Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11532FECC94211EF9760875D762E951A.roa
File: 11532FECC94211EF9760875D762E951A.roa (raw, json)
Hash identifier: G3f0t621dEO7rF8oURqbN+wFSd6Ci8S7tULoigUqkfs=
Subject key identifier: 15:39:65:B1:CD:F8:B9:ED:84:76:A4:E4:AA:23:DA:F1:87:16:D5:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013431
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11532FECC94211EF9760875D762E951A.roa
Signing time: Thu 02 Jan 2025 19:45:07 +0000
ROA not before: Thu 02 Jan 2025 19:45:03 +0000
ROA not after: Mon 13 Dec 2027 19:45:03 +0000
asID: 17561
IP address blocks: 154.223.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78897 (0x13431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 19:45:03 2025 GMT
Not After : Dec 13 19:45:03 2027 GMT
Subject: CN=6776ecc3-4d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:72:1e:e2:29:2e:4e:6d:52:a0:18:84:30:
bf:26:de:ab:2e:93:c2:3c:3c:dc:f6:f1:b4:ac:02:
b2:ff:4b:e7:7a:d3:99:ea:47:cc:da:51:67:36:c0:
19:38:b6:3e:1b:cf:23:c9:7b:51:63:95:2a:45:90:
e3:2b:75:f4:11:dd:ba:e2:67:be:81:6d:79:73:82:
1a:5d:e2:14:ad:65:6a:af:de:a9:8d:b4:c0:dc:06:
1a:f5:c9:4f:ff:38:e6:8b:99:f5:a2:d5:59:cc:8b:
b9:e2:af:5d:aa:7f:bf:02:6e:43:c8:0f:f8:cd:ce:
a4:e7:8c:67:b1:d1:d1:23:c4:a6:33:6f:65:51:4b:
42:9b:c5:19:e4:a5:3d:11:97:cc:9e:f1:7d:b9:1d:
a4:e7:b3:04:1d:13:6a:4e:3d:fb:e0:b6:d6:8a:1d:
e2:d9:cc:b0:32:b0:92:78:78:e4:07:b3:7a:e2:2f:
a7:7b:2c:b9:bf:8f:c8:63:18:7b:e4:32:10:e3:6a:
0a:75:78:a7:71:7b:8b:1a:9b:e1:b3:0f:aa:92:30:
94:0c:0a:ee:3b:d4:7c:36:99:5c:37:73:bf:e2:8e:
06:22:fc:65:a4:87:95:7f:bc:85:75:24:82:55:83:
21:bb:21:ce:bd:14:31:99:f3:55:ed:22:51:a7:f1:
4a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:39:65:B1:CD:F8:B9:ED:84:76:A4:E4:AA:23:DA:F1:87:16:D5:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11532FECC94211EF9760875D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.255.0/24
Signature Algorithm: sha256WithRSAEncryption
54:75:ba:c0:19:a3:29:07:c7:25:af:5b:6b:f7:d0:f1:a5:d6:
11:c6:b9:47:e9:b7:70:ce:05:68:5f:3d:9b:9a:44:c3:30:60:
d4:ed:38:5b:03:a9:f6:7f:b0:68:ea:3b:6b:5f:fe:44:66:19:
4c:12:f6:51:ca:f4:59:c9:9c:dd:77:19:21:f3:70:9b:9b:ca:
74:72:a6:a7:60:76:c7:a8:bc:ae:f4:43:01:a3:52:0e:a2:ad:
af:8d:ee:fe:55:79:06:90:34:30:ef:bb:fc:17:e6:47:4a:d7:
d9:fe:80:58:d1:f9:5f:cb:bf:02:32:35:2d:7b:c7:8f:9e:fe:
b7:3b:28:89:96:52:08:80:67:b7:ec:2c:2c:5e:39:7b:d0:e0:
cc:45:2c:3c:5d:dc:ed:c7:07:38:b7:a7:db:21:85:06:07:78:
45:d4:aa:43:e4:58:c2:a6:48:9d:57:e0:c3:de:62:0b:cd:4f:
72:27:cf:0c:93:72:b5:bc:4a:f0:06:c5:4b:a2:28:d2:43:da:
ab:72:11:21:78:98:ce:c4:be:39:24:56:75:c1:8f:23:0a:92:
9f:34:d0:0c:ff:d3:d9:4a:8f:22:89:67:41:8b:b6:b0:da:82:
df:d1:cf:c2:de:90:63:b2:dc:30:bc:f2:bd:33:1f:0e:89:dd:
bc:31:8c:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATQxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTk0NTAzWhcNMjcxMjEzMTk0NTAzWjAYMRYw
FAYDVQQDEw02Nzc2ZWNjMy00ZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzDFyHuIpLk5tUqAYhDC/Jt6rLpPCPDzc9vG0rAKy/0vnetOZ6kfM2lFn
NsAZOLY+G88jyXtRY5UqRZDjK3X0Ed264me+gW15c4IaXeIUrWVqr96pjbTA3AYa
9clP/zjmi5n1otVZzIu54q9dqn+/Am5DyA/4zc6k54xnsdHRI8SmM29lUUtCm8UZ
5KU9EZfMnvF9uR2k57MEHRNqTj374LbWih3i2cywMrCSeHjkB7N64i+neyy5v4/I
Yxh75DIQ42oKdXincXuLGpvhsw+qkjCUDAruO9R8NplcN3O/4o4GIvxlpIeVf7yF
dSSCVYMhuyHOvRQxmfNV7SJRp/FK2QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBU5
ZbHN+LnthHak5Koj2vGHFtXhMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMTUzMkZFQ0M5NDIxMUVGOTc2MDg3NUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt//MA0GCSqGSIb3DQEB
CwUAA4IBAQBUdbrAGaMpB8clr1tr99DxpdYRxrlH6bdwzgVoXz2bmkTDMGDU7Thb
A6n2f7Bo6jtrX/5EZhlMEvZRyvRZyZzddxkh83Cbm8p0cqanYHbHqLyu9EMBo1IO
oq2vje7+VXkGkDQw77v8F+ZHStfZ/oBY0flfy78CMjUte8ePnv63OyiJllIIgGe3
7CwsXjl70ODMRSw8Xdztxwc4t6fbIYUGB3hF1KpD5FjCpkidV+DD3mILzU9yJ88M
k3K1vErwBsVLoijSQ9qrchEheJjOxL45JFZ1wY8jCpKfNNAM/9PZSo8iiWdBi7aw
2oLf0c/C3pBjstwwvPK9Mx8Oid28MYxW
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:29 2025 by rpki-client