Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC9D94DABEDD11EF818DB46E762E951A.roa
File: EC9D94DABEDD11EF818DB46E762E951A.roa (raw, json)
Hash identifier: aPh8hFzEMBmbEkIAp9VO1SAHLkZICP6K6GgWPIoFKhk=
Subject key identifier: C0:A4:88:76:B6:CA:02:23:9C:88:9A:E6:B6:5D:13:7A:C2:8E:26:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC9D94DABEDD11EF818DB46E762E951A.roa
Signing time: Fri 20 Dec 2024 14:23:04 +0000
ROA not before: Fri 20 Dec 2024 14:23:00 +0000
ROA not after: Wed 25 Jun 2025 14:23:00 +0000
asID: 395886
IP address blocks: 154.84.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73026 (0x11d42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 14:23:00 2024 GMT
Not After : Jun 25 14:23:00 2025 GMT
Subject: CN=67657dc8-aa37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:49:98:4d:dc:bd:76:8d:7c:e2:1d:e9:51:e6:
38:61:14:61:6c:58:7b:38:44:80:e5:68:2c:e6:79:
55:c6:f3:df:ff:d7:b8:b5:fd:22:20:c3:83:13:fd:
83:5b:9f:d1:d9:f4:4d:3f:05:4b:3f:cf:3e:c6:46:
f9:83:0e:ab:a6:2c:8d:9d:be:b7:75:3d:d2:b7:bc:
f7:d7:76:f2:32:c0:10:aa:9a:85:d0:aa:8b:11:bc:
f2:14:cc:ac:8a:79:1c:e6:be:53:7c:51:96:60:73:
f0:1c:62:d8:48:02:30:53:b1:9e:5e:7d:9b:e7:dc:
7e:4a:76:f1:c3:72:a8:03:b1:59:b5:1c:3d:1d:40:
9e:fd:2e:16:b7:b9:63:68:78:b4:fc:db:a2:3e:fc:
f2:aa:ef:d7:56:0f:7e:4b:85:bc:2d:9a:92:f1:2c:
2b:7d:ce:4c:2e:f3:7a:7c:ed:86:42:ec:1d:e7:8b:
22:6e:54:83:9a:7b:2a:c9:d4:b6:c0:04:5c:d4:2c:
5e:c0:59:e3:7d:f8:93:46:01:4b:1d:6d:58:ad:53:
1b:2f:7c:4a:22:b0:ab:c3:84:55:60:32:b3:f4:8f:
32:64:77:01:1c:9f:63:69:d2:8a:1e:05:52:e7:d2:
23:b5:c4:bb:e1:46:99:30:3b:5e:83:6b:45:83:2b:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A4:88:76:B6:CA:02:23:9C:88:9A:E6:B6:5D:13:7A:C2:8E:26:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC9D94DABEDD11EF818DB46E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.32.0/21
Signature Algorithm: sha256WithRSAEncryption
54:de:a5:df:e1:38:4b:16:a6:64:15:ea:1c:46:47:1b:1c:cb:
5d:90:05:21:e2:3a:53:9f:1c:48:10:67:1f:e9:44:57:37:6a:
14:ec:b4:9b:7b:9a:89:26:3f:c0:57:5f:f2:0e:43:9b:b5:76:
51:ef:5c:81:96:3e:f0:16:29:1f:4f:6d:af:b4:67:5b:7d:1f:
20:bb:64:1a:4d:65:5c:53:4b:24:0b:9d:60:b6:02:5e:79:bf:
c2:c9:85:2b:8f:d6:64:50:81:99:c6:3f:8e:0b:d8:4b:8b:fb:
8b:7a:07:d3:8c:15:4a:10:9a:92:3b:ed:ad:03:9e:62:97:0b:
7f:34:a1:05:c9:3e:ac:3c:e5:16:ac:1c:04:ec:96:df:eb:24:
e2:02:9a:7a:9c:06:f7:04:97:2d:61:46:61:2e:51:a2:d5:c1:
a8:8b:6d:42:2e:7c:73:0e:9d:bc:e1:b8:85:74:23:30:e4:36:
7f:27:66:3c:6d:c0:76:26:25:8e:12:e4:b9:ef:da:f0:fa:89:
85:a3:22:29:72:36:f9:cc:fb:6d:07:99:5c:c3:ac:7d:fd:ac:
ad:1d:7e:94:d8:d4:9b:3b:a9:9e:1d:7a:39:b8:60:4c:0b:84:
40:dc:ff:52:55:f6:cc:47:8d:ea:e0:2f:75:1e:bd:21:78:4c:
c3:c6:74:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR1CMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIwMTQyMzAwWhcNMjUwNjI1MTQyMzAwWjAYMRYw
FAYDVQQDEw02NzY1N2RjOC1hYTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0EmYTdy9do184h3pUeY4YRRhbFh7OESA5Wgs5nlVxvPf/9e4tf0iIMOD
E/2DW5/R2fRNPwVLP88+xkb5gw6rpiyNnb63dT3St7z313byMsAQqpqF0KqLEbzy
FMysinkc5r5TfFGWYHPwHGLYSAIwU7GeXn2b59x+Snbxw3KoA7FZtRw9HUCe/S4W
t7ljaHi0/NuiPvzyqu/XVg9+S4W8LZqS8Swrfc5MLvN6fO2GQuwd54siblSDmnsq
ydS2wARc1CxewFnjffiTRgFLHW1YrVMbL3xKIrCrw4RVYDKz9I8yZHcBHJ9jadKK
HgVS59IjtcS74UaZMDteg2tFgyv1+wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMCk
iHa2ygIjnIia5rZdE3rCjiZYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQzlEOTREQUJFREQxMUVGODE4REI0NkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlQgMA0GCSqGSIb3DQEB
CwUAA4IBAQBU3qXf4ThLFqZkFeocRkcbHMtdkAUh4jpTnxxIEGcf6URXN2oU7LSb
e5qJJj/AV1/yDkObtXZR71yBlj7wFikfT22vtGdbfR8gu2QaTWVcU0skC51gtgJe
eb/CyYUrj9ZkUIGZxj+OC9hLi/uLegfTjBVKEJqSO+2tA55ilwt/NKEFyT6sPOUW
rBwE7Jbf6yTiApp6nAb3BJctYUZhLlGi1cGoi21CLnxzDp284biFdCMw5DZ/J2Y8
bcB2JiWOEuS579rw+omFoyIpcjb5zPttB5lcw6x9/aytHX6U2NSbO6meHXo5uGBM
C4RA3P9SVfbMR43q4C91Hr0heEzDxnSL
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:27 2025 by rpki-client