Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00833F4AC62C11EFAC46E0B7762E951A.roa
File: 00833F4AC62C11EFAC46E0B7762E951A.roa (raw, json)
Hash identifier: 8aqe9pQfxs7ost81dnN7rIa7kev5SCgb1/kp3iyt57M=
Subject key identifier: E0:7F:AE:B8:9B:4B:2B:FC:0D:1F:9F:8B:CE:4D:00:14:CB:FD:A6:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00833F4AC62C11EFAC46E0B7762E951A.roa
Signing time: Sun 29 Dec 2024 21:29:36 +0000
ROA not before: Sun 29 Dec 2024 21:29:32 +0000
ROA not after: Sun 12 Dec 2027 21:29:32 +0000
asID: 17561
IP address blocks: 154.217.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77768 (0x12fc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:29:32 2024 GMT
Not After : Dec 12 21:29:32 2027 GMT
Subject: CN=6771bf40-9153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8e:12:62:d6:85:4f:af:46:19:60:90:f6:9a:
19:b9:75:52:8c:7f:f3:db:33:71:52:d9:8c:ce:77:
d5:c2:56:b4:89:df:32:c6:d1:89:ba:df:2d:83:4c:
76:27:61:f8:1c:1b:dd:2b:a2:ce:a0:a4:02:10:38:
78:1f:14:99:d2:c3:22:de:b5:91:f3:c2:21:02:1b:
5f:c5:e0:56:b2:92:93:7f:a3:60:e1:63:01:c1:5e:
f7:4f:91:bd:b8:30:1a:c8:59:69:2b:3c:ca:47:76:
0a:70:34:b7:42:20:a1:d9:16:09:2d:82:38:9f:2c:
29:db:82:7e:c4:86:03:98:52:5d:ed:33:2a:6c:ab:
3c:b9:9f:56:b9:4c:5b:22:ff:8d:81:8c:7d:aa:5a:
08:0c:51:37:16:af:05:b6:85:91:d9:5f:27:ae:7c:
fb:15:c6:68:32:af:97:22:bf:37:e2:3d:ad:f2:1d:
ca:7e:2b:38:fe:5a:c4:93:15:7d:d0:17:02:cb:88:
6b:dc:e8:f6:c8:a3:d3:42:3e:70:1c:29:04:9d:7d:
7e:08:2c:63:cd:30:63:2d:a8:7f:ac:ac:fd:24:38:
ce:b1:5f:eb:84:72:8a:d1:6c:ed:e9:3f:ba:de:3b:
25:5d:1c:d7:c5:62:8a:ed:ad:3f:d6:25:d7:6d:52:
ff:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7F:AE:B8:9B:4B:2B:FC:0D:1F:9F:8B:CE:4D:00:14:CB:FD:A6:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00833F4AC62C11EFAC46E0B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.199.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:64:de:10:45:20:68:e7:2a:c3:f4:3f:86:64:d3:7a:e0:c7:
54:9a:6e:b9:a4:88:1d:98:c1:72:64:70:93:4c:e7:ef:8b:62:
1b:6e:55:e0:e8:4b:9b:11:18:dd:a9:f9:64:04:e6:30:ba:4d:
94:f4:86:55:0c:35:34:d8:8f:01:12:41:8f:5b:5c:0e:6d:32:
14:11:e5:ca:10:57:7f:56:9b:68:e9:c1:ed:56:df:de:35:d8:
97:11:20:c2:8f:fd:3f:5d:b9:f7:a0:28:41:25:28:e2:db:7d:
9d:b4:53:72:99:52:4a:f3:50:a2:81:f7:ef:d6:59:2a:52:a7:
15:11:97:b0:21:6e:fb:19:61:73:36:8e:eb:c8:13:5e:c4:f5:
9c:8f:39:8a:33:44:5d:4b:04:6f:8a:d3:b1:ee:63:10:9f:25:
bc:8c:b5:0a:7d:4a:a7:c5:a3:03:07:d4:23:e7:f1:60:24:83:
6b:da:da:15:86:f3:f8:26:b6:38:73:fe:1d:81:98:a5:5c:af:
b8:88:25:93:e6:dc:2d:b8:ab:4b:b2:6f:ce:ad:c7:9d:f6:ca:
2a:af:32:c8:8d:2e:8f:57:65:cc:cb:59:2d:58:2c:96:23:f7:
d7:e4:d3:38:ae:d4:bd:fc:f3:9e:f2:47:98:1f:56:6d:6a:39:
9e:8c:cb:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS/IMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MjEyOTMyWhcNMjcxMjEyMjEyOTMyWjAYMRYw
FAYDVQQDEw02NzcxYmY0MC05MTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoY4SYtaFT69GGWCQ9poZuXVSjH/z2zNxUtmMznfVwla0id8yxtGJut8t
g0x2J2H4HBvdK6LOoKQCEDh4HxSZ0sMi3rWR88IhAhtfxeBWspKTf6Ng4WMBwV73
T5G9uDAayFlpKzzKR3YKcDS3QiCh2RYJLYI4nywp24J+xIYDmFJd7TMqbKs8uZ9W
uUxbIv+NgYx9qloIDFE3Fq8FtoWR2V8nrnz7FcZoMq+XIr834j2t8h3Kfis4/lrE
kxV90BcCy4hr3Oj2yKPTQj5wHCkEnX1+CCxjzTBjLah/rKz9JDjOsV/rhHKK0Wzt
6T+63jslXRzXxWKK7a0/1iXXbVL/ywIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOB/
rribSyv8DR+fi85NABTL/aaWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMDgzM0Y0QUM2MkMxMUVGQUM0NkUwQjc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtnHMA0GCSqGSIb3DQEB
CwUAA4IBAQCdZN4QRSBo5yrD9D+GZNN64MdUmm65pIgdmMFyZHCTTOfvi2IbblXg
6EubERjdqflkBOYwuk2U9IZVDDU02I8BEkGPW1wObTIUEeXKEFd/Vpto6cHtVt/e
NdiXESDCj/0/Xbn3oChBJSji232dtFNymVJK81Cigffv1lkqUqcVEZewIW77GWFz
No7ryBNexPWcjzmKM0RdSwRvitOx7mMQnyW8jLUKfUqnxaMDB9Qj5/FgJINr2toV
hvP4JrY4c/4dgZilXK+4iCWT5twtuKtLsm/Orced9soqrzLIjS6PV2XMy1ktWCyW
I/fX5NM4rtS9/POe8keYH1ZtajmejMu2
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:55 2025 by rpki-client