Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8E32C48C0DB11EFAAE2907D762E951A.roa
File: D8E32C48C0DB11EFAAE2907D762E951A.roa (raw, json)
Hash identifier: cdA5DYJnF1Lx0kgQ1g4bgr3cxuMqO983+fRxmucmdgI=
Subject key identifier: 73:FE:2A:56:A9:61:DA:67:E7:01:6F:FE:3D:6C:7C:D6:2C:9A:48:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8E32C48C0DB11EFAAE2907D762E951A.roa
Signing time: Mon 23 Dec 2024 03:13:14 +0000
ROA not before: Mon 23 Dec 2024 03:13:10 +0000
ROA not after: Wed 10 Dec 2025 03:13:10 +0000
asID: 984
IP address blocks: 154.89.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73384 (0x11ea8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:13:10 2024 GMT
Not After : Dec 10 03:13:10 2025 GMT
Subject: CN=6768d54a-c639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ea:36:ec:31:39:c0:5a:ec:37:36:5d:41:88:
c4:67:e7:31:dc:b6:a5:05:0f:5e:0a:a9:ab:dd:2f:
f4:b7:00:a6:5f:9b:77:20:80:b4:1c:82:4a:b2:c7:
12:51:b0:70:b9:06:44:6c:d5:f8:1c:c3:80:f5:d5:
07:8c:2d:9c:b3:29:09:e8:f7:86:74:59:dc:5e:0d:
80:bb:bc:61:80:a7:c2:40:bc:1d:6e:65:6e:d9:7e:
cc:58:0c:1a:72:d6:9e:5c:8d:2e:48:5d:d1:d6:ae:
c4:15:cf:46:3b:41:32:8f:ae:e3:88:1d:7c:5e:84:
8b:ab:96:3d:08:15:a5:c7:ec:e6:c8:bd:a1:3f:72:
e8:3d:23:2f:41:f0:a7:7d:99:a9:cc:d8:4d:7c:05:
46:78:70:0c:3b:ab:82:2c:0d:d7:8b:af:a3:9c:75:
8a:a3:f8:38:60:12:9c:08:11:76:b4:75:68:27:3a:
fc:c7:38:b1:a8:8c:40:88:e4:81:55:a1:aa:78:5b:
5f:c5:da:47:93:95:f0:f4:18:e4:74:09:67:84:12:
df:02:29:ae:6e:87:a0:4c:1f:e1:02:49:12:7b:4f:
9c:46:a4:83:50:05:82:00:d3:4b:0b:a0:5f:99:c8:
a1:0f:4a:ed:81:5e:1a:5c:3f:7e:85:1e:62:8e:79:
2b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FE:2A:56:A9:61:DA:67:E7:01:6F:FE:3D:6C:7C:D6:2C:9A:48:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8E32C48C0DB11EFAAE2907D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.178.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:34:4d:4c:61:81:9c:8a:86:a8:3f:50:82:f7:ee:6b:44:79:
b7:9f:11:a2:88:af:80:02:57:28:10:d5:d8:58:39:4d:73:2b:
14:c3:6c:bc:84:b5:ac:ef:95:6a:c8:84:2c:c7:18:57:d7:2d:
57:b9:56:77:7f:6e:26:7f:81:62:55:91:48:6d:44:91:dc:a4:
ce:20:dc:dc:56:29:7c:3c:99:15:49:f1:f9:34:a4:61:26:87:
b6:d4:62:e4:0b:13:4d:88:a6:1e:cd:d1:7b:67:8b:7e:bc:c2:
9f:7c:f6:7d:f9:11:6f:3f:95:7d:35:bb:20:6b:96:8b:66:1d:
69:1e:3d:1b:23:46:ec:09:64:ca:b1:c1:bb:1e:95:fe:13:36:
02:61:6c:92:ed:ca:96:33:5b:09:95:50:37:fc:3b:5b:1b:32:
66:c8:df:f9:83:1f:c7:b6:60:cf:69:67:df:57:ed:e5:51:74:
9f:72:28:bf:fb:71:f2:04:09:a7:d4:0e:23:67:af:6f:c0:e4:
b7:e7:2f:3d:fc:42:58:de:7f:a8:64:d4:5a:79:e7:b4:de:fa:
14:5e:a5:5b:57:3d:c2:6a:37:a9:b6:3d:76:c8:64:31:b7:fe:
82:24:4c:7e:d6:16:ed:c4:47:3e:ed:3e:fc:bc:9d:97:34:8c:
b3:06:ca:ae
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR6oMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDMxMzEwWhcNMjUxMjEwMDMxMzEwWjAYMRYw
FAYDVQQDEw02NzY4ZDU0YS1jNjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5uo27DE5wFrsNzZdQYjEZ+cx3LalBQ9eCqmr3S/0twCmX5t3IIC0HIJK
sscSUbBwuQZEbNX4HMOA9dUHjC2csykJ6PeGdFncXg2Au7xhgKfCQLwdbmVu2X7M
WAwactaeXI0uSF3R1q7EFc9GO0Eyj67jiB18XoSLq5Y9CBWlx+zmyL2hP3LoPSMv
QfCnfZmpzNhNfAVGeHAMO6uCLA3Xi6+jnHWKo/g4YBKcCBF2tHVoJzr8xzixqIxA
iOSBVaGqeFtfxdpHk5Xw9BjkdAlnhBLfAimuboegTB/hAkkSe0+cRqSDUAWCANNL
C6BfmcihD0rtgV4aXD9+hR5ijnkrRwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHP+
KlapYdpn5wFv/j1sfNYsmkivMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EOEUzMkM0OEMwREIxMUVGQUFFMjkwN0Q3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlmyMA0GCSqGSIb3DQEB
CwUAA4IBAQBvNE1MYYGcioaoP1CC9+5rRHm3nxGiiK+AAlcoENXYWDlNcysUw2y8
hLWs75VqyIQsxxhX1y1XuVZ3f24mf4FiVZFIbUSR3KTOINzcVil8PJkVSfH5NKRh
Joe21GLkCxNNiKYezdF7Z4t+vMKffPZ9+RFvP5V9Nbsga5aLZh1pHj0bI0bsCWTK
scG7HpX+EzYCYWyS7cqWM1sJlVA3/DtbGzJmyN/5gx/HtmDPaWffV+3lUXSfcii/
+3HyBAmn1A4jZ69vwOS35y89/EJY3n+oZNRaeee03voUXqVbVz3Cajeptj12yGQx
t/6CJEx+1hbtxEc+7T78vJ2XNIyzBsqu
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:53 2025 by rpki-client