Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09D30244C51C11EF94C76981762E951A.roa
File: 09D30244C51C11EF94C76981762E951A.roa (raw, json)
Hash identifier: IYcOZCuynGUdfUUTqfCnWbIXMvrqsiXxDaXH2Rl3TXg=
Subject key identifier: 38:DD:54:FB:C7:53:12:F7:B5:0F:39:62:83:F7:3C:61:AB:46:62:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B29
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09D30244C51C11EF94C76981762E951A.roa
Signing time: Sat 28 Dec 2024 13:02:49 +0000
ROA not before: Sat 28 Dec 2024 13:02:45 +0000
ROA not after: Sun 12 Dec 2027 13:02:45 +0000
asID: 17561
IP address blocks: 154.203.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76585 (0x12b29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:02:45 2024 GMT
Not After : Dec 12 13:02:45 2027 GMT
Subject: CN=676ff6f8-f5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:4c:98:c4:c1:89:6c:c6:ba:ac:6e:29:c4:
3a:ad:bb:32:30:18:c7:a6:8a:b9:52:aa:f7:ae:cb:
f3:3c:b6:3a:f4:02:4e:f2:e8:2e:e3:dd:fc:72:d3:
bd:cd:85:a3:51:27:8b:58:f6:e3:d7:82:5a:00:86:
b9:bf:cf:9c:30:22:31:b4:53:e3:38:8b:2f:6e:79:
ca:50:bb:e4:ff:00:7c:8e:fc:8a:59:86:ab:c9:73:
d7:7d:4a:51:a6:1f:97:b0:e4:22:84:89:64:62:eb:
c9:87:04:09:b0:7d:32:c2:a5:ec:17:50:9d:ec:c1:
30:91:97:63:b1:fa:48:ea:d3:28:9b:10:36:bb:bf:
75:ce:47:7f:83:39:33:f5:e9:25:ee:e1:59:55:d3:
cf:c8:5d:3f:77:67:56:09:51:2f:17:5f:0a:e4:7c:
b7:ac:bf:27:28:94:f7:df:bd:41:41:65:71:51:6d:
5c:d7:03:e7:de:39:0b:9c:03:ff:05:fe:b7:7c:af:
e1:31:ad:da:56:01:65:5d:b1:34:1c:7e:94:8c:64:
17:5f:e5:0d:bd:f1:b5:fa:12:2e:22:cb:b0:48:91:
ad:8f:a7:1b:08:b5:bd:03:eb:d0:e9:d5:39:f4:71:
8d:6c:91:3e:02:35:10:95:04:61:60:66:99:c4:05:
1c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DD:54:FB:C7:53:12:F7:B5:0F:39:62:83:F7:3C:61:AB:46:62:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09D30244C51C11EF94C76981762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.32.0/24
Signature Algorithm: sha256WithRSAEncryption
20:a7:1d:98:ac:7d:2d:ba:e4:19:77:0f:48:56:4d:04:7a:f1:
7e:cf:fa:5d:9f:1c:ef:e3:06:55:ce:30:c5:69:f6:9a:52:8a:
f5:08:53:e4:ab:34:63:58:bd:bd:f5:73:b3:fa:be:c7:92:35:
cd:76:43:39:74:6a:b1:75:37:b2:08:4d:25:4e:ce:f3:8a:9a:
c0:17:bb:55:99:f8:ea:eb:58:25:3d:67:57:5e:57:df:1a:46:
14:33:b2:6b:df:23:23:35:62:64:4c:e2:61:2a:64:ca:1d:ae:
97:08:36:c8:d8:e5:de:a9:7d:98:87:d1:6d:3c:fa:97:d9:25:
14:0f:e8:9f:27:c5:01:e3:01:c5:37:c0:b6:9b:9c:df:58:2e:
fa:53:ef:c5:6b:45:95:d6:06:63:20:98:7c:56:01:14:2d:b6:
9a:74:5a:c0:f0:91:0b:06:39:15:e9:61:8d:2e:90:8e:64:ce:
d5:28:7d:9b:2e:ba:a8:4d:bb:4d:2b:31:23:f4:57:10:ab:89:
48:35:42:fc:4b:b8:4e:d6:85:c0:96:ba:a0:3c:c5:88:1f:3a:
2d:33:e5:98:1d:7d:7c:cf:6d:de:3d:f5:59:be:fa:cc:5e:02:
7a:12:79:84:fe:73:18:aa:70:4f:8a:98:5f:d7:3b:98:84:35:
86:0a:59:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASspMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTMwMjQ1WhcNMjcxMjEyMTMwMjQ1WjAYMRYw
FAYDVQQDEw02NzZmZjZmOC1mNWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqqNMmMTBiWzGuqxuKcQ6rbsyMBjHpoq5Uqr3rsvzPLY69AJO8ugu4938
ctO9zYWjUSeLWPbj14JaAIa5v8+cMCIxtFPjOIsvbnnKULvk/wB8jvyKWYaryXPX
fUpRph+XsOQihIlkYuvJhwQJsH0ywqXsF1Cd7MEwkZdjsfpI6tMomxA2u791zkd/
gzkz9ekl7uFZVdPPyF0/d2dWCVEvF18K5Hy3rL8nKJT3371BQWVxUW1c1wPn3jkL
nAP/Bf63fK/hMa3aVgFlXbE0HH6UjGQXX+UNvfG1+hIuIsuwSJGtj6cbCLW9A+vQ
6dU59HGNbJE+AjUQlQRhYGaZxAUcLwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDjd
VPvHUxL3tQ85YoP3PGGrRmIHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wOUQzMDI0NEM1MUMxMUVGOTRDNzY5ODE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmssgMA0GCSqGSIb3DQEB
CwUAA4IBAQAgpx2YrH0tuuQZdw9IVk0EevF+z/pdnxzv4wZVzjDFafaaUor1CFPk
qzRjWL299XOz+r7HkjXNdkM5dGqxdTeyCE0lTs7ziprAF7tVmfjq61glPWdXXlff
GkYUM7Jr3yMjNWJkTOJhKmTKHa6XCDbI2OXeqX2Yh9FtPPqX2SUUD+ifJ8UB4wHF
N8C2m5zfWC76U+/Fa0WV1gZjIJh8VgEULbaadFrA8JELBjkV6WGNLpCOZM7VKH2b
LrqoTbtNKzEj9FcQq4lINUL8S7hO1oXAlrqgPMWIHzotM+WYHX18z23ePfVZvvrM
XgJ6EnmE/nMYqnBPiphf1zuYhDWGCll/
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:39 2025 by rpki-client