Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6179246CDE911EF89BB4A80762E951A.roa
File: C6179246CDE911EF89BB4A80762E951A.roa (raw, json)
Hash identifier: gxbFpxkFZ0WoE66pqr2BEA6+xFrf9J7rv6dSZfQDpsQ=
Subject key identifier: 49:A8:94:7C:86:50:B0:BB:34:74:EE:01:C7:CF:41:C7:68:8D:51:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6179246CDE911EF89BB4A80762E951A.roa
Signing time: Wed 08 Jan 2025 17:55:41 +0000
ROA not before: Wed 08 Jan 2025 17:55:37 +0000
ROA not after: Sat 03 Jan 2026 17:55:37 +0000
asID: 984
IP address blocks: 154.89.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79871 (0x137ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 17:55:37 2025 GMT
Not After : Jan 3 17:55:37 2026 GMT
Subject: CN=677ebc1d-ebb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:69:9c:e8:e2:8b:aa:43:79:a1:33:19:fa:80:
54:4d:c3:63:32:1f:45:eb:10:bc:17:5f:bd:75:45:
87:cc:e8:93:4e:36:f7:c9:a4:9d:08:bf:97:b6:a9:
53:96:50:ce:1d:64:8c:52:0d:f3:e1:14:be:ef:06:
e6:a1:bc:cc:04:fd:4b:b0:05:fd:01:b2:2d:09:db:
c5:7d:61:5f:ab:3f:2d:10:45:49:0f:2e:77:18:61:
4e:66:c3:c6:d2:d4:c3:7c:7c:cf:eb:5d:e5:0a:d7:
63:39:2c:e6:66:c4:ba:c1:8f:65:41:e1:8a:f5:ea:
02:00:30:b5:ea:84:66:b2:12:3e:0e:ac:b4:41:a5:
ba:a1:ae:28:34:f2:9b:12:78:e0:d4:64:b6:bb:6b:
d9:02:52:7d:ed:d7:c9:18:2f:04:57:29:bb:da:31:
ca:6c:7a:d4:e7:ca:5a:07:4c:9e:eb:5d:70:8a:5d:
b2:ae:51:41:6d:c0:34:7b:cc:94:9a:f1:ac:45:7d:
c6:88:9b:2a:d7:35:d4:67:e9:e1:a3:f8:c2:bd:cc:
57:22:29:d2:25:ac:5c:ab:f5:1b:28:20:88:01:5c:
c5:96:2d:68:1d:d6:ef:21:9b:cb:2a:cb:6b:1d:66:
5e:d0:9a:ef:2a:38:3c:f3:39:b7:cd:e5:15:17:bb:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A8:94:7C:86:50:B0:BB:34:74:EE:01:C7:CF:41:C7:68:8D:51:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6179246CDE911EF89BB4A80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.206.0/24
Signature Algorithm: sha256WithRSAEncryption
21:fa:99:5e:cd:c3:59:56:f9:2c:9e:32:94:4d:f3:5c:83:28:
58:d3:d0:27:c8:a4:03:fa:d9:8e:2e:ae:df:bb:2e:04:aa:10:
93:79:c1:0e:83:67:7e:40:b6:59:c6:bc:ec:5c:78:93:45:e3:
6c:3d:41:c7:70:4a:2e:17:ab:88:44:19:40:5c:d9:9f:f1:48:
e3:40:97:e6:44:7f:ff:57:e6:55:18:1d:ff:14:26:d6:a4:e2:
0f:46:42:5a:2b:ad:ea:d8:af:62:1e:bf:31:5a:cb:5c:22:50:
28:05:6a:38:bd:96:2e:46:ae:1f:57:57:c4:75:67:86:8f:49:
cf:5f:45:54:7c:a8:0c:50:66:3d:07:8c:72:ca:a0:bf:a7:f8:
82:b8:4b:57:9b:82:21:00:d0:07:81:54:b1:52:ac:3f:ed:f6:
1b:74:4b:dd:a4:c5:5a:3a:4a:b1:dd:3e:a2:f3:f6:08:e7:51:
e8:2d:58:ee:58:84:bd:c9:2e:34:a2:06:3c:3d:b2:3d:2c:a5:
a3:52:cb:65:27:2f:05:01:8a:e0:ef:e0:d2:80:e5:e5:9f:c7:
45:48:1e:11:85:e0:94:13:af:4a:a2:2e:d5:fb:84:d8:d3:8c:
cb:5d:8d:2a:05:51:92:2a:75:08:f1:1f:ad:ea:0f:2d:83:1c:
3a:ce:a0:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATf/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA4MTc1NTM3WhcNMjYwMTAzMTc1NTM3WjAYMRYw
FAYDVQQDEw02NzdlYmMxZC1lYmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnGmc6OKLqkN5oTMZ+oBUTcNjMh9F6xC8F1+9dUWHzOiTTjb3yaSdCL+X
tqlTllDOHWSMUg3z4RS+7wbmobzMBP1LsAX9AbItCdvFfWFfqz8tEEVJDy53GGFO
ZsPG0tTDfHzP613lCtdjOSzmZsS6wY9lQeGK9eoCADC16oRmshI+Dqy0QaW6oa4o
NPKbEnjg1GS2u2vZAlJ97dfJGC8EVym72jHKbHrU58paB0ye611wil2yrlFBbcA0
e8yUmvGsRX3GiJsq1zXUZ+nho/jCvcxXIinSJaxcq/UbKCCIAVzFli1oHdbvIZvL
KstrHWZe0JrvKjg88zm3zeUVF7sCqQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEmo
lHyGULC7NHTuAcfPQcdojVEMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNjE3OTI0NkNERTkxMUVGODlCQjRBODA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlnOMA0GCSqGSIb3DQEB
CwUAA4IBAQAh+plezcNZVvksnjKUTfNcgyhY09AnyKQD+tmOLq7fuy4EqhCTecEO
g2d+QLZZxrzsXHiTReNsPUHHcEouF6uIRBlAXNmf8UjjQJfmRH//V+ZVGB3/FCbW
pOIPRkJaK63q2K9iHr8xWstcIlAoBWo4vZYuRq4fV1fEdWeGj0nPX0VUfKgMUGY9
B4xyyqC/p/iCuEtXm4IhANAHgVSxUqw/7fYbdEvdpMVaOkqx3T6i8/YI51HoLVju
WIS9yS40ogY8PbI9LKWjUstlJy8FAYrg7+DSgOXln8dFSB4RheCUE69Koi7V+4TY
04zLXY0qBVGSKnUI8R+t6g8tgxw6zqC3
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:02 2025 by rpki-client