Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E619F08CC0CB11EFBF4CF587762E951A.roa
File: E619F08CC0CB11EFBF4CF587762E951A.roa (raw, json)
Hash identifier: AX/kZ607qaRzPOPq03yEE36DBCDXD+/sqRACwSZtQNU=
Subject key identifier: 0F:BA:8B:1A:63:70:1B:BF:B1:DB:E2:06:23:B3:92:D9:D3:4E:C2:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E04
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E619F08CC0CB11EFBF4CF587762E951A.roa
Signing time: Mon 23 Dec 2024 01:19:04 +0000
ROA not before: Mon 23 Dec 2024 01:19:01 +0000
ROA not after: Wed 10 Dec 2025 01:19:01 +0000
asID: 984
IP address blocks: 154.82.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73220 (0x11e04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 01:19:01 2024 GMT
Not After : Dec 10 01:19:01 2025 GMT
Subject: CN=6768ba88-12c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:05:33:02:3b:35:f3:28:2e:e7:18:6f:2d:02:
67:6e:45:3e:22:89:10:f3:6d:46:27:1a:e2:30:39:
bd:df:7b:7b:99:30:24:28:88:4b:5a:3e:d1:94:3c:
0c:aa:44:fa:47:78:2f:fa:2a:3a:f1:c8:77:7b:2c:
13:49:eb:fa:bf:ae:01:bb:2c:ea:11:44:cf:ee:ca:
a4:ea:83:84:2d:d4:5c:d7:03:a8:ca:9d:96:46:29:
d4:2a:7d:aa:18:3d:a4:eb:59:3c:0f:a8:d8:9d:db:
01:68:a3:91:8a:d3:77:94:ea:52:87:76:5c:0d:7b:
9a:fc:8b:55:eb:ee:bc:9c:d9:1d:bc:ed:60:75:72:
55:ca:3e:50:f1:ce:4d:2f:0e:64:24:52:23:5e:c8:
2d:5c:f9:0d:1d:41:df:a4:3d:6e:e0:af:5e:53:09:
56:5a:01:7a:c0:2e:b2:a2:89:df:75:fd:78:a5:df:
9a:68:c6:d8:95:d7:3d:24:ad:90:dd:74:b5:0e:6e:
e1:6c:a4:32:21:27:f1:eb:85:54:31:67:b9:b3:45:
f4:28:c8:81:cc:9b:d7:2d:e5:72:98:02:0b:43:26:
be:41:76:58:46:34:5d:6f:37:42:83:18:2f:1b:4d:
8b:bc:b6:f7:17:2d:6b:3e:c4:43:10:af:c9:60:40:
3f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BA:8B:1A:63:70:1B:BF:B1:DB:E2:06:23:B3:92:D9:D3:4E:C2:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E619F08CC0CB11EFBF4CF587762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.245.0/24
Signature Algorithm: sha256WithRSAEncryption
65:3c:07:62:48:65:53:3e:0d:9c:7a:0e:1a:b2:f0:88:69:9d:
cc:3b:ec:78:48:4b:10:e3:15:6a:a7:a2:7e:c2:4d:14:1e:6a:
5e:4f:ea:e8:49:78:8f:32:21:ff:df:09:71:d3:6d:83:4d:1f:
df:65:9f:7f:a8:78:90:dd:f4:91:34:06:1d:12:f1:a3:c5:36:
f9:07:27:ee:3f:02:e0:16:53:42:e7:66:a5:92:5b:ae:ed:37:
b9:2e:14:d4:ca:80:2e:1d:42:00:d0:98:7c:0f:42:af:d7:74:
cd:14:01:97:e7:83:b9:b1:26:b5:03:69:e7:15:0e:d1:90:d5:
f4:cd:ed:79:b9:2c:8a:3f:7b:a2:ca:92:03:41:77:c0:83:8f:
c0:6b:47:09:e5:3d:8e:62:69:ac:82:1c:75:00:e1:ef:70:96:
05:95:fe:e4:06:3b:30:a9:48:74:52:9e:68:71:cd:de:7f:e5:
51:41:d0:06:bc:a8:34:a0:f2:88:44:40:f3:33:84:6e:be:19:
64:76:1a:20:88:d5:f7:f2:20:e4:48:28:39:b9:f8:2d:f6:4e:
02:ac:d9:84:de:c1:e2:6b:88:5a:22:5d:13:73:f4:01:2b:f2:
4d:b0:7d:cd:e3:71:95:0b:99:c0:62:93:b5:c1:fa:be:a5:69:
4d:63:dd:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR4EMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIzMDExOTAxWhcNMjUxMjEwMDExOTAxWjAYMRYw
FAYDVQQDEw02NzY4YmE4OC0xMmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5QUzAjs18ygu5xhvLQJnbkU+IokQ821GJxriMDm933t7mTAkKIhLWj7R
lDwMqkT6R3gv+io68ch3eywTSev6v64BuyzqEUTP7sqk6oOELdRc1wOoyp2WRinU
Kn2qGD2k61k8D6jYndsBaKORitN3lOpSh3ZcDXua/ItV6+68nNkdvO1gdXJVyj5Q
8c5NLw5kJFIjXsgtXPkNHUHfpD1u4K9eUwlWWgF6wC6yoonfdf14pd+aaMbYldc9
JK2Q3XS1Dm7hbKQyISfx64VUMWe5s0X0KMiBzJvXLeVymAILQya+QXZYRjRdbzdC
gxgvG02LvLb3Fy1rPsRDEK/JYEA/WQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFA+6
ixpjcBu/sdviBiOzktnTTsJmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNjE5RjA4Q0MwQ0IxMUVGQkY0Q0Y1ODc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlL1MA0GCSqGSIb3DQEB
CwUAA4IBAQBlPAdiSGVTPg2ceg4asvCIaZ3MO+x4SEsQ4xVqp6J+wk0UHmpeT+ro
SXiPMiH/3wlx022DTR/fZZ9/qHiQ3fSRNAYdEvGjxTb5ByfuPwLgFlNC52alkluu
7Te5LhTUyoAuHUIA0Jh8D0Kv13TNFAGX54O5sSa1A2nnFQ7RkNX0ze15uSyKP3ui
ypIDQXfAg4/Aa0cJ5T2OYmmsghx1AOHvcJYFlf7kBjswqUh0Up5occ3ef+VRQdAG
vKg0oPKIREDzM4RuvhlkdhogiNX38iDkSCg5ufgt9k4CrNmE3sHia4haIl0Tc/QB
K/JNsH3N43GVC5nAYpO1wfq+pWlNY90B
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:37 2025 by rpki-client