Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9FD3ACECDA511EF858BF155762E951A.roa
File: E9FD3ACECDA511EF858BF155762E951A.roa (raw, json)
Hash identifier: NvcRLJNDb3/RJwFrUEaiDTHVYyZuv1R0rEvg94lcJww=
Subject key identifier: 51:09:47:6D:38:EA:05:FE:28:F7:29:94:25:C4:26:D6:8E:FA:2B:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013698
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9FD3ACECDA511EF858BF155762E951A.roa
Signing time: Wed 08 Jan 2025 09:49:55 +0000
ROA not before: Wed 08 Jan 2025 09:49:51 +0000
ROA not after: Thu 23 Dec 2027 09:49:51 +0000
asID: 17561
IP address blocks: 154.89.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79512 (0x13698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 09:49:51 2025 GMT
Not After : Dec 23 09:49:51 2027 GMT
Subject: CN=677e4a43-c2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:69:c5:ab:3f:2c:45:0f:ab:c1:8a:3c:66:
98:7d:9b:d1:50:cd:3b:f0:bc:1c:ab:0f:a4:b7:38:
d6:09:c6:92:55:e5:1b:b1:fe:d5:4c:1f:76:76:d0:
2c:7b:f8:3d:27:33:b0:07:a2:1b:6e:41:a8:5c:f0:
49:d4:ad:97:d2:13:1f:61:1b:63:7a:36:95:20:fd:
09:c2:0e:6e:f5:a4:2d:3f:87:ab:bf:28:fe:5f:09:
32:f8:0e:ca:98:05:73:d6:05:36:a6:d8:a3:d1:02:
06:8c:ba:7d:17:71:2d:b5:60:74:d0:dc:12:f2:bd:
fa:8b:ff:83:69:47:e0:b1:df:dd:a7:d7:f8:8b:7b:
c5:9e:24:32:45:d9:cf:e7:f8:7a:ca:13:9a:72:40:
af:c5:3e:b5:f2:e1:8b:26:44:5b:e6:f5:02:57:a3:
8c:af:0e:57:86:9d:d9:e3:84:b8:3b:75:dc:50:43:
7c:5a:7c:84:ca:f5:76:29:48:e0:11:2e:40:a1:c4:
e7:a2:10:b9:c1:c7:06:5a:25:1d:a7:25:92:68:62:
21:f9:0f:e4:bc:a2:5c:13:0c:75:2a:4f:25:61:56:
1d:14:53:3f:72:90:d6:09:8b:99:21:f5:87:06:8c:
1e:38:6c:a3:c2:dd:1a:17:d5:5c:83:b9:94:07:ab:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:09:47:6D:38:EA:05:FE:28:F7:29:94:25:C4:26:D6:8E:FA:2B:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9FD3ACECDA511EF858BF155762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.16.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ec:04:ed:a9:07:0d:66:26:37:0c:52:a4:28:0e:83:78:e0:
d1:f8:bf:2a:00:3b:7a:3e:de:f1:f1:cf:79:41:38:36:f7:44:
66:7b:1e:49:48:c2:12:49:bb:99:5d:53:04:86:57:ad:e4:56:
e6:fe:11:ff:45:ee:ce:c1:41:f7:d2:8d:5f:48:35:96:1f:ec:
b7:ca:d0:00:4a:e0:53:1a:e8:10:c9:5d:f3:9d:28:a0:25:ff:
c0:38:67:ab:15:e9:ae:a6:5a:b0:8f:16:5c:95:a1:a3:ca:1c:
5f:a3:33:a2:42:dc:16:24:20:1c:f2:09:5e:c8:2b:e0:15:61:
3a:c0:07:cf:92:46:d0:a6:fd:98:84:be:8d:13:d4:35:57:3b:
4f:df:2c:83:79:84:e1:b7:13:1d:ce:96:d1:30:df:f9:18:35:
5f:1c:79:ca:ed:44:92:04:c9:8e:ff:cb:be:c5:f8:ef:36:8e:
75:81:db:f0:cc:58:72:4a:49:54:3b:41:2e:fb:bb:51:b7:90:
fe:85:3e:7f:1b:7d:55:90:85:81:79:df:b0:a9:71:3d:32:39:
47:32:11:4a:51:0a:a6:2a:ca:d8:6a:1c:e8:4d:1f:d6:9d:67:
f2:b9:3b:27:c5:9a:80:54:a6:09:e7:bc:ed:e7:58:a1:ed:4d:
ef:00:13:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATaYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA4MDk0OTUxWhcNMjcxMjIzMDk0OTUxWjAYMRYw
FAYDVQQDEw02NzdlNGE0My1jMmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt4Vpxas/LEUPq8GKPGaYfZvRUM078Lwcqw+ktzjWCcaSVeUbsf7VTB92
dtAse/g9JzOwB6IbbkGoXPBJ1K2X0hMfYRtjejaVIP0Jwg5u9aQtP4ervyj+Xwky
+A7KmAVz1gU2ptij0QIGjLp9F3EttWB00NwS8r36i/+DaUfgsd/dp9f4i3vFniQy
RdnP5/h6yhOackCvxT618uGLJkRb5vUCV6OMrw5Xhp3Z44S4O3XcUEN8WnyEyvV2
KUjgES5AocTnohC5wccGWiUdpyWSaGIh+Q/kvKJcEwx1Kk8lYVYdFFM/cpDWCYuZ
IfWHBoweOGyjwt0aF9Vcg7mUB6uoIQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFEJ
R2046gX+KPcplCXEJtaO+iuQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FOUZEM0FDRUNEQTUxMUVGODU4QkYxNTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlkQMA0GCSqGSIb3DQEB
CwUAA4IBAQBc7ATtqQcNZiY3DFKkKA6DeODR+L8qADt6Pt7x8c95QTg290Rmex5J
SMISSbuZXVMEhlet5Fbm/hH/Re7OwUH30o1fSDWWH+y3ytAASuBTGugQyV3znSig
Jf/AOGerFemuplqwjxZclaGjyhxfozOiQtwWJCAc8gleyCvgFWE6wAfPkkbQpv2Y
hL6NE9Q1VztP3yyDeYThtxMdzpbRMN/5GDVfHHnK7USSBMmO/8u+xfjvNo51gdvw
zFhySklUO0Eu+7tRt5D+hT5/G31VkIWBed+wqXE9MjlHMhFKUQqmKsrYahzoTR/W
nWfyuTsnxZqAVKYJ57zt51ih7U3vABM5
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:44:50 2025 by rpki-client