Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C66A2CD6C92F11EF9F58FB68762E951A.roa
File: C66A2CD6C92F11EF9F58FB68762E951A.roa (raw, json)
Hash identifier: ehJMWI98DgmVoLmDTXdErRUrKakWTPVBbCewQSXXEr0=
Subject key identifier: 61:0B:E2:53:27:F2:82:0E:25:1F:80:59:6B:9D:DC:BC:E4:AE:67:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C66A2CD6C92F11EF9F58FB68762E951A.roa
Signing time: Thu 02 Jan 2025 17:34:10 +0000
ROA not before: Thu 02 Jan 2025 17:34:06 +0000
ROA not after: Mon 13 Dec 2027 17:34:06 +0000
asID: 17561
IP address blocks: 154.222.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78753 (0x133a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 17:34:06 2025 GMT
Not After : Dec 13 17:34:06 2027 GMT
Subject: CN=6776ce12-5eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:59:47:a8:de:2e:dd:5b:c8:58:8c:5f:cc:
ce:3a:83:8f:11:69:15:ea:13:e6:42:ca:06:c1:0a:
a2:09:eb:86:a8:88:6b:86:19:21:57:a3:9e:95:b2:
60:70:ca:a2:1a:fa:84:75:33:f1:4b:88:5a:5d:2b:
ee:52:c9:00:6e:f3:7f:cd:c4:cf:33:c2:e8:a5:60:
ca:f0:56:1a:96:d4:87:ae:62:ac:fd:f6:70:db:6d:
30:f5:57:3c:c5:d5:62:bf:39:a8:bc:00:cb:8c:c5:
ee:83:9a:b6:40:59:d6:14:19:b6:45:69:8a:ab:9f:
a8:3c:72:18:04:9b:00:61:4e:21:2c:96:b0:41:83:
d5:a5:92:c3:0c:a0:f5:5e:1b:cd:1e:1f:24:2d:5b:
3a:14:fb:52:8f:6e:17:d4:6b:13:fb:e0:7e:28:6e:
b0:22:ad:9e:e1:01:65:20:e6:f5:40:c8:a2:1a:05:
f9:52:ac:fd:5c:52:3a:b4:6b:7f:44:04:df:ac:37:
c1:74:42:9b:a2:57:04:60:41:a1:87:2c:c6:a2:78:
78:7d:e7:f0:8c:03:b5:df:21:7a:a5:9f:92:66:9c:
89:b8:b5:6c:c8:71:05:8b:27:64:4b:2d:91:1e:22:
ea:16:d9:62:87:f9:2d:f1:4f:df:21:80:61:87:4c:
37:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0B:E2:53:27:F2:82:0E:25:1F:80:59:6B:9D:DC:BC:E4:AE:67:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C66A2CD6C92F11EF9F58FB68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.157.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f2:50:35:53:37:a7:d5:2e:7b:3b:f1:2e:62:09:81:3a:c3:
84:e5:2b:f9:57:66:a4:59:67:ae:b5:98:cf:89:45:cd:25:32:
f1:47:65:ab:05:e9:c5:8f:de:5e:d6:a7:89:91:77:92:bf:6c:
31:b9:fd:14:a8:ac:66:35:e7:15:5a:b4:4f:3e:ab:28:99:b1:
ed:16:90:fe:66:5d:dd:28:76:99:81:88:a3:a5:d8:11:39:f4:
b9:9a:0b:5f:e3:1e:5e:ff:1e:08:98:0f:2b:76:71:e9:c9:85:
61:09:3f:82:43:e4:86:c8:00:a2:98:e2:76:b1:72:96:6c:62:
f3:c8:19:53:46:c9:ef:49:76:65:d6:6c:dd:b8:4f:6f:85:a0:
dd:08:72:0b:21:4d:04:06:df:a6:f0:ef:47:5d:5f:18:b0:d3:
e5:5e:7a:fd:19:dd:b8:47:4e:7c:e9:94:d1:47:41:7b:c3:5f:
61:10:28:d2:b2:fa:fe:49:5c:3f:cd:a0:f9:29:f5:66:2f:32:
68:5e:87:41:68:25:b8:d3:31:bd:f3:42:73:2f:08:c9:2e:a1:
f9:09:39:b7:8c:81:db:02:c3:a1:dd:4d:4b:4b:99:d5:36:a9:
7c:83:16:95:f2:d7:e8:07:5b:11:d7:f5:71:c0:8a:cc:e7:c8:
df:72:2f:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATOhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTczNDA2WhcNMjcxMjEzMTczNDA2WjAYMRYw
FAYDVQQDEw02Nzc2Y2UxMi01ZWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvjpZR6jeLt1byFiMX8zOOoOPEWkV6hPmQsoGwQqiCeuGqIhrhhkhV6Oe
lbJgcMqiGvqEdTPxS4haXSvuUskAbvN/zcTPM8LopWDK8FYaltSHrmKs/fZw220w
9Vc8xdVivzmovADLjMXug5q2QFnWFBm2RWmKq5+oPHIYBJsAYU4hLJawQYPVpZLD
DKD1XhvNHh8kLVs6FPtSj24X1GsT++B+KG6wIq2e4QFlIOb1QMiiGgX5Uqz9XFI6
tGt/RATfrDfBdEKbolcEYEGhhyzGonh4fefwjAO13yF6pZ+SZpyJuLVsyHEFiydk
Sy2RHiLqFtlih/kt8U/fIYBhh0w3FQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGEL
4lMn8oIOJR+AWWud3LzkrmeuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNjZBMkNENkM5MkYxMUVGOUY1OEZCNjg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt6dMA0GCSqGSIb3DQEB
CwUAA4IBAQAF8lA1Uzen1S57O/EuYgmBOsOE5Sv5V2akWWeutZjPiUXNJTLxR2Wr
BenFj95e1qeJkXeSv2wxuf0UqKxmNecVWrRPPqsombHtFpD+Zl3dKHaZgYijpdgR
OfS5mgtf4x5e/x4ImA8rdnHpyYVhCT+CQ+SGyACimOJ2sXKWbGLzyBlTRsnvSXZl
1mzduE9vhaDdCHILIU0EBt+m8O9HXV8YsNPlXnr9Gd24R0586ZTRR0F7w19hECjS
svr+SVw/zaD5KfVmLzJoXodBaCW40zG980JzLwjJLqH5CTm3jIHbAsOh3U1LS5nV
Nql8gxaV8tfoB1sR1/VxwIrM58jfci8s
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:40:01 2025 by rpki-client