Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E14D53B2C54B11EF86F1CFAF762E951A.roa
File: E14D53B2C54B11EF86F1CFAF762E951A.roa (raw, json)
Hash identifier: S07Mrv3zgl/0PUgL+adZmBDIa4fgm3JsGRPQ/uCu5pY=
Subject key identifier: 7E:C6:D0:89:A8:21:F1:C2:56:FC:37:E2:5A:F7:E4:C5:67:0F:B3:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CE1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E14D53B2C54B11EF86F1CFAF762E951A.roa
Signing time: Sat 28 Dec 2024 18:45:17 +0000
ROA not before: Sat 28 Dec 2024 18:45:13 +0000
ROA not after: Sun 12 Dec 2027 18:45:13 +0000
asID: 17561
IP address blocks: 154.209.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77025 (0x12ce1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:45:13 2024 GMT
Not After : Dec 12 18:45:13 2027 GMT
Subject: CN=6770473c-f350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:c7:25:cd:67:40:d2:b1:6e:48:3f:e3:2b:
8c:16:e1:fd:14:fb:ce:21:e0:98:05:aa:ad:9d:73:
f6:45:75:b9:ae:07:78:f2:c1:61:32:c1:9a:f0:bd:
d3:ca:45:28:a1:d2:8f:35:8d:1a:5a:63:83:45:d4:
df:28:7b:42:98:84:fe:3a:2f:d4:51:bc:87:ec:ce:
f4:83:39:e0:03:26:4f:10:fc:61:5c:1e:3e:bf:9c:
be:c3:d5:36:bd:b5:85:eb:59:48:3a:6d:01:7b:4f:
1c:e0:9c:a1:13:e3:d3:a2:04:20:af:be:81:54:2a:
06:f6:9f:d9:b9:f6:37:6f:3c:d0:50:07:83:6a:73:
dd:90:3d:7c:4d:22:26:30:f7:3c:26:49:1b:f8:c5:
4b:83:14:86:98:67:25:a8:5f:66:7c:00:a0:fd:ef:
35:4f:fe:f9:11:3c:3e:7d:16:a6:91:21:0b:d1:c6:
17:59:5c:f9:2b:55:6d:54:55:5c:18:d6:f0:b1:91:
7c:9d:46:7e:de:42:d9:3a:8e:b7:11:47:36:ec:cb:
fe:9f:fa:b7:51:52:3f:53:eb:7d:9e:8e:c3:1c:5b:
7c:ab:71:b0:77:06:6e:dd:07:fe:f2:62:98:c2:5e:
8a:7b:20:0e:57:4d:5d:19:19:98:b3:a9:52:6f:fe:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C6:D0:89:A8:21:F1:C2:56:FC:37:E2:5A:F7:E4:C5:67:0F:B3:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E14D53B2C54B11EF86F1CFAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:14:d8:fb:7a:b3:82:0a:ce:91:9e:7a:a5:4e:5b:4b:19:ff:
ba:bc:83:3b:1a:6d:dc:c7:e4:03:99:98:a8:09:80:bb:30:4b:
26:f0:cb:12:77:08:26:92:3a:6a:39:f7:d3:60:ac:61:36:5d:
df:78:7a:0d:cf:49:5f:4b:70:29:37:ae:b7:e3:96:ca:2f:ff:
e0:15:9e:c7:d4:1b:b2:e9:e7:5c:3f:55:1d:3d:f6:f5:7a:9f:
7e:e2:5c:4b:32:72:13:2f:98:41:38:a6:cd:79:1b:ce:7e:75:
97:34:d6:ab:45:3b:d3:5b:2f:97:47:db:87:2f:5f:57:74:0b:
7e:e7:78:84:c0:9f:df:be:7b:1a:e1:d1:f9:a1:6d:63:9e:91:
52:6e:5b:d7:04:57:01:29:94:d8:b7:99:02:f1:05:cf:a5:67:
67:45:3c:25:34:79:89:4c:d2:0e:15:c5:54:18:2e:6e:69:fd:
bf:ed:3b:f7:0f:20:54:29:22:f2:5a:90:e5:54:1d:92:de:43:
35:b3:58:26:0e:4d:66:43:5d:0f:e3:b4:e6:95:89:65:4e:14:
cb:92:0b:29:97:d2:96:28:1b:bd:25:7e:54:7a:1e:a2:e8:9c:
29:5e:0f:5a:3e:e5:89:e7:73:19:7f:bd:89:05:3a:8a:d2:9b:
00:07:f7:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASzhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTg0NTEzWhcNMjcxMjEyMTg0NTEzWjAYMRYw
FAYDVQQDEw02NzcwNDczYy1mMzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwm/HJc1nQNKxbkg/4yuMFuH9FPvOIeCYBaqtnXP2RXW5rgd48sFhMsGa
8L3TykUoodKPNY0aWmODRdTfKHtCmIT+Oi/UUbyH7M70gzngAyZPEPxhXB4+v5y+
w9U2vbWF61lIOm0Be08c4JyhE+PTogQgr76BVCoG9p/ZufY3bzzQUAeDanPdkD18
TSImMPc8Jkkb+MVLgxSGmGclqF9mfACg/e81T/75ETw+fRamkSEL0cYXWVz5K1Vt
VFVcGNbwsZF8nUZ+3kLZOo63EUc27Mv+n/q3UVI/U+t9no7DHFt8q3GwdwZu3Qf+
8mKYwl6KeyAOV01dGRmYs6lSb/6KCQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFH7G
0ImoIfHCVvw34lr35MVnD7MwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMTRENTNCMkM1NEIxMUVGODZGMUNGQUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtFNMA0GCSqGSIb3DQEB
CwUAA4IBAQA/FNj7erOCCs6RnnqlTltLGf+6vIM7Gm3cx+QDmZioCYC7MEsm8MsS
dwgmkjpqOffTYKxhNl3feHoNz0lfS3ApN66345bKL//gFZ7H1Buy6edcP1UdPfb1
ep9+4lxLMnITL5hBOKbNeRvOfnWXNNarRTvTWy+XR9uHL19XdAt+53iEwJ/fvnsa
4dH5oW1jnpFSblvXBFcBKZTYt5kC8QXPpWdnRTwlNHmJTNIOFcVUGC5uaf2/7Tv3
DyBUKSLyWpDlVB2S3kM1s1gmDk1mQ10P47TmlYllThTLkgspl9KWKBu9JX5Ueh6i
6JwpXg9aPuWJ53MZf72JBTqK0psAB/fo
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:58 2025 by rpki-client