Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDE1FE6EC1B211EF82E8654C762E951A.roa
File: CDE1FE6EC1B211EF82E8654C762E951A.roa (raw, json)
Hash identifier: a/zCHi8XShmOEPco+Z85fORsDTIOPiyxdeHvtREQNw0=
Subject key identifier: A4:6A:10:73:2D:51:7C:DB:EB:B8:8A:D7:B0:E3:72:6E:F0:6A:BE:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012189
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDE1FE6EC1B211EF82E8654C762E951A.roa
Signing time: Tue 24 Dec 2024 04:51:57 +0000
ROA not before: Tue 24 Dec 2024 04:51:54 +0000
ROA not after: Wed 10 Dec 2025 04:51:54 +0000
asID: 984
IP address blocks: 154.193.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74121 (0x12189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:51:54 2024 GMT
Not After : Dec 10 04:51:54 2025 GMT
Subject: CN=676a3ded-8d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:96:93:2f:83:36:d7:70:c1:30:86:8e:c8:
86:e5:fd:3e:b0:da:1f:7c:59:80:06:90:8f:d9:3b:
47:c1:e7:75:0d:7a:c0:43:55:4d:f0:4a:d4:57:62:
94:39:1b:a2:2d:c1:c2:58:e1:74:2b:60:84:44:f8:
c6:9e:fa:b8:de:46:57:aa:a8:3d:a4:5f:06:70:4f:
e8:21:a0:45:ec:e5:4e:92:f6:dc:bb:d5:3b:8a:0a:
30:0a:a3:b0:a4:25:87:d0:12:7e:cd:1c:67:ea:ea:
29:15:f1:0b:95:9a:97:13:6f:2f:22:80:a4:b2:59:
5c:ec:b9:a3:d3:88:9c:d9:26:c9:18:2f:67:b6:c1:
a9:a5:54:2d:f8:9e:5d:90:4d:f9:88:db:64:88:8a:
bb:bd:5a:cb:60:02:2a:f3:4f:74:bb:9b:1c:02:4a:
2c:fc:d0:cb:fe:ab:1a:6b:0b:b1:07:d6:d9:87:9c:
23:47:d7:df:c0:8a:32:30:10:55:72:da:a5:a3:c8:
d5:a6:1b:7c:88:b2:b8:e0:40:af:98:d6:da:1e:41:
c5:40:f0:4d:0a:9d:8a:e8:01:3b:cf:6e:8b:e6:55:
ed:68:f1:2b:0c:54:f5:a5:85:77:47:cf:e2:24:37:
7f:ff:c3:46:f4:be:a8:6d:23:7f:32:89:30:4f:27:
c9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6A:10:73:2D:51:7C:DB:EB:B8:8A:D7:B0:E3:72:6E:F0:6A:BE:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDE1FE6EC1B211EF82E8654C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.110.0/24
Signature Algorithm: sha256WithRSAEncryption
34:b2:a7:38:6f:90:7b:c2:1a:0c:b4:00:4f:71:0d:53:d8:0b:
61:81:61:2e:be:4f:ff:fa:23:d1:93:ed:03:41:02:2a:46:7b:
3e:c0:ef:1d:58:87:bd:2b:e9:44:95:16:7b:b1:1b:ad:70:f6:
f1:b4:ce:c3:bd:1a:42:c5:2e:31:05:6a:b5:0b:ce:eb:30:a1:
54:aa:25:2b:d6:e4:1b:b0:f9:a5:2c:5e:19:83:20:4f:64:a8:
78:e2:f4:33:05:e0:30:98:b4:27:15:ed:03:97:7d:c6:de:77:
d5:1c:a6:a8:56:42:d9:e3:36:0f:0c:ce:ba:e3:3b:e6:fe:66:
be:b5:6a:00:a6:94:d7:0b:e8:80:ec:fa:bd:1f:0a:52:da:e4:
87:14:e2:ed:c0:15:09:e0:cb:28:b7:fa:08:a0:73:79:cf:2b:
92:74:b6:58:48:7c:29:55:c2:5c:eb:68:05:1f:9c:34:a2:0e:
4d:2f:04:9d:8d:78:42:90:12:73:c2:ac:f1:bc:73:76:af:9d:
3a:8b:1a:fd:0f:5d:0a:2f:40:ea:02:b2:8c:74:3f:ee:9d:2c:
e4:a1:c0:ee:e1:c3:05:6d:53:73:3a:a1:4f:e9:d4:df:8d:08:
30:ae:f5:64:ca:f9:fa:85:12:cd:f7:01:0d:38:77:61:9c:4f:
78:19:34:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASGJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDQ1MTU0WhcNMjUxMjEwMDQ1MTU0WjAYMRYw
FAYDVQQDEw02NzZhM2RlZC04ZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy7aWky+DNtdwwTCGjsiG5f0+sNoffFmABpCP2TtHwed1DXrAQ1VN8ErU
V2KUORuiLcHCWOF0K2CERPjGnvq43kZXqqg9pF8GcE/oIaBF7OVOkvbcu9U7igow
CqOwpCWH0BJ+zRxn6uopFfELlZqXE28vIoCksllc7Lmj04ic2SbJGC9ntsGppVQt
+J5dkE35iNtkiIq7vVrLYAIq8090u5scAkos/NDL/qsaawuxB9bZh5wjR9ffwIoy
MBBVctqlo8jVpht8iLK44ECvmNbaHkHFQPBNCp2K6AE7z26L5lXtaPErDFT1pYV3
R8/iJDd//8NG9L6obSN/MokwTyfJZwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKRq
EHMtUXzb67iK17Djcm7war50MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DREUxRkU2RUMxQjIxMUVGODJFODY1NEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsFuMA0GCSqGSIb3DQEB
CwUAA4IBAQA0sqc4b5B7whoMtABPcQ1T2AthgWEuvk//+iPRk+0DQQIqRns+wO8d
WIe9K+lElRZ7sRutcPbxtM7DvRpCxS4xBWq1C87rMKFUqiUr1uQbsPmlLF4ZgyBP
ZKh44vQzBeAwmLQnFe0Dl33G3nfVHKaoVkLZ4zYPDM664zvm/ma+tWoAppTXC+iA
7Pq9HwpS2uSHFOLtwBUJ4Msot/oIoHN5zyuSdLZYSHwpVcJc62gFH5w0og5NLwSd
jXhCkBJzwqzxvHN2r506ixr9D10KL0DqArKMdD/unSzkocDu4cMFbVNzOqFP6dTf
jQgwrvVkyvn6hRLN9wENOHdhnE94GTSa
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:39 2025 by rpki-client