:90:ad:b5:f1:f8:6f:e8:d5:b2:df:dd:5e:
9c:0c:f3:4e:7e:41:00:bc:91:49:29:72:f8:82:21:ec:ea:ea:
7c:ca:55:8f:2c:16:c4:eb:69:4b:90:1e:f1:28:2c:51:fc:1e:
64:c7:0f:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS1MMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTIzMTAyWhcNMjcxMjEyMTIzMTAyWjAYMRYw
FAYDVQQDEw02NzcxNDEwOS1lYzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlc18Lw4SV/UBLDmmS7hX1nPXT91tdCHnbXOxlvjG27wwGx7eQ3Cuve+x
CfR5WiM6ZoFaQKKbzHsW3sArvBsAATxuEv7Vl5wlAw4N6dPfnQ6jsTVENilNbL7c
imd2L7gtRV2ksIcnzpnIY/2d0jf6lQehLPvo2I6X45Lix7EedMuXhqWPqXYhN6/o
Ec7pnrBMjbO5j8B+tPXhYMVyIqobEqJsye4YoWTECnTVrwTyVvpbPDW3SsEZ9zvC
5gWEORPJ6rrTLWdaDlC7sTzXBLO+fmaJvlbvAOnAWml8qLPH77EthLwg96U4X6Km
6f0EGWGEkxw/97x/QCm/VWQIe3pXzQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIpy
VmtFBLnmtDVy8jjLFfxKyB7VMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNUI3ODc0QUM1RTAxMUVGQjc0OTcxNjI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtJoMA0GCSqGSIb3DQEB
CwUAA4IBAQCgAZOJuv6ZiId+nIU5Kbe4Sor8NDMk1e3T4n8zRGcSMjOupZWCRLrc
XE19Npys42UXwDzpEBlaNpC5Ea4ZZ2O6xciEWJqcRjyMQDK9W1yp1gqWuroSk3PH
5AuBsk7a1fxugVwxOFZwDNUUTRPhp3Wy+oLnuoo6VoaazF3OwJ9PyiGAatrilVoc
Rn96ik6droNJ8cmJx9TSb7npMG/kuG7EvYVFnNMXuJ93IHhWwKpA9kHWp3R9MTvN
eIxR81BVZbCy2/zvNXC8fhcxx1+QrbXx+G/o1bLf3V6cDPNOfkEAvJFJKXL4giHs
6up8ylWPLBbE62lLkB7xKCxR/B5kxw9/
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:15:00 2025 by rpki-client