Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E68C5D86C91B11EF921B246C762E951A.roa
File: E68C5D86C91B11EF921B246C762E951A.roa (raw, json)
Hash identifier: SiTsQbdmUlWVnRbv+Wqgu6EP418I8QstOzoNJTRLEps=
Subject key identifier: 0C:94:B5:91:C2:2B:49:26:1C:C5:ED:0F:1A:4A:72:6A:20:D6:76:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013301
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E68C5D86C91B11EF921B246C762E951A.roa
Signing time: Thu 02 Jan 2025 15:11:54 +0000
ROA not before: Thu 02 Jan 2025 15:11:50 +0000
ROA not after: Mon 13 Dec 2027 15:11:50 +0000
asID: 17561
IP address blocks: 154.222.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78593 (0x13301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 15:11:50 2025 GMT
Not After : Dec 13 15:11:50 2027 GMT
Subject: CN=6776acba-87e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:51:70:01:f1:3d:d0:87:af:6c:38:d1:e0:
43:b8:0e:de:c5:85:af:13:fb:e3:13:cf:85:3a:77:
a9:2b:f2:7e:c3:bb:d1:8d:43:ba:c9:ce:58:2a:ca:
98:d9:56:4c:ad:5c:dd:d8:ec:7b:d5:a1:29:4a:cd:
ee:1a:bd:7f:b6:e2:2f:78:e5:59:f9:6d:2b:bb:83:
07:e5:e9:90:b8:69:f9:7e:60:f8:7f:3c:d0:6b:61:
89:8a:7d:48:0e:0d:64:ba:cf:1c:e7:82:4c:fc:70:
c9:6f:f2:7b:0d:91:f6:ba:30:66:3b:78:7d:97:c3:
03:68:06:b0:03:c8:22:4e:2e:4e:d8:c5:af:db:ac:
56:9b:e5:e8:59:68:fd:5c:5b:77:f3:04:f7:e9:a7:
7a:ee:04:63:67:45:09:49:29:3d:89:0c:71:41:e2:
47:10:3c:89:c9:70:68:af:fc:b9:35:77:1d:a2:a1:
54:0f:e6:2d:03:0c:94:a0:bc:44:f8:f8:7b:d2:5d:
34:7e:68:01:79:80:56:9b:1c:b9:13:2c:4f:32:56:
af:af:75:f8:d8:5e:05:3b:be:a4:3e:82:c4:9e:f4:
25:28:f0:70:af:7a:71:81:cd:a3:83:17:44:fe:c4:
09:70:13:a0:cc:fb:bf:42:30:96:45:f3:8d:17:bf:
84:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:94:B5:91:C2:2B:49:26:1C:C5:ED:0F:1A:4A:72:6A:20:D6:76:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E68C5D86C91B11EF921B246C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.69.0/24
Signature Algorithm: sha256WithRSAEncryption
71:82:20:12:00:fb:e3:9d:f9:27:83:d8:e3:99:e2:b9:72:9f:
dc:be:cc:79:aa:2c:1d:9b:83:c5:b4:b2:0e:1a:54:a4:20:d5:
ae:9d:23:32:2a:6c:1d:1e:f3:7b:6a:f9:06:3d:af:bb:9c:2a:
d4:df:6a:eb:77:c9:df:cb:e4:3c:24:dd:18:fc:f0:64:10:c0:
e6:81:7f:66:bc:45:33:c3:39:33:22:b3:0c:65:08:17:55:53:
78:11:d4:24:a9:5a:37:06:20:fc:7e:4a:53:1b:8a:0f:b8:f6:
18:02:9c:58:5c:10:bd:f8:e2:2b:ff:1b:9f:73:f2:0a:68:d5:
55:4a:70:1c:3e:2f:be:62:5c:31:3e:e0:e5:73:c9:6f:aa:0e:
c3:df:19:d7:1f:9e:06:0a:ef:08:d6:af:42:7b:88:51:75:4e:
f8:54:97:31:9b:5c:9b:f0:b5:fc:c8:8d:d0:4e:4d:38:f1:c1:
a7:ff:49:7b:10:c0:c0:73:8b:97:d7:ee:12:e9:a5:26:2d:63:
d8:86:b5:4b:f7:1c:85:1b:b3:9d:aa:d1:89:ca:1a:d0:8f:88:
56:72:f4:2b:c4:11:60:ad:2b:d0:2e:64:61:ef:2e:29:ac:fd:
70:4d:e5:f9:9f:94:58:be:72:a0:9b:94:7a:57:64:b5:6c:99:
c3:aa:eb:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATMBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTUxMTUwWhcNMjcxMjEzMTUxMTUwWjAYMRYw
FAYDVQQDEw02Nzc2YWNiYS04N2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0TtRcAHxPdCHr2w40eBDuA7exYWvE/vjE8+FOnepK/J+w7vRjUO6yc5Y
KsqY2VZMrVzd2Ox71aEpSs3uGr1/tuIveOVZ+W0ru4MH5emQuGn5fmD4fzzQa2GJ
in1IDg1kus8c54JM/HDJb/J7DZH2ujBmO3h9l8MDaAawA8giTi5O2MWv26xWm+Xo
WWj9XFt38wT36ad67gRjZ0UJSSk9iQxxQeJHEDyJyXBor/y5NXcdoqFUD+YtAwyU
oLxE+Ph70l00fmgBeYBWmxy5EyxPMlavr3X42F4FO76kPoLEnvQlKPBwr3pxgc2j
gxdE/sQJcBOgzPu/QjCWRfONF7+E6QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAyU
tZHCK0kmHMXtDxpKcmog1nazMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNjhDNUQ4NkM5MUIxMUVGOTIxQjI0NkM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt5FMA0GCSqGSIb3DQEB
CwUAA4IBAQBxgiASAPvjnfkng9jjmeK5cp/cvsx5qiwdm4PFtLIOGlSkINWunSMy
KmwdHvN7avkGPa+7nCrU32rrd8nfy+Q8JN0Y/PBkEMDmgX9mvEUzwzkzIrMMZQgX
VVN4EdQkqVo3BiD8fkpTG4oPuPYYApxYXBC9+OIr/xufc/IKaNVVSnAcPi++Ylwx
PuDlc8lvqg7D3xnXH54GCu8I1q9Ce4hRdU74VJcxm1yb8LX8yI3QTk048cGn/0l7
EMDAc4uX1+4S6aUmLWPYhrVL9xyFG7OdqtGJyhrQj4hWcvQrxBFgrSvQLmRh7y4p
rP1wTeX5n5RYvnKgm5R6V2S1bJnDqust
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:39 2025 by rpki-client