Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3435336D57411EFA6C49CB4762E951A.roa
File: E3435336D57411EFA6C49CB4762E951A.roa (raw, json)
Hash identifier: IW6zKnn00/EoSBG2QMCPZuUd1cx3maCN9PIh+d0W6HU=
Subject key identifier: D1:E5:47:4C:98:61:3B:FE:7A:5B:80:B3:7A:A1:9A:A1:A5:AD:82:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3435336D57411EFA6C49CB4762E951A.roa
Signing time: Sat 18 Jan 2025 08:19:08 +0000
ROA not before: Sat 18 Jan 2025 08:19:04 +0000
ROA not after: Sat 22 Feb 2025 08:19:04 +0000
asID: 395886
IP address blocks: 154.89.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81342 (0x13dbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 18 08:19:04 2025 GMT
Not After : Feb 22 08:19:04 2025 GMT
Subject: CN=678b63fc-61dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:83:49:6c:5d:f4:59:f2:5a:29:fd:66:c5:
ad:46:04:2f:87:37:9d:ab:26:c2:4b:a0:97:e6:a0:
10:f0:9d:d5:db:3f:53:c2:ed:7a:b3:de:d7:b1:0b:
6a:d8:16:a4:9e:58:9d:95:3e:ed:eb:16:4e:d5:e7:
3a:02:a5:83:9b:f7:3f:83:d3:22:7e:a1:2a:f0:81:
a7:05:a2:00:c2:a0:36:b2:a1:27:4d:49:85:82:06:
4b:a7:2f:91:9d:2f:68:ab:88:fe:7c:15:b3:bb:0c:
fc:b7:98:8b:41:6e:12:b5:2c:63:f3:5d:fa:09:1d:
ea:59:f3:cc:08:82:36:cb:80:b5:51:b2:a2:50:23:
de:d0:d0:92:fe:52:60:09:22:80:97:eb:9f:1f:e1:
5d:88:d8:cb:20:79:6b:ac:de:77:80:ce:6f:39:fd:
db:75:c2:f4:bb:7c:de:10:2d:9c:e6:13:a5:23:a4:
57:37:e2:8b:df:5a:4d:ae:65:59:48:e1:55:b6:ce:
32:d2:02:56:02:68:f0:6c:4a:94:1c:07:50:c2:5b:
69:88:95:aa:bb:42:b0:e9:9d:30:68:50:64:da:49:
fd:ea:d5:2e:d0:25:3c:80:35:9f:b4:92:86:97:1a:
ce:c0:33:73:9a:d5:0d:8e:09:3e:50:e7:a6:e2:2e:
12:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E5:47:4C:98:61:3B:FE:7A:5B:80:B3:7A:A1:9A:A1:A5:AD:82:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3435336D57411EFA6C49CB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.160.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:5a:c8:72:1f:31:63:a7:52:1d:3f:24:ee:4f:14:56:59:a8:
e1:da:5c:a8:3e:04:b9:4e:a6:1a:c4:12:df:2d:19:19:32:8b:
cc:8a:9f:f6:41:d5:ab:e9:40:c0:e8:2a:9a:a1:52:e5:08:9c:
e8:02:50:97:ac:59:63:70:0d:1b:82:fd:33:f4:80:2d:57:8d:
df:6f:69:f5:72:e5:09:53:e9:3e:bc:94:87:9e:98:a1:41:0f:
5d:93:04:26:c3:9e:00:05:7b:a9:29:05:8e:fd:39:58:d5:3b:
4a:5d:6f:16:5a:b5:0b:ac:1c:77:dd:dc:55:66:c0:00:a2:e0:
af:95:fe:91:6f:aa:48:4c:a7:89:2d:f4:e3:5a:ef:3e:6f:b7:
a2:ac:2b:4d:dc:5e:48:9c:64:1b:a9:9d:88:ac:2a:e7:87:40:
87:be:d6:91:16:ec:af:ad:04:92:9e:f7:46:d3:05:17:6b:6e:
c6:0e:cb:65:f6:98:bd:92:d1:df:81:8f:77:77:e5:b2:19:d2:
cb:09:d0:af:1d:44:37:bd:04:b2:39:16:af:7a:4e:eb:77:e9:
98:f6:58:6a:2d:f9:e5:ca:42:9b:c5:f0:49:d1:87:23:a7:d1:
53:87:eb:e8:15:6a:c4:8e:32:b9:19:b9:06:4d:be:46:f1:2a:
b4:5b:d9:7c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT2+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE4MDgxOTA0WhcNMjUwMjIyMDgxOTA0WjAYMRYw
FAYDVQQDEw02NzhiNjNmYy02MWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArLiDSWxd9FnyWin9ZsWtRgQvhzedqybCS6CX5qAQ8J3V2z9Twu16s97X
sQtq2BaknlidlT7t6xZO1ec6AqWDm/c/g9MifqEq8IGnBaIAwqA2sqEnTUmFggZL
py+RnS9oq4j+fBWzuwz8t5iLQW4StSxj8136CR3qWfPMCII2y4C1UbKiUCPe0NCS
/lJgCSKAl+ufH+FdiNjLIHlrrN53gM5vOf3bdcL0u3zeEC2c5hOlI6RXN+KL31pN
rmVZSOFVts4y0gJWAmjwbEqUHAdQwltpiJWqu0Kw6Z0waFBk2kn96tUu0CU8gDWf
tJKGlxrOwDNzmtUNjgk+UOem4i4StQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNHl
R0yYYTv+eluAs3qhmqGlrYI+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMzQzNTMzNkQ1NzQxMUVGQTZDNDlDQjQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlmgMA0GCSqGSIb3DQEB
CwUAA4IBAQBKWshyHzFjp1IdPyTuTxRWWajh2lyoPgS5TqYaxBLfLRkZMovMip/2
QdWr6UDA6CqaoVLlCJzoAlCXrFljcA0bgv0z9IAtV43fb2n1cuUJU+k+vJSHnpih
QQ9dkwQmw54ABXupKQWO/TlY1TtKXW8WWrULrBx33dxVZsAAouCvlf6Rb6pITKeJ
LfTjWu8+b7eirCtN3F5InGQbqZ2IrCrnh0CHvtaRFuyvrQSSnvdG0wUXa27GDstl
9pi9ktHfgY93d+WyGdLLCdCvHUQ3vQSyORavek7rd+mY9lhqLfnlykKbxfBJ0Ycj
p9FTh+voFWrEjjK5GbkGTb5G8Sq0W9l8
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:18 2025 by rpki-client