Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE11C4E6BEDC11EF91163C68762E951A.roa
File: DE11C4E6BEDC11EF91163C68762E951A.roa (raw, json)
Hash identifier: bJ5FBYpfhVCVcwWy3eOegrAbZZH/B6nIMJNOi3vYKBk=
Subject key identifier: 85:0D:6B:98:71:98:2C:94:A3:62:74:55:F7:5A:AB:DB:55:C3:23:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE11C4E6BEDC11EF91163C68762E951A.roa
Signing time: Fri 20 Dec 2024 14:15:30 +0000
ROA not before: Fri 20 Dec 2024 14:15:26 +0000
ROA not after: Wed 25 Jun 2025 14:15:26 +0000
asID: 55020
IP address blocks: 154.84.48.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73012 (0x11d34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 14:15:26 2024 GMT
Not After : Jun 25 14:15:26 2025 GMT
Subject: CN=67657c02-d380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:5a:f7:f5:9c:d2:e8:17:e7:6e:39:6a:63:
35:42:e4:73:0b:3e:6e:77:65:b6:67:c6:7d:43:70:
ec:04:ab:e8:a7:27:16:1a:d8:a8:8b:37:98:f6:56:
78:fa:b8:9a:6b:08:54:8e:9b:8d:44:17:94:54:14:
a0:12:b1:5f:f6:89:0d:18:50:fa:b1:c3:d8:27:b6:
b8:cd:95:39:f8:18:45:84:0e:c5:eb:1c:ed:8d:d6:
71:d3:1a:73:3b:67:27:1f:50:fc:95:86:d9:55:d9:
44:c2:97:4f:bb:d0:9a:bf:06:6d:bf:7a:ad:37:71:
12:38:93:b6:e9:e0:46:c2:0d:10:6c:57:64:75:7a:
6b:1e:0c:cc:c5:cc:12:f2:18:1f:31:37:3e:a1:72:
e1:41:1d:1f:e2:e8:94:b7:4b:db:2d:25:d6:e7:58:
0a:09:d8:65:0a:57:b7:65:3b:94:77:b0:7b:ce:9f:
29:63:a0:60:2d:fd:c3:b8:0c:fa:54:50:a0:d9:26:
7d:bc:40:6b:46:6e:42:55:eb:a0:d7:39:90:a4:ef:
a4:e1:b0:37:6f:96:81:88:44:dc:9b:c5:5e:6f:18:
f9:81:d5:1d:cf:02:53:84:2c:7f:d1:26:6d:e8:d9:
4b:a8:a7:59:a1:b2:ff:6a:3c:43:86:fb:06:11:e8:
86:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0D:6B:98:71:98:2C:94:A3:62:74:55:F7:5A:AB:DB:55:C3:23:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE11C4E6BEDC11EF91163C68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.48.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:2a:8a:70:05:61:48:8c:b6:c9:06:74:a5:e8:b3:4e:15:b8:
1b:29:03:05:38:9e:cd:40:ff:de:72:25:13:23:f5:9b:7a:42:
a3:74:d5:e3:94:e1:2a:26:c1:7f:41:6d:03:40:44:ff:d5:bc:
7e:3a:77:8e:9b:76:05:84:b2:34:09:79:0a:1b:14:c0:92:1f:
b5:c3:9e:ec:a6:a1:3a:0d:a5:f1:78:80:23:43:db:eb:71:ff:
0c:9c:be:59:5a:52:3f:61:98:3e:14:01:a0:c0:48:9e:87:60:
ca:74:2b:0f:81:25:be:5b:de:44:c1:db:ee:2b:61:1a:04:8b:
9e:3c:73:03:75:ec:03:95:de:ee:30:6d:1b:c2:7c:fe:69:1f:
d2:8f:c2:f0:8f:ad:3d:19:93:72:ea:07:a6:9b:27:80:a0:50:
dc:d5:7a:66:a5:39:40:a7:9f:4c:50:c5:54:3a:6e:dd:82:99:
f3:f2:08:7d:3a:d0:fb:22:10:92:12:73:8e:54:25:5f:d0:5d:
79:f2:63:04:19:10:3c:41:17:ca:29:2b:84:64:82:2f:3d:76:
79:8c:52:45:02:3c:c6:a5:1a:9f:b4:50:31:fb:d1:e1:cf:14:
4c:85:92:ed:ed:08:15:2b:93:f9:22:f2:4b:38:96:17:ac:38:
67:9f:e4:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR00MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIwMTQxNTI2WhcNMjUwNjI1MTQxNTI2WjAYMRYw
FAYDVQQDEw02NzY1N2MwMi1kMzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwsZa9/Wc0ugX5245amM1QuRzCz5ud2W2Z8Z9Q3DsBKvopycWGtioizeY
9lZ4+riaawhUjpuNRBeUVBSgErFf9okNGFD6scPYJ7a4zZU5+BhFhA7F6xztjdZx
0xpzO2cnH1D8lYbZVdlEwpdPu9CavwZtv3qtN3ESOJO26eBGwg0QbFdkdXprHgzM
xcwS8hgfMTc+oXLhQR0f4uiUt0vbLSXW51gKCdhlCle3ZTuUd7B7zp8pY6BgLf3D
uAz6VFCg2SZ9vEBrRm5CVeug1zmQpO+k4bA3b5aBiETcm8Vebxj5gdUdzwJThCx/
0SZt6NlLqKdZobL/ajxDhvsGEeiGNwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIUN
a5hxmCyUo2J0Vfdaq9tVwyMaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERTExQzRFNkJFREMxMUVGOTExNjNDNjg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlQwMA0GCSqGSIb3DQEB
CwUAA4IBAQCuKopwBWFIjLbJBnSl6LNOFbgbKQMFOJ7NQP/eciUTI/WbekKjdNXj
lOEqJsF/QW0DQET/1bx+OneOm3YFhLI0CXkKGxTAkh+1w57spqE6DaXxeIAjQ9vr
cf8MnL5ZWlI/YZg+FAGgwEieh2DKdCsPgSW+W95EwdvuK2EaBIuePHMDdewDld7u
MG0bwnz+aR/Sj8Lwj609GZNy6gemmyeAoFDc1XpmpTlAp59MUMVUOm7dgpnz8gh9
OtD7IhCSEnOOVCVf0F158mMEGRA8QRfKKSuEZIIvPXZ5jFJFAjzGpRqftFAx+9Hh
zxRMhZLt7QgVK5P5IvJLOJYXrDhnn+TW
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:48 2025 by rpki-client