Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08A13488C27711EFA4B022BB762E951A.roa
File: 08A13488C27711EFA4B022BB762E951A.roa (raw, json)
Hash identifier: 26Nk5lWNN0dva7uTysUTlfCIZGxpDHAMGHTaLDnMewU=
Subject key identifier: A5:9D:7A:F6:04:9F:FE:88:A1:18:EE:2E:3E:93:AB:96:F9:63:D0:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0124A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08A13488C27711EFA4B022BB762E951A.roa
Signing time: Wed 25 Dec 2024 04:16:37 +0000
ROA not before: Wed 25 Dec 2024 04:16:34 +0000
ROA not after: Wed 10 Dec 2025 04:16:34 +0000
asID: 984
IP address blocks: 154.211.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74918 (0x124a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 04:16:34 2024 GMT
Not After : Dec 10 04:16:34 2025 GMT
Subject: CN=676b8725-ef8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:1e:0a:fa:bb:4d:f4:2e:5b:73:4d:fd:63:
c3:35:a6:0c:b8:9a:8e:2d:6f:07:3a:23:2c:22:ee:
4c:2d:b7:d2:6c:d8:fc:7a:f7:e3:1d:21:ca:f7:80:
d1:e6:23:50:b7:07:ea:2c:67:70:0f:08:5f:47:0c:
55:fc:85:a3:5d:66:8e:b0:62:71:7a:61:80:a4:3e:
d2:b2:8f:23:0b:0e:21:1f:7b:98:8d:23:ab:b2:20:
d4:ee:0a:8c:6f:6b:66:3a:13:3c:2b:26:d9:b1:1d:
4b:65:53:04:b8:94:70:bf:4e:c2:93:63:1e:3b:d2:
41:7d:4d:88:b2:7c:64:31:9b:cc:d2:7b:c5:6f:31:
a7:10:82:82:9a:5d:7d:cb:f8:ae:f9:eb:84:56:8e:
a3:dc:c8:a1:a3:35:27:28:65:6d:71:0c:f2:54:97:
77:59:f3:47:8b:f5:bd:90:4c:50:8a:aa:3e:06:b1:
d4:60:a0:84:c9:f8:cf:83:32:c1:c6:27:43:fe:2a:
64:60:56:05:f4:e9:58:a5:df:b8:fe:9a:77:a0:1f:
eb:e2:73:0a:33:56:d9:b4:2a:c5:61:f7:8c:56:6f:
f9:df:5c:6f:6e:fa:19:59:1a:a2:90:01:b2:ba:fc:
97:3b:33:b0:c6:0b:a8:2a:77:33:e1:4c:e5:0b:a2:
5f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9D:7A:F6:04:9F:FE:88:A1:18:EE:2E:3E:93:AB:96:F9:63:D0:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08A13488C27711EFA4B022BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.240.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:d1:cb:48:55:81:76:c5:08:28:38:e5:45:e3:3a:0d:b5:ba:
02:df:b7:cb:a5:db:01:f4:cd:52:88:24:48:6f:69:30:95:1d:
e8:01:02:0f:5b:77:41:4e:36:04:4a:0c:c5:a3:89:88:b2:a2:
af:3e:c1:26:ef:69:1c:68:0a:bc:79:fc:b6:ba:1b:1a:69:98:
ba:e8:73:a0:f6:87:48:5d:1c:5a:cb:f3:7c:33:7c:fa:b1:3d:
ad:ce:5e:15:bf:65:46:04:18:39:81:8f:24:2e:5b:34:80:e4:
ed:5e:ae:d5:3f:ca:a2:02:a4:bf:75:4b:56:e7:2c:f5:e9:a9:
e9:30:7c:2e:db:7d:f6:61:a3:12:4d:91:1b:e4:73:80:4b:3b:
f3:e5:6c:5d:c2:92:5e:6f:aa:17:2b:9e:e5:e1:da:d4:16:49:
85:c7:aa:38:a0:f1:8a:27:9b:a9:0e:c8:95:24:e6:64:4d:72:
f5:04:d1:80:01:b9:01:75:b4:66:7c:49:35:50:6c:f8:e3:07:
62:5d:ad:df:77:4a:43:e9:04:c0:65:32:da:c5:d4:16:93:2c:
c3:71:8d:68:df:02:b5:52:79:a9:a9:de:53:54:3b:96:d2:51:
69:9c:7f:30:0e:f2:24:7e:a3:76:72:93:89:45:ed:31:1f:1b:
ae:0f:cf:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASSmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDQxNjM0WhcNMjUxMjEwMDQxNjM0WjAYMRYw
FAYDVQQDEw02NzZiODcyNS1lZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuSgeCvq7TfQuW3NN/WPDNaYMuJqOLW8HOiMsIu5MLbfSbNj8evfjHSHK
94DR5iNQtwfqLGdwDwhfRwxV/IWjXWaOsGJxemGApD7Sso8jCw4hH3uYjSOrsiDU
7gqMb2tmOhM8KybZsR1LZVMEuJRwv07Ck2MeO9JBfU2IsnxkMZvM0nvFbzGnEIKC
ml19y/iu+euEVo6j3MihozUnKGVtcQzyVJd3WfNHi/W9kExQiqo+BrHUYKCEyfjP
gzLBxidD/ipkYFYF9OlYpd+4/pp3oB/r4nMKM1bZtCrFYfeMVm/531xvbvoZWRqi
kAGyuvyXOzOwxguoKncz4UzlC6JflQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKWd
evYEn/6IoRjuLj6Tq5b5Y9BfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wOEExMzQ4OEMyNzcxMUVGQTRCMDIyQkI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtPwMA0GCSqGSIb3DQEB
CwUAA4IBAQDM0ctIVYF2xQgoOOVF4zoNtboC37fLpdsB9M1SiCRIb2kwlR3oAQIP
W3dBTjYESgzFo4mIsqKvPsEm72kcaAq8efy2uhsaaZi66HOg9odIXRxay/N8M3z6
sT2tzl4Vv2VGBBg5gY8kLls0gOTtXq7VP8qiAqS/dUtW5yz16anpMHwu2332YaMS
TZEb5HOASzvz5WxdwpJeb6oXK57l4drUFkmFx6o4oPGKJ5upDsiVJOZkTXL1BNGA
AbkBdbRmfEk1UGz44wdiXa3fd0pD6QTAZTLaxdQWkyzDcY1o3wK1Unmpqd5TVDuW
0lFpnH8wDvIkfqN2cpOJRe0xHxuuD8+P
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:23 2025 by rpki-client