Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF76DB30C3D811EF871D3677762E951A.roa
File: EF76DB30C3D811EF871D3677762E951A.roa (raw, json)
Hash identifier: Jjxh1doejq7A1k67/JUpfsgLCx47CtIoafbOx7Mfy/I=
Subject key identifier: EC:E0:69:82:8C:DE:0E:40:AA:0E:AB:F7:B1:51:E7:E8:7A:2D:D9:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012890
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF76DB30C3D811EF871D3677762E951A.roa
Signing time: Thu 26 Dec 2024 22:29:57 +0000
ROA not before: Thu 26 Dec 2024 22:29:53 +0000
ROA not after: Sun 12 Dec 2027 22:29:53 +0000
asID: 17561
IP address blocks: 154.85.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75920 (0x12890)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:29:53 2024 GMT
Not After : Dec 12 22:29:53 2027 GMT
Subject: CN=676dd8e5-dd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:46:98:fb:7a:44:f5:3f:82:89:b0:40:1c:
fc:a4:d1:26:72:a8:5a:b7:85:36:84:98:72:ea:0d:
ba:dc:01:8b:aa:5a:bf:0a:2a:ff:18:81:58:e8:14:
72:14:a9:a3:e7:90:5e:10:be:50:89:95:60:b7:4a:
99:b4:dc:fa:08:70:38:ec:7d:9a:70:61:da:ad:ee:
11:f2:0a:70:9f:fb:2e:ab:82:2f:68:e2:3c:f1:f2:
e0:87:aa:61:e7:13:44:0c:08:77:b9:4c:16:32:a7:
10:52:cb:94:c4:53:4c:a9:6e:b1:76:94:35:de:a7:
82:92:5f:d9:f0:80:7a:3d:e8:15:3e:fd:82:5b:a4:
98:ab:a8:40:20:6b:b4:3a:fe:cc:4e:23:5c:ba:26:
89:9d:f2:f0:4a:e6:23:bf:f6:c3:56:c9:b7:76:7e:
35:a2:de:57:d1:10:28:a9:c5:c6:95:10:b7:75:31:
28:bd:08:0d:07:12:d9:f6:6a:50:bb:3d:68:a1:6a:
34:7a:da:20:30:e2:40:98:9b:67:23:c0:83:0b:7c:
10:e6:ec:5f:fd:93:fd:6f:d2:97:d4:6c:89:27:5b:
11:3e:56:82:48:f0:b6:53:a9:49:f5:5a:66:b6:e5:
b4:16:c5:53:9f:1c:e1:7d:5b:ac:cf:21:73:b0:f8:
8c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E0:69:82:8C:DE:0E:40:AA:0E:AB:F7:B1:51:E7:E8:7A:2D:D9:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF76DB30C3D811EF871D3677762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.18.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ad:4e:29:58:4a:f6:d4:99:42:31:ad:de:24:9f:08:16:7f:
b2:88:9b:b1:43:2e:86:b2:c6:10:21:3f:ca:43:85:54:f5:91:
20:3b:c1:59:68:af:d7:10:f8:d9:ca:13:84:75:83:a4:5f:e4:
5b:93:9b:44:e6:39:36:99:2c:8a:b3:04:22:3f:35:b3:76:a0:
88:13:c1:f5:1d:b5:86:4e:3b:3b:28:bc:bd:6b:53:da:3d:00:
0a:c1:e6:dc:70:d7:91:9f:a5:55:e9:f2:8e:ed:47:7e:31:d2:
b6:41:b7:16:56:a8:2e:83:52:f1:69:d2:39:56:8b:5c:1d:b7:
46:b1:fe:2c:0e:c5:f9:b0:4c:1c:4d:e5:c0:5c:66:92:fa:f5:
39:f9:6a:70:66:db:3e:16:22:57:e1:1d:a9:7d:61:d7:de:c5:
13:7e:b1:50:3d:5e:9a:9b:b3:3f:78:46:da:8f:f8:6a:e7:94:
41:40:2e:bf:01:42:69:fc:e3:2d:36:f6:e4:3e:30:94:ad:ea:
1d:bc:be:b5:f0:7e:49:7d:44:36:6d:f7:39:b3:dc:c5:8e:56:
25:54:78:b7:d8:46:2c:ac:c1:6e:88:de:28:d5:e7:5b:c0:a7:
e5:8c:dc:ce:c2:58:77:81:6d:16:29:f9:f6:c7:a9:50:eb:f9:
ea:6e:c0:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASiQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MjIyOTUzWhcNMjcxMjEyMjIyOTUzWjAYMRYw
FAYDVQQDEw02NzZkZDhlNS1kZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAswRGmPt6RPU/gomwQBz8pNEmcqhat4U2hJhy6g263AGLqlq/Cir/GIFY
6BRyFKmj55BeEL5QiZVgt0qZtNz6CHA47H2acGHare4R8gpwn/suq4IvaOI88fLg
h6ph5xNEDAh3uUwWMqcQUsuUxFNMqW6xdpQ13qeCkl/Z8IB6PegVPv2CW6SYq6hA
IGu0Ov7MTiNcuiaJnfLwSuYjv/bDVsm3dn41ot5X0RAoqcXGlRC3dTEovQgNBxLZ
9mpQuz1ooWo0etogMOJAmJtnI8CDC3wQ5uxf/ZP9b9KX1GyJJ1sRPlaCSPC2U6lJ
9VpmtuW0FsVTnxzhfVuszyFzsPiMNQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOzg
aYKM3g5Aqg6r97FR5+h6LdmJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRjc2REIzMEMzRDgxMUVGODcxRDM2Nzc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlUSMA0GCSqGSIb3DQEB
CwUAA4IBAQAMrU4pWEr21JlCMa3eJJ8IFn+yiJuxQy6GssYQIT/KQ4VU9ZEgO8FZ
aK/XEPjZyhOEdYOkX+Rbk5tE5jk2mSyKswQiPzWzdqCIE8H1HbWGTjs7KLy9a1Pa
PQAKwebccNeRn6VV6fKO7Ud+MdK2QbcWVqgug1LxadI5VotcHbdGsf4sDsX5sEwc
TeXAXGaS+vU5+WpwZts+FiJX4R2pfWHX3sUTfrFQPV6am7M/eEbaj/hq55RBQC6/
AUJp/OMtNvbkPjCUreodvL618H5JfUQ2bfc5s9zFjlYlVHi32EYsrMFuiN4o1edb
wKfljNzOwlh3gW0WKfn2x6lQ6/nqbsCV
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:04:11 2025 by rpki-client