Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFF1C85CCDD611EF82C88589762E951A.roa
File: DFF1C85CCDD611EF82C88589762E951A.roa (raw, json)
Hash identifier: dyALl7MHJ7YbbA9Q4fi1BsV/jROyczJ28HRhzxZMd08=
Subject key identifier: 93:7A:B6:38:C3:C2:A0:51:AD:16:77:A4:9A:5C:DD:B5:03:11:D5:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013771
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFF1C85CCDD611EF82C88589762E951A.roa
Signing time: Wed 08 Jan 2025 15:40:24 +0000
ROA not before: Wed 08 Jan 2025 15:40:20 +0000
ROA not after: Mon 03 Jan 2028 15:40:20 +0000
asID: 17561
IP address blocks: 154.88.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79729 (0x13771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 15:40:20 2025 GMT
Not After : Jan 3 15:40:20 2028 GMT
Subject: CN=677e9c67-3991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:c2:4b:33:43:61:a1:bd:da:2b:ec:ee:10:
d1:cd:09:e4:a3:cf:08:82:39:c0:01:ba:aa:e5:2f:
95:21:3f:6b:aa:de:e3:94:d1:15:b4:8c:40:25:b5:
34:1e:f2:f3:98:fb:2c:bf:0c:e9:0d:b3:12:79:e6:
81:f8:a6:31:75:52:4d:f7:ca:55:b1:54:c6:b4:cc:
8a:87:e2:62:00:da:bd:01:a2:75:39:bf:a9:6d:10:
58:90:e0:fc:9f:11:58:95:75:ab:36:87:e6:f6:e9:
38:83:0e:e1:58:96:16:74:41:da:15:ee:26:90:3c:
9b:63:c3:c0:64:1b:f0:3b:9f:fe:d8:68:c1:14:be:
a2:9a:52:e5:3b:46:aa:0f:99:1d:78:7b:2b:75:0e:
01:41:df:9a:05:20:f6:0c:e0:a8:98:ca:98:37:2a:
9e:8a:d3:49:20:ca:38:e1:ce:50:e4:43:5c:ea:d6:
a4:b9:47:c1:60:85:fe:18:8b:e9:9c:80:67:25:09:
63:6f:e8:28:4e:7d:99:4f:fe:58:5b:b0:77:dd:87:
7f:18:e5:db:5f:da:5c:2e:f0:94:f3:8d:05:21:25:
49:68:16:c8:49:f7:2e:f1:5f:65:30:71:a4:ed:a2:
80:9b:8b:0d:b9:f1:cd:b8:92:7e:53:df:93:89:c4:
ff:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7A:B6:38:C3:C2:A0:51:AD:16:77:A4:9A:5C:DD:B5:03:11:D5:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFF1C85CCDD611EF82C88589762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.40.0/24
Signature Algorithm: sha256WithRSAEncryption
74:66:38:75:7a:5d:d1:1f:e4:cc:6f:9c:5d:49:69:87:22:05:
99:0e:4d:4c:f2:a3:da:4d:f9:12:c8:8f:9d:44:f9:de:4c:bc:
c2:2d:b6:4c:74:d4:b3:68:0f:22:18:56:c3:c7:06:23:e7:e3:
43:35:de:13:e7:52:ca:6a:6a:a3:96:12:e8:45:cd:34:1e:47:
1d:1b:37:b5:85:93:82:02:6e:49:fc:cf:37:dd:e7:45:e0:f4:
d8:b3:89:11:56:15:21:f6:90:13:fd:2e:48:d6:13:3b:c9:00:
26:18:e7:f1:ff:ba:b9:88:66:a0:6c:d2:28:d2:7d:76:cf:fc:
be:bc:63:70:17:5c:c1:b1:18:b5:9a:46:aa:a3:54:ed:69:4e:
95:fd:08:3d:5b:fb:5e:ee:40:ae:62:4a:87:af:fe:a1:90:a4:
aa:36:ce:e3:73:3c:72:05:c2:0d:e9:74:53:db:09:b7:b5:de:
d7:ab:20:a1:05:49:a1:28:65:a0:78:2e:0d:68:e8:af:1f:53:
f4:e6:6f:df:a2:12:b4:fa:7f:0a:46:ce:5c:91:5f:25:4b:06:
40:49:6b:2d:8e:11:5f:4e:89:dc:93:cc:c9:98:ef:37:f1:e4:
b5:5a:e7:cd:3d:65:93:b7:a9:97:5c:b9:b9:da:a0:39:83:6f:
86:a6:34:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATdxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA4MTU0MDIwWhcNMjgwMTAzMTU0MDIwWjAYMRYw
FAYDVQQDEw02NzdlOWM2Ny0zOTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArN7CSzNDYaG92ivs7hDRzQnko88IgjnAAbqq5S+VIT9rqt7jlNEVtIxA
JbU0HvLzmPssvwzpDbMSeeaB+KYxdVJN98pVsVTGtMyKh+JiANq9AaJ1Ob+pbRBY
kOD8nxFYlXWrNofm9uk4gw7hWJYWdEHaFe4mkDybY8PAZBvwO5/+2GjBFL6imlLl
O0aqD5kdeHsrdQ4BQd+aBSD2DOComMqYNyqeitNJIMo44c5Q5ENc6takuUfBYIX+
GIvpnIBnJQljb+goTn2ZT/5YW7B33Yd/GOXbX9pcLvCU840FISVJaBbISfcu8V9l
MHGk7aKAm4sNufHNuJJ+U9+TicT/dwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJN6
tjjDwqBRrRZ3pJpc3bUDEdUaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERkYxQzg1Q0NERDYxMUVGODJDODg1ODk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlgoMA0GCSqGSIb3DQEB
CwUAA4IBAQB0Zjh1el3RH+TMb5xdSWmHIgWZDk1M8qPaTfkSyI+dRPneTLzCLbZM
dNSzaA8iGFbDxwYj5+NDNd4T51LKamqjlhLoRc00HkcdGze1hZOCAm5J/M833edF
4PTYs4kRVhUh9pAT/S5I1hM7yQAmGOfx/7q5iGagbNIo0n12z/y+vGNwF1zBsRi1
mkaqo1TtaU6V/Qg9W/te7kCuYkqHr/6hkKSqNs7jczxyBcIN6XRT2wm3td7XqyCh
BUmhKGWgeC4NaOivH1P05m/fohK0+n8KRs5ckV8lSwZASWstjhFfTonck8zJmO83
8eS1WufNPWWTt6mXXLm52qA5g2+GpjRB
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:03 2025 by rpki-client