Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE59D270C41D11EF94E102BE762E951A.roa
File: FE59D270C41D11EF94E102BE762E951A.roa (raw, json)
Hash identifier: P4n55qE5Jf+Mqq4eBAmmBqvWihGS4FY9fyi6GfXxR6w=
Subject key identifier: 04:53:4E:0F:D1:DD:7D:8B:AB:1A:83:1E:1C:14:EC:7E:43:24:48:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE59D270C41D11EF94E102BE762E951A.roa
Signing time: Fri 27 Dec 2024 06:44:17 +0000
ROA not before: Fri 27 Dec 2024 06:44:14 +0000
ROA not after: Sun 12 Dec 2027 06:44:14 +0000
asID: 17561
IP address blocks: 154.201.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76193 (0x129a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:44:14 2024 GMT
Not After : Dec 12 06:44:14 2027 GMT
Subject: CN=676e4cc1-1729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:92:77:70:99:51:24:3f:c4:b2:fb:d0:71:83:
bb:7a:5f:fd:95:98:60:7f:18:8d:d7:8f:a5:dc:7f:
20:c7:e4:e3:92:56:66:88:ef:4f:fe:a8:78:fe:ad:
32:00:17:49:80:04:ad:1f:4b:ba:16:17:25:b5:d9:
93:dd:ca:0d:81:e5:7d:23:6b:9d:4b:92:4b:e7:23:
6b:5c:3b:50:29:17:c1:09:61:2c:a4:b3:e4:43:09:
8d:51:a4:18:22:f1:8c:3d:d4:89:32:63:95:53:40:
68:c9:a3:39:95:1c:62:f5:a8:7f:47:cf:fd:5e:5f:
f2:fb:d5:1a:09:2a:55:e9:63:c5:0c:1d:6b:33:3a:
a3:8d:6f:18:fd:1b:02:fb:8f:b9:5c:be:34:46:fb:
2f:99:85:a2:7e:40:7e:88:09:ee:9f:aa:78:b8:7a:
98:f2:26:d1:a9:ab:0e:44:f4:46:80:81:64:4e:01:
c6:96:d7:51:30:a1:4d:e4:cf:d0:53:3e:3e:a5:e8:
7b:8c:fa:b7:bf:d4:b2:b9:ee:68:03:17:ed:62:aa:
4a:0c:45:1a:e9:75:31:48:99:e0:fa:71:20:ab:62:
ff:e0:6f:ae:3d:9d:ad:6e:b3:32:43:c4:ae:52:13:
37:c2:b2:60:0f:4c:bd:33:43:76:a4:4f:bb:69:9a:
27:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:53:4E:0F:D1:DD:7D:8B:AB:1A:83:1E:1C:14:EC:7E:43:24:48:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE59D270C41D11EF94E102BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.31.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:75:72:fe:9f:da:f1:0c:9e:93:2d:12:5e:87:93:40:83:d8:
e8:43:bc:cc:02:04:02:90:17:46:e8:5b:ba:23:36:91:41:e4:
98:f0:04:19:89:72:a5:07:d7:aa:3f:75:d2:1b:d3:ef:a3:6b:
56:a3:75:2b:25:51:31:d8:58:56:40:ec:0a:c0:0d:6b:6d:5c:
59:75:c2:84:05:42:33:9d:5b:14:4d:2b:3b:4c:46:36:81:4d:
26:32:c7:ef:e2:4d:a1:54:ca:34:ab:0f:4d:ce:1e:89:21:ad:
72:f6:57:da:15:9a:b4:29:23:c2:7c:86:2c:04:3c:05:df:c7:
91:83:3a:d3:41:20:0b:9b:f7:ca:f6:80:65:f0:00:ef:92:1d:
4f:fd:f3:1e:6a:af:93:c8:8d:8d:63:91:66:bd:e5:14:90:e5:
37:ca:42:85:b9:aa:40:37:c0:79:e3:35:93:4e:ee:08:7a:e3:
c6:4e:5b:77:ef:72:32:86:2a:49:a8:6c:b0:89:8d:9a:f2:12:
d0:8c:bc:4a:9f:4f:5c:13:67:9b:e1:bc:84:af:ca:8c:9f:60:
8b:8b:8c:cd:93:ec:c4:5e:2d:8c:26:4f:42:11:e6:58:f1:e1:
15:d0:a1:f3:26:ea:35:98:5a:44:76:11:79:43:57:04:19:2c:
9a:6c:27:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASmhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDY0NDE0WhcNMjcxMjEyMDY0NDE0WjAYMRYw
FAYDVQQDEw02NzZlNGNjMS0xNzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2JJ3cJlRJD/EsvvQcYO7el/9lZhgfxiN14+l3H8gx+TjklZmiO9P/qh4
/q0yABdJgAStH0u6FhcltdmT3coNgeV9I2udS5JL5yNrXDtQKRfBCWEspLPkQwmN
UaQYIvGMPdSJMmOVU0BoyaM5lRxi9ah/R8/9Xl/y+9UaCSpV6WPFDB1rMzqjjW8Y
/RsC+4+5XL40RvsvmYWifkB+iAnun6p4uHqY8ibRqasORPRGgIFkTgHGltdRMKFN
5M/QUz4+peh7jPq3v9Syue5oAxftYqpKDEUa6XUxSJng+nEgq2L/4G+uPZ2tbrMy
Q8SuUhM3wrJgD0y9M0N2pE+7aZoncwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFART
Tg/R3X2LqxqDHhwU7H5DJEiiMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRTU5RDI3MEM0MUQxMUVGOTRFMTAyQkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmskfMA0GCSqGSIb3DQEB
CwUAA4IBAQBedXL+n9rxDJ6TLRJeh5NAg9joQ7zMAgQCkBdG6Fu6IzaRQeSY8AQZ
iXKlB9eqP3XSG9Pvo2tWo3UrJVEx2FhWQOwKwA1rbVxZdcKEBUIznVsUTSs7TEY2
gU0mMsfv4k2hVMo0qw9Nzh6JIa1y9lfaFZq0KSPCfIYsBDwF38eRgzrTQSALm/fK
9oBl8ADvkh1P/fMeaq+TyI2NY5FmveUUkOU3ykKFuapAN8B54zWTTu4IeuPGTlt3
73IyhipJqGywiY2a8hLQjLxKn09cE2eb4byEr8qMn2CLi4zNk+zEXi2MJk9CEeZY
8eEV0KHzJuo1mFpEdhF5Q1cEGSyabCdx
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:52 2025 by rpki-client