Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C4E94A2C3D211EF8A0DA04C762E951A.roa
File: 0C4E94A2C3D211EF8A0DA04C762E951A.roa (raw, json)
Hash identifier: eVGRMphyhlF8xhICyCAfdaMcgUrezWIJDm9OPDmLUbg=
Subject key identifier: 53:67:44:47:79:C2:46:4A:1B:C9:0E:7D:A0:5B:09:42:BE:29:28:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01284A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C4E94A2C3D211EF8A0DA04C762E951A.roa
Signing time: Thu 26 Dec 2024 21:40:39 +0000
ROA not before: Thu 26 Dec 2024 21:40:35 +0000
ROA not after: Sun 12 Dec 2027 21:40:35 +0000
asID: 17561
IP address blocks: 154.83.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75850 (0x1284a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:40:35 2024 GMT
Not After : Dec 12 21:40:35 2027 GMT
Subject: CN=676dcd57-4d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e2:71:87:ac:8c:50:57:49:10:8c:82:c7:f4:
56:df:40:f8:ac:ff:20:cd:03:1e:28:7e:2c:3d:90:
b8:2c:08:ba:71:7f:ca:f3:e9:b2:a9:ba:99:3c:81:
05:17:42:cc:32:ca:f4:12:9e:16:6a:39:71:16:74:
77:05:e7:1d:d5:b1:bb:c4:3b:38:f2:f5:a9:a7:2b:
08:74:f0:1f:aa:e7:c9:63:7e:4e:1a:02:97:a5:9f:
7f:8b:95:45:48:52:77:e4:8a:96:34:5a:ac:5b:25:
41:fb:78:56:10:00:16:4d:68:a9:95:3c:ae:28:20:
17:57:e0:1f:b2:07:5b:31:9a:c6:9d:f8:16:f8:e2:
0b:f7:34:12:ee:a0:f9:56:45:20:b8:7e:75:5e:de:
ca:b3:b5:50:71:52:a7:6f:08:7f:ae:1b:a6:02:66:
11:22:c5:40:69:ba:87:6d:a2:e4:7d:3f:42:f7:fb:
20:00:2a:9f:c8:1d:5e:2b:43:bb:81:f5:94:3c:2e:
2b:62:d7:10:6f:3a:ed:37:08:39:55:bc:fc:a7:77:
68:79:83:a5:4e:56:43:d8:2a:29:c6:b1:42:a2:0b:
50:09:20:aa:cb:67:dc:d3:0a:85:04:3f:46:d7:84:
24:18:7c:a6:2f:33:ae:87:6f:0d:aa:1d:95:4d:9f:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:67:44:47:79:C2:46:4A:1B:C9:0E:7D:A0:5B:09:42:BE:29:28:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C4E94A2C3D211EF8A0DA04C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.187.0/24
Signature Algorithm: sha256WithRSAEncryption
22:af:04:d2:87:6e:0b:1c:bd:a4:e5:d8:9a:db:a2:72:14:10:
1d:d9:d0:ae:40:8a:5c:d1:7b:6c:06:59:ec:07:27:ec:ca:66:
be:d5:6d:e4:e2:2c:62:2d:48:a7:5a:9c:0f:70:95:6d:50:53:
a3:f0:85:f8:1b:31:6d:3d:14:cf:7f:c6:aa:82:fc:59:bd:65:
38:f7:b1:e0:5c:7c:2a:20:94:e9:96:94:bf:91:2f:5f:4b:db:
e4:23:59:45:20:43:84:52:0f:f0:b0:f4:6b:f0:66:89:11:86:
5f:66:88:a7:58:9b:c2:96:a8:ce:02:ed:fb:6f:cd:44:9a:86:
b1:89:11:bf:c6:7c:ff:03:3d:13:49:26:26:cb:a8:fe:03:4f:
ed:aa:86:68:70:6a:66:34:15:93:df:6a:c3:f7:fa:83:b8:f7:
4b:c5:da:05:ad:55:d8:52:b7:45:0b:17:6b:da:81:17:43:f8:
56:80:8e:1e:1b:99:c2:70:96:c3:75:7c:98:9a:07:c0:77:64:
9d:35:e0:3a:27:4b:92:36:24:ac:c1:3c:ee:39:1b:73:1b:af:
bd:ef:69:ce:87:0e:a0:52:d4:bf:d6:81:47:67:5f:32:7d:2f:
59:28:6e:52:ea:ad:0a:ab:5d:c4:fb:96:ae:2f:48:67:06:37:
44:71:c6:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAShKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MjE0MDM1WhcNMjcxMjEyMjE0MDM1WjAYMRYw
FAYDVQQDEw02NzZkY2Q1Ny00ZDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq+Jxh6yMUFdJEIyCx/RW30D4rP8gzQMeKH4sPZC4LAi6cX/K8+myqbqZ
PIEFF0LMMsr0Ep4WajlxFnR3Becd1bG7xDs48vWppysIdPAfqufJY35OGgKXpZ9/
i5VFSFJ35IqWNFqsWyVB+3hWEAAWTWiplTyuKCAXV+AfsgdbMZrGnfgW+OIL9zQS
7qD5VkUguH51Xt7Ks7VQcVKnbwh/rhumAmYRIsVAabqHbaLkfT9C9/sgACqfyB1e
K0O7gfWUPC4rYtcQbzrtNwg5Vbz8p3doeYOlTlZD2CopxrFCogtQCSCqy2fc0wqF
BD9G14QkGHymLzOuh28Nqh2VTZ+HrQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFNn
REd5wkZKG8kOfaBbCUK+KSh7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQzRFOTRBMkMzRDIxMUVGOEEwREEwNEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlO7MA0GCSqGSIb3DQEB
CwUAA4IBAQAirwTSh24LHL2k5dia26JyFBAd2dCuQIpc0XtsBlnsByfsyma+1W3k
4ixiLUinWpwPcJVtUFOj8IX4GzFtPRTPf8aqgvxZvWU497HgXHwqIJTplpS/kS9f
S9vkI1lFIEOEUg/wsPRr8GaJEYZfZoinWJvClqjOAu37b81EmoaxiRG/xnz/Az0T
SSYmy6j+A0/tqoZocGpmNBWT32rD9/qDuPdLxdoFrVXYUrdFCxdr2oEXQ/hWgI4e
G5nCcJbDdXyYmgfAd2SdNeA6J0uSNiSswTzuORtzG6+972nOhw6gUtS/1oFHZ18y
fS9ZKG5S6q0Kq13E+5auL0hnBjdEccZs
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:40 2025 by rpki-client