Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01C9B098C5F811EF9801B272762E951A.roa
File: 01C9B098C5F811EF9801B272762E951A.roa (raw, json)
Hash identifier: yEJIqVF7dpmP0ia+mE+y5nifq5dDidi09xjaUePukbk=
Subject key identifier: C5:17:A5:8F:AD:B2:71:E9:B6:BB:67:DF:7A:11:26:D3:A1:34:6D:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01C9B098C5F811EF9801B272762E951A.roa
Signing time: Sun 29 Dec 2024 15:17:25 +0000
ROA not before: Sun 29 Dec 2024 15:17:21 +0000
ROA not after: Fri 12 Dec 2025 15:17:21 +0000
asID: 984
IP address blocks: 154.213.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77330 (0x12e12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 15:17:21 2024 GMT
Not After : Dec 12 15:17:21 2025 GMT
Subject: CN=67716804-7f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2b:9f:7c:80:1f:04:46:dd:8f:9d:58:52:49:
be:c8:c2:bd:24:84:cf:8e:e8:0d:2d:d3:fa:40:93:
f1:57:50:5a:52:62:18:ef:66:13:6d:4d:1b:7c:32:
75:2f:52:bb:39:0e:38:ae:fe:d9:60:ae:13:13:96:
ab:91:46:34:d6:b4:5d:a7:aa:67:24:1a:ea:32:19:
a2:e4:b4:a0:5e:89:e1:18:7e:24:03:47:70:13:67:
d5:d8:82:5c:cb:2d:fa:89:36:cc:13:75:2f:94:a0:
be:bf:32:fe:20:68:e5:bf:01:cb:26:06:18:6d:c1:
33:89:00:80:66:2e:e7:c0:8d:f7:5d:d3:26:cc:82:
b7:95:9a:62:9b:77:63:47:6e:94:05:71:96:7f:e2:
6d:ee:ac:07:6e:10:9f:6f:d2:fc:ec:42:51:84:0d:
44:17:97:95:77:23:d9:88:14:de:b5:74:4b:b7:ef:
e0:3e:99:79:12:23:e0:75:b7:e2:f0:02:fb:97:17:
52:a7:15:3f:c4:b6:da:43:cd:5f:48:43:1e:78:54:
1a:52:ca:b4:df:64:bf:41:cd:c3:39:a7:d2:d0:6a:
16:b5:86:7f:0f:79:09:a3:b1:2c:b6:b4:3c:d0:e9:
31:1c:81:47:74:26:a0:15:1f:6f:35:c1:64:23:44:
f9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:17:A5:8F:AD:B2:71:E9:B6:BB:67:DF:7A:11:26:D3:A1:34:6D:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01C9B098C5F811EF9801B272762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.215.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:f9:e8:03:ac:ea:10:9c:b8:5e:75:52:02:80:21:0c:5c:ea:
f0:b7:34:09:56:12:6b:af:3f:cb:5a:90:fb:c6:39:54:9b:3e:
a8:79:da:1c:a3:e1:89:ed:c6:70:1c:51:c5:69:e2:8e:ef:48:
f7:00:0c:44:52:17:39:1d:1a:39:2f:d7:1c:4c:21:d9:54:a0:
ca:c5:d6:19:f6:3b:f9:fb:34:b5:44:a5:62:eb:75:01:63:15:
5c:42:ab:30:5b:4e:d3:f8:72:f9:b6:7c:d9:dd:ab:2a:9c:26:
30:f5:39:6e:e3:fd:99:a5:47:d2:00:c7:4f:34:a3:aa:a7:75:
51:df:79:d3:96:61:31:a9:84:21:98:1a:33:9e:a2:84:da:60:
3b:37:ab:5c:bd:e2:c7:56:f2:c3:26:08:75:6e:29:7e:d1:9c:
1e:c5:d0:83:1d:97:89:2a:d6:f9:de:1d:d9:8e:10:cf:11:58:
2a:3c:83:a9:bd:1a:5b:cb:bf:fa:7a:2f:26:fb:eb:87:09:b8:
ff:79:88:16:fa:ff:0e:ce:93:7e:ce:9d:fd:9e:da:23:76:9e:
4a:14:ec:42:b2:38:f4:ad:f6:da:fc:bf:34:0c:14:e2:06:33:
9d:94:5b:df:7e:55:1c:e7:70:8e:62:64:12:e0:03:73:8a:29:
0f:72:3d:f3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS4SMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTUxNzIxWhcNMjUxMjEyMTUxNzIxWjAYMRYw
FAYDVQQDEw02NzcxNjgwNC03ZjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3CuffIAfBEbdj51YUkm+yMK9JITPjugNLdP6QJPxV1BaUmIY72YTbU0b
fDJ1L1K7OQ44rv7ZYK4TE5arkUY01rRdp6pnJBrqMhmi5LSgXonhGH4kA0dwE2fV
2IJcyy36iTbME3UvlKC+vzL+IGjlvwHLJgYYbcEziQCAZi7nwI33XdMmzIK3lZpi
m3djR26UBXGWf+Jt7qwHbhCfb9L87EJRhA1EF5eVdyPZiBTetXRLt+/gPpl5EiPg
dbfi8AL7lxdSpxU/xLbaQ81fSEMeeFQaUsq032S/Qc3DOafS0GoWtYZ/D3kJo7Es
trQ80OkxHIFHdCagFR9vNcFkI0T5BwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMUX
pY+tsnHptrtn33oRJtOhNG2zMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMUM5QjA5OEM1RjgxMUVGOTgwMUIyNzI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtXXMA0GCSqGSIb3DQEB
CwUAA4IBAQDO+egDrOoQnLhedVICgCEMXOrwtzQJVhJrrz/LWpD7xjlUmz6oedoc
o+GJ7cZwHFHFaeKO70j3AAxEUhc5HRo5L9ccTCHZVKDKxdYZ9jv5+zS1RKVi63UB
YxVcQqswW07T+HL5tnzZ3asqnCYw9Tlu4/2ZpUfSAMdPNKOqp3VR33nTlmExqYQh
mBoznqKE2mA7N6tcveLHVvLDJgh1bil+0ZwexdCDHZeJKtb53h3ZjhDPEVgqPIOp
vRpby7/6ei8m++uHCbj/eYgW+v8OzpN+zp39ntojdp5KFOxCsjj0rfba/L80DBTi
BjOdlFvfflUc53COYmQS4ANziikPcj3z
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:51 2025 by rpki-client