Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F0AF476C40B11EF852BD849762E951A.roa
File: 1F0AF476C40B11EF852BD849762E951A.roa (raw, json)
Hash identifier: kmhi9Rnx+coyUgU7MqoC1VAOTtz3GnP9zTDGd61VNog=
Subject key identifier: EB:8B:3E:CC:2C:6F:DE:7C:FD:CF:76:F6:54:6D:7F:C2:93:EE:B8:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012915
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F0AF476C40B11EF852BD849762E951A.roa
Signing time: Fri 27 Dec 2024 04:29:12 +0000
ROA not before: Fri 27 Dec 2024 04:29:08 +0000
ROA not after: Fri 12 Dec 2025 04:29:08 +0000
asID: 984
IP address blocks: 154.196.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76053 (0x12915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:29:08 2024 GMT
Not After : Dec 12 04:29:08 2025 GMT
Subject: CN=676e2d17-f66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b0:59:b8:52:fa:a7:6e:75:5f:0a:aa:db:c5:
cc:65:72:d2:9f:3d:89:a2:0f:69:ce:3c:9d:b7:e5:
ae:be:e8:2d:05:0f:8b:4a:c3:b2:17:8d:54:8e:a0:
54:f3:36:54:1a:6b:8d:2f:3c:2a:b3:70:f7:3f:55:
53:d9:db:74:ae:ca:67:1c:74:bd:e3:90:8e:32:7e:
52:4d:40:3e:7e:c6:49:43:1b:c0:6a:71:51:50:ab:
d6:3d:16:e0:04:29:55:c6:38:fa:1f:82:e6:71:cb:
30:e2:0f:f5:7f:b0:52:92:9e:61:1f:2f:8f:46:30:
f4:68:58:94:0c:d0:57:f0:3c:48:c6:5b:59:7f:d0:
71:e5:84:96:72:81:35:bb:fc:85:39:86:bc:97:ab:
16:9f:ec:d9:84:cc:4e:16:72:df:86:d2:41:86:1e:
f9:13:f6:10:7b:6a:87:cc:a6:33:7d:5b:10:bb:0f:
60:04:8f:ea:01:62:fb:b0:6b:53:9b:3f:8c:f8:d4:
26:51:9c:92:9e:c2:c4:3e:ff:bb:bd:82:2e:1f:fc:
2b:e9:4c:c1:36:f8:fd:3e:ab:96:db:26:b0:d0:17:
35:b3:3e:39:42:fe:6b:7a:72:52:19:87:b5:06:a5:
fe:d5:ec:3b:94:c6:6e:b2:4b:04:52:77:33:80:44:
2d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8B:3E:CC:2C:6F:DE:7C:FD:CF:76:F6:54:6D:7F:C2:93:EE:B8:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F0AF476C40B11EF852BD849762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.191.0/24
Signature Algorithm: sha256WithRSAEncryption
11:d3:24:db:a9:ea:2e:7c:b6:1a:de:47:9c:24:fe:d8:c9:e2:
a5:47:95:7f:46:01:18:91:26:06:eb:68:5e:88:8e:12:93:ac:
89:d4:a6:24:a8:4f:94:c7:63:d0:41:3c:fd:cf:e2:17:e8:f6:
85:19:65:ca:05:92:e5:be:bf:7f:9e:1d:6b:9c:04:b1:ec:70:
da:72:53:fa:00:7f:67:6e:51:8f:34:28:d7:49:be:eb:19:2e:
dc:5c:b8:11:d4:71:ad:ba:12:a3:80:ea:69:df:cc:fa:69:38:
2f:9d:05:61:9f:cf:e3:3b:a8:d0:28:b8:cd:4d:2e:2b:d7:15:
ca:2d:eb:26:29:70:4e:38:dc:09:7b:b8:1b:d6:64:81:22:62:
fa:fa:1d:90:5b:ad:a7:02:b5:8a:52:c6:df:11:8d:93:c4:14:
f6:ca:9f:fe:97:26:90:1a:f7:f0:09:3b:41:01:e8:4d:0f:fe:
3a:30:26:34:cb:2b:7e:95:d5:b6:99:e1:71:aa:2b:0b:00:02:
76:c1:e0:b2:0e:18:39:d9:a1:11:af:9d:d4:76:aa:41:ed:c1:
bb:64:6e:60:b4:51:b4:66:a5:df:e5:fd:c3:d9:ae:b8:1e:a5:
b8:f3:ae:13:76:7d:a4:10:d5:85:5b:2b:26:b7:0f:c0:f4:08:
f0:f3:52:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASkVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDQyOTA4WhcNMjUxMjEyMDQyOTA4WjAYMRYw
FAYDVQQDEw02NzZlMmQxNy1mNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1rBZuFL6p251Xwqq28XMZXLSnz2Jog9pzjydt+WuvugtBQ+LSsOyF41U
jqBU8zZUGmuNLzwqs3D3P1VT2dt0rspnHHS945COMn5STUA+fsZJQxvAanFRUKvW
PRbgBClVxjj6H4Lmccsw4g/1f7BSkp5hHy+PRjD0aFiUDNBX8DxIxltZf9Bx5YSW
coE1u/yFOYa8l6sWn+zZhMxOFnLfhtJBhh75E/YQe2qHzKYzfVsQuw9gBI/qAWL7
sGtTmz+M+NQmUZySnsLEPv+7vYIuH/wr6UzBNvj9PquW2yaw0Bc1sz45Qv5renJS
GYe1BqX+1ew7lMZusksEUnczgEQtOwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOuL
Pswsb958/c929lRtf8KT7rhRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRjBBRjQ3NkM0MEIxMUVGODUyQkQ4NDk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsS/MA0GCSqGSIb3DQEB
CwUAA4IBAQAR0yTbqeoufLYa3kecJP7YyeKlR5V/RgEYkSYG62heiI4Sk6yJ1KYk
qE+Ux2PQQTz9z+IX6PaFGWXKBZLlvr9/nh1rnASx7HDaclP6AH9nblGPNCjXSb7r
GS7cXLgR1HGtuhKjgOpp38z6aTgvnQVhn8/jO6jQKLjNTS4r1xXKLesmKXBOONwJ
e7gb1mSBImL6+h2QW62nArWKUsbfEY2TxBT2yp/+lyaQGvfwCTtBAehND/46MCY0
yyt+ldW2meFxqisLAAJ2weCyDhg52aERr53UdqpB7cG7ZG5gtFG0ZqXf5f3D2a64
HqW4864Tdn2kENWFWysmtw/A9Ajw81IG
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:40 2025 by rpki-client