Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAA9B3E0C1BB11EFAE39F183762E951A.roa
File: DAA9B3E0C1BB11EFAE39F183762E951A.roa (raw, json)
Hash identifier: p4+aEfp4R33iD0Axi9LU7pdKtKLiUkLQTxnkHeosDlM=
Subject key identifier: B6:79:B7:11:88:4F:6E:6B:F7:E5:52:AA:40:0F:DC:B0:5B:00:D2:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121F5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAA9B3E0C1BB11EFAE39F183762E951A.roa
Signing time: Tue 24 Dec 2024 05:56:44 +0000
ROA not before: Tue 24 Dec 2024 05:56:41 +0000
ROA not after: Wed 10 Dec 2025 05:56:41 +0000
asID: 984
IP address blocks: 154.193.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74229 (0x121f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:56:41 2024 GMT
Not After : Dec 10 05:56:41 2025 GMT
Subject: CN=676a4d1c-7e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:10:30:c3:de:ec:9a:db:19:cc:45:78:89:
8c:71:b8:dc:bd:ea:03:ce:07:e2:c5:7c:e6:cb:ea:
6f:40:6a:66:62:c3:e8:17:2a:42:f5:3e:11:2e:68:
ed:75:5e:ce:9f:cd:84:5c:00:a7:42:d5:bc:85:21:
07:93:d1:13:11:ca:b3:83:81:b0:00:90:9b:e1:7c:
9a:9b:c5:fc:1f:f9:ce:4d:c4:6c:87:c4:0b:bb:2e:
2b:a8:ac:70:3b:2d:df:18:ee:be:1d:e9:39:fa:8c:
01:5b:b0:6c:7e:fa:02:5e:a2:15:d9:b5:37:ab:fd:
81:d9:9a:2e:be:91:2f:2a:54:99:48:c0:e3:a5:7c:
15:16:97:d4:2c:4d:78:bc:de:ed:9c:6b:9a:f4:2f:
aa:92:d1:01:84:d1:81:e9:20:71:98:c9:6e:d1:ad:
d0:b8:35:05:a5:0e:5c:08:40:62:e2:af:bb:b7:78:
f9:5d:52:14:f8:c5:e1:41:8a:f7:71:c4:a4:0a:79:
1e:63:55:58:42:45:31:c4:13:1b:43:76:5d:e1:ac:
70:ea:78:8c:b0:bc:eb:bd:af:b6:ad:09:84:7f:a2:
fe:58:fc:ff:cc:d0:b5:11:70:d2:1e:34:e9:06:43:
d0:c7:55:96:46:d1:13:88:eb:44:99:57:c2:d6:ee:
32:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:79:B7:11:88:4F:6E:6B:F7:E5:52:AA:40:0F:DC:B0:5B:00:D2:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAA9B3E0C1BB11EFAE39F183762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.180.0/24
Signature Algorithm: sha256WithRSAEncryption
85:da:6a:81:46:22:a8:06:dc:02:9b:22:8d:3f:21:48:bb:91:
53:99:41:87:95:6a:43:bd:7d:8b:3e:f2:72:da:42:fb:2c:f7:
5d:20:e8:f5:57:27:26:b2:72:65:f2:69:f3:c2:c8:dd:63:79:
f0:bf:66:40:88:85:cf:d2:64:37:ec:c4:8d:f1:0c:f4:ee:63:
35:52:7a:0b:cb:e2:dc:94:1d:5a:e3:68:9d:e3:ca:4d:a9:5b:
52:98:b1:1a:e5:de:29:f3:18:7e:e0:ba:7e:ae:97:db:fc:ed:
a4:a1:fd:9f:ed:59:a8:45:a5:d9:2a:40:12:ae:c4:77:0d:0c:
df:05:c7:aa:b6:db:85:04:07:fb:b2:70:24:1c:11:3c:c1:a0:
61:36:ed:1c:a7:f6:6d:b2:6d:08:37:0f:81:f7:ed:8e:25:8d:
63:16:23:b4:29:1d:5d:de:4b:f8:d5:48:6d:54:6e:13:86:a0:
71:b5:52:f7:18:b2:67:77:dc:88:60:52:bc:4c:9c:b4:77:36:
a8:48:b3:2f:84:2d:93:0c:37:35:87:63:5b:6a:e2:f2:0c:c2:
8e:c4:c7:cc:3c:42:83:62:28:66:d2:c5:64:3c:3a:b5:d0:c8:
71:b2:b4:12:90:7e:29:43:1b:a8:a8:7d:e9:ae:cd:02:3e:f1:
6f:ea:e8:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASH1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDU1NjQxWhcNMjUxMjEwMDU1NjQxWjAYMRYw
FAYDVQQDEw02NzZhNGQxYy03ZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvrsQMMPe7JrbGcxFeImMcbjcveoDzgfixXzmy+pvQGpmYsPoFypC9T4R
LmjtdV7On82EXACnQtW8hSEHk9ETEcqzg4GwAJCb4Xyam8X8H/nOTcRsh8QLuy4r
qKxwOy3fGO6+Hek5+owBW7BsfvoCXqIV2bU3q/2B2ZouvpEvKlSZSMDjpXwVFpfU
LE14vN7tnGua9C+qktEBhNGB6SBxmMlu0a3QuDUFpQ5cCEBi4q+7t3j5XVIU+MXh
QYr3ccSkCnkeY1VYQkUxxBMbQ3Zd4axw6niMsLzrva+2rQmEf6L+WPz/zNC1EXDS
HjTpBkPQx1WWRtETiOtEmVfC1u4ybwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLZ5
txGIT25r9+VSqkAP3LBbANKYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQUE5QjNFMEMxQkIxMUVGQUUzOUYxODM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsG0MA0GCSqGSIb3DQEB
CwUAA4IBAQCF2mqBRiKoBtwCmyKNPyFIu5FTmUGHlWpDvX2LPvJy2kL7LPddIOj1
VycmsnJl8mnzwsjdY3nwv2ZAiIXP0mQ37MSN8Qz07mM1UnoLy+LclB1a42id48pN
qVtSmLEa5d4p8xh+4Lp+rpfb/O2kof2f7VmoRaXZKkASrsR3DQzfBceqttuFBAf7
snAkHBE8waBhNu0cp/Ztsm0INw+B9+2OJY1jFiO0KR1d3kv41UhtVG4ThqBxtVL3
GLJnd9yIYFK8TJy0dzaoSLMvhC2TDDc1h2NbauLyDMKOxMfMPEKDYihm0sVkPDq1
0MhxsrQSkH4pQxuoqH3prs0CPvFv6uiz
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:52 2025 by rpki-client