Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBE5D4A0C25611EFB68FB359762E951A.roa
File: DBE5D4A0C25611EFB68FB359762E951A.roa (raw, json)
Hash identifier: oZXIqhXgtnmrBS4+JQNVn59v1SQN4Z0YXUwjqRcfhYU=
Subject key identifier: 66:40:B7:83:B1:66:4B:AA:E4:92:25:37:B0:73:85:EA:92:40:B5:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01233B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBE5D4A0C25611EFB68FB359762E951A.roa
Signing time: Wed 25 Dec 2024 00:26:18 +0000
ROA not before: Wed 25 Dec 2024 00:00:15 +0000
ROA not after: Wed 10 Dec 2025 00:00:15 +0000
asID: 984
IP address blocks: 154.199.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74555 (0x1233b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 00:00:15 2024 GMT
Not After : Dec 10 00:00:15 2025 GMT
Subject: CN=676b512a-1330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f5:b5:51:45:2e:bb:62:81:7b:af:12:ec:b8:
f6:e7:73:00:65:d0:d8:5c:15:ad:f9:ec:7d:f2:b3:
2f:11:3e:37:f8:3b:63:a6:e4:d2:32:22:08:64:eb:
70:f2:d5:f3:48:fa:68:14:23:86:e8:e4:a7:2b:96:
21:a3:d4:59:c8:33:09:5a:64:e4:97:bc:a8:b4:d3:
91:37:16:7d:40:31:2b:ab:3b:24:f0:6d:5f:50:47:
cf:42:be:c7:09:dc:6b:f8:84:45:cb:ce:79:be:10:
5d:4c:64:5d:b6:8b:ad:80:18:8b:cd:8c:11:ec:45:
a9:2c:55:fa:9f:d9:e4:0f:db:4c:64:f7:b7:c3:a1:
ab:8b:9d:4e:96:8c:15:4b:2f:ef:c1:bd:1c:59:8d:
0d:b8:41:5d:2c:19:3a:16:12:f1:45:45:0e:7f:63:
95:33:de:21:96:0e:30:3c:a1:c8:e3:1c:34:43:01:
6c:0d:16:97:15:65:69:3a:3d:c5:fa:ca:29:75:5e:
78:c7:a8:68:13:77:ec:d9:6e:0d:c9:77:e4:53:d8:
72:b5:8c:17:4a:17:b4:fd:58:ff:ce:49:4d:68:72:
5f:b1:ba:02:67:57:b5:13:6c:9f:a6:e7:33:18:e2:
a1:e6:20:ef:f5:83:82:f2:54:a9:f0:75:4f:c7:f9:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:40:B7:83:B1:66:4B:AA:E4:92:25:37:B0:73:85:EA:92:40:B5:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBE5D4A0C25611EFB68FB359762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.43.0/24
Signature Algorithm: sha256WithRSAEncryption
71:79:bb:cd:75:31:ef:d6:82:06:40:01:69:43:9d:fb:c8:86:
57:20:05:21:ba:bb:61:cf:e4:f8:60:98:7b:f9:4c:a4:8f:28:
40:0f:7d:02:26:ee:d1:06:e5:0f:ee:ed:8f:54:77:ab:15:66:
9e:89:17:33:bf:16:e4:1c:ab:7f:27:2c:e0:50:db:83:e1:ba:
d8:04:80:70:c9:68:da:22:0a:e5:a3:62:21:b3:fc:cb:c2:26:
ec:8d:75:49:3e:f0:55:a3:fe:d4:b9:7c:3c:a4:6d:de:8a:e0:
6c:40:5f:d9:51:3f:14:54:b6:48:f6:d7:2a:7d:0c:2f:9d:80:
76:c5:56:b0:f1:7e:22:09:cc:df:d4:10:1b:ad:cd:43:17:af:
dd:96:92:c3:a4:e5:74:38:95:2b:c6:0a:7b:e3:de:59:12:fb:
ca:37:c6:33:67:ad:6c:2a:25:c1:eb:af:9f:aa:81:ce:66:06:
3f:0b:5f:78:bf:31:9b:fd:e3:57:c8:a4:1f:74:28:9a:d8:ca:
b8:b7:eb:cf:7a:cf:90:db:a7:fe:c7:b2:70:50:02:ce:57:69:
a6:ae:e1:d1:8a:72:ad:b2:09:16:ee:dd:e2:fc:bc:f7:b2:a5:
48:59:a1:c1:10:4f:ed:00:d1:28:93:20:51:46:8b:0d:09:60:
05:f1:09:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASM7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDAwMDE1WhcNMjUxMjEwMDAwMDE1WjAYMRYw
FAYDVQQDEw02NzZiNTEyYS0xMzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx/W1UUUuu2KBe68S7Lj253MAZdDYXBWt+ex98rMvET43+DtjpuTSMiII
ZOtw8tXzSPpoFCOG6OSnK5Yho9RZyDMJWmTkl7yotNORNxZ9QDErqzsk8G1fUEfP
Qr7HCdxr+IRFy855vhBdTGRdtoutgBiLzYwR7EWpLFX6n9nkD9tMZPe3w6Gri51O
lowVSy/vwb0cWY0NuEFdLBk6FhLxRUUOf2OVM94hlg4wPKHI4xw0QwFsDRaXFWVp
Oj3F+sopdV54x6hoE3fs2W4NyXfkU9hytYwXShe0/Vj/zklNaHJfsboCZ1e1E2yf
puczGOKh5iDv9YOC8lSp8HVPx/nHowIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGZA
t4OxZkuq5JIlN7BzheqSQLV+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQkU1RDRBMEMyNTYxMUVGQjY4RkIzNTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmscrMA0GCSqGSIb3DQEB
CwUAA4IBAQBxebvNdTHv1oIGQAFpQ537yIZXIAUhurthz+T4YJh7+UykjyhAD30C
Ju7RBuUP7u2PVHerFWaeiRczvxbkHKt/JyzgUNuD4brYBIBwyWjaIgrlo2Ihs/zL
wibsjXVJPvBVo/7UuXw8pG3eiuBsQF/ZUT8UVLZI9tcqfQwvnYB2xVaw8X4iCczf
1BAbrc1DF6/dlpLDpOV0OJUrxgp7495ZEvvKN8YzZ61sKiXB66+fqoHOZgY/C194
vzGb/eNXyKQfdCia2Mq4t+vPes+Q26f+x7JwUALOV2mmruHRinKtsgkW7t3i/Lz3
sqVIWaHBEE/tANEokyBRRosNCWAF8QlZ
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:54 2025 by rpki-client