Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11325736C60411EF9AB51DBE762E951A.roa
File: 11325736C60411EF9AB51DBE762E951A.roa (raw, json)
Hash identifier: MYZLLzkO+q5v1oM0/IlOWrzTlZXyNXTSuwZyoA1jZcM=
Subject key identifier: DB:66:1D:D8:7F:74:2D:68:31:54:22:BA:71:97:67:86:A4:B6:29:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11325736C60411EF9AB51DBE762E951A.roa
Signing time: Sun 29 Dec 2024 16:43:44 +0000
ROA not before: Sun 29 Dec 2024 16:43:41 +0000
ROA not after: Sun 12 Dec 2027 16:43:41 +0000
asID: 17561
IP address blocks: 154.217.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77432 (0x12e78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 16:43:41 2024 GMT
Not After : Dec 12 16:43:41 2027 GMT
Subject: CN=67717c40-ba4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:85:d1:b7:00:f1:c9:f2:d1:1a:db:db:7c:8f:
b8:67:50:25:9d:d4:9f:c7:f7:58:4d:6f:a0:0d:3a:
4e:e8:4d:b8:f8:fb:db:bc:e1:14:f1:3a:90:5a:72:
75:c1:ec:75:4b:04:56:61:64:9b:25:3f:4d:cd:71:
0c:db:1d:1f:16:c9:7a:1a:1d:2e:19:aa:b7:63:42:
9b:de:2c:9a:69:85:95:3e:ff:a6:10:b7:4d:16:03:
86:b7:dc:94:c2:6a:a3:b0:40:de:3d:96:0d:69:a6:
aa:1e:6e:4d:0e:8e:1f:5b:75:d4:e4:a0:0e:58:b7:
12:2f:7b:26:db:f1:cf:f1:15:8e:3b:79:23:17:ba:
e3:29:8b:27:cf:56:fc:e9:a4:ba:34:bb:4b:7c:b8:
62:05:8b:55:d0:6f:43:f6:04:6c:33:62:94:5a:4a:
1e:38:11:da:f5:61:e8:a4:36:b7:f8:5b:96:6e:a5:
d5:b9:de:8f:04:de:8b:3c:49:58:51:fc:6a:8a:82:
7d:31:1c:74:12:39:e0:bd:46:2e:88:75:83:8d:0a:
d8:5b:1f:53:60:5f:5a:5b:40:d6:11:3e:4c:ba:8a:
e0:d6:dd:69:1a:36:d1:cf:7f:5d:46:f7:98:6b:47:
4b:20:f3:da:4e:b1:0a:af:95:a1:04:38:27:0c:a9:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:66:1D:D8:7F:74:2D:68:31:54:22:BA:71:97:67:86:A4:B6:29:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11325736C60411EF9AB51DBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.31.0/24
Signature Algorithm: sha256WithRSAEncryption
14:57:cb:7e:b5:51:30:31:cb:e3:21:b5:38:46:10:38:24:6e:
f1:47:0a:8a:41:c6:c9:70:b9:f8:34:9f:16:ed:b5:31:19:f8:
ba:a3:f2:93:33:b9:f0:d1:a5:63:1e:d3:dc:90:69:5d:83:2c:
32:75:9d:f0:34:60:6a:99:c8:49:a6:a5:56:2e:70:56:f5:ad:
1b:43:2c:d7:3e:92:18:80:9c:34:c4:de:10:2c:79:6c:d1:a8:
b6:24:3a:d7:e5:ac:bf:b1:31:3a:1c:31:28:1e:09:f4:2e:d5:
18:8c:e2:59:54:73:3f:81:85:27:eb:11:41:c0:3c:c6:03:65:
14:57:f8:88:b0:06:c1:f5:d4:ef:5d:c9:0d:3a:c4:d9:1f:e1:
2e:e8:94:53:c9:d1:53:15:8a:fb:93:6e:08:fe:0f:ce:d6:fb:
dc:27:17:47:c4:75:47:f1:a5:0f:7e:e3:8d:fa:9f:e0:b0:4d:
6f:1e:fc:e1:fe:ee:f9:cb:82:30:1c:4e:b1:c5:66:eb:ac:83:
ce:e7:a0:e1:3b:fb:15:cb:f5:f5:c0:42:f5:2d:9d:d7:ca:07:
fb:67:98:df:ac:45:41:44:5d:7f:0a:27:22:57:c6:8b:8c:eb:
9e:31:6c:8e:e0:65:0a:c2:41:97:88:be:86:2c:b1:52:16:ef:
61:e8:62:7c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS54MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTY0MzQxWhcNMjcxMjEyMTY0MzQxWjAYMRYw
FAYDVQQDEw02NzcxN2M0MC1iYTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA84XRtwDxyfLRGtvbfI+4Z1AlndSfx/dYTW+gDTpO6E24+PvbvOEU8TqQ
WnJ1wex1SwRWYWSbJT9NzXEM2x0fFsl6Gh0uGaq3Y0Kb3iyaaYWVPv+mELdNFgOG
t9yUwmqjsEDePZYNaaaqHm5NDo4fW3XU5KAOWLcSL3sm2/HP8RWOO3kjF7rjKYsn
z1b86aS6NLtLfLhiBYtV0G9D9gRsM2KUWkoeOBHa9WHopDa3+FuWbqXVud6PBN6L
PElYUfxqioJ9MRx0EjngvUYuiHWDjQrYWx9TYF9aW0DWET5Muorg1t1pGjbRz39d
RveYa0dLIPPaTrEKr5WhBDgnDKm+/wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNtm
Hdh/dC1oMVQiunGXZ4aktimbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMTMyNTczNkM2MDQxMUVGOUFCNTFEQkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtkfMA0GCSqGSIb3DQEB
CwUAA4IBAQAUV8t+tVEwMcvjIbU4RhA4JG7xRwqKQcbJcLn4NJ8W7bUxGfi6o/KT
M7nw0aVjHtPckGldgywydZ3wNGBqmchJpqVWLnBW9a0bQyzXPpIYgJw0xN4QLHls
0ai2JDrX5ay/sTE6HDEoHgn0LtUYjOJZVHM/gYUn6xFBwDzGA2UUV/iIsAbB9dTv
XckNOsTZH+Eu6JRTydFTFYr7k24I/g/O1vvcJxdHxHVH8aUPfuON+p/gsE1vHvzh
/u75y4IwHE6xxWbrrIPO56DhO/sVy/X1wEL1LZ3Xygf7Z5jfrEVBRF1/CiciV8aL
jOueMWyO4GUKwkGXiL6GLLFSFu9h6GJ8
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:46 2025 by rpki-client