Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/207A34EAC42C11EF934F3C98762E951A.roa
File: 207A34EAC42C11EF934F3C98762E951A.roa (raw, json)
Hash identifier: nicb6KgQvcpKLiKPtKhW50tRuI558KifdNeNDuwIFa4=
Subject key identifier: C9:C2:05:C4:AD:F2:0F:BD:A6:BA:96:C4:7E:CB:12:E0:9A:BB:6A:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012A2D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/207A34EAC42C11EF934F3C98762E951A.roa
Signing time: Fri 27 Dec 2024 08:25:27 +0000
ROA not before: Fri 27 Dec 2024 08:25:24 +0000
ROA not after: Sun 12 Dec 2027 08:25:24 +0000
asID: 17561
IP address blocks: 154.202.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76333 (0x12a2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 08:25:24 2024 GMT
Not After : Dec 12 08:25:24 2027 GMT
Subject: CN=676e6477-710c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:be:75:25:21:1f:55:8c:db:22:ad:ee:ed:
fe:c2:49:26:5d:8a:c5:92:21:85:77:38:d8:09:c9:
c0:97:5a:e7:f5:93:39:96:27:e0:51:55:11:bb:dc:
a6:ef:80:d1:67:e3:f8:b8:6f:f2:a1:a1:37:45:7b:
f5:4a:02:85:1c:81:de:38:e0:db:8a:94:63:7c:6c:
d9:a4:71:ae:54:32:4a:3b:0b:32:8d:d9:6c:05:5d:
1c:e6:f5:07:b0:da:f3:be:89:48:0a:ea:a9:12:27:
72:53:e8:3d:33:50:4a:00:7a:3e:34:de:05:89:fc:
a7:cb:32:c5:69:3a:06:a4:85:e5:0e:f6:92:20:f1:
4f:6b:bf:4f:30:88:0a:3a:c8:3b:5d:4c:76:6b:b0:
04:a1:2e:80:40:4a:10:ad:e6:8b:15:ff:31:1c:9f:
de:9e:8d:ec:08:3a:2a:e9:80:91:59:3f:98:7c:13:
80:61:fa:c3:c8:51:af:af:8d:b1:43:43:23:35:9c:
7e:6d:97:93:77:4d:8e:b4:6c:e8:e4:f4:f8:ab:f3:
f0:97:19:55:ee:9a:4f:3d:5f:28:1b:68:e8:b1:3e:
ba:8f:d7:3a:20:da:07:fd:e2:bc:a2:ed:dd:e4:0c:
d2:7d:fd:32:21:91:46:b8:72:42:8f:cc:63:11:42:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C2:05:C4:AD:F2:0F:BD:A6:BA:96:C4:7E:CB:12:E0:9A:BB:6A:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/207A34EAC42C11EF934F3C98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.125.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:18:16:bf:28:99:c0:43:9e:35:be:7e:d1:20:82:d8:e1:3f:
98:bf:33:ba:74:4a:f9:fb:c8:70:fe:65:dd:53:93:b6:01:d6:
26:73:04:0b:ab:8d:c9:47:d4:7d:2b:df:b8:73:7b:a7:49:39:
64:2a:de:f8:4e:1e:79:dd:3a:f0:a0:22:9c:18:9d:e3:3c:75:
ec:9d:f4:e2:e3:ce:4e:a7:d0:bf:78:d8:62:ba:6c:08:7d:d1:
99:15:44:71:ad:ec:6e:7c:97:81:0d:52:45:ca:78:b1:f1:22:
a5:fa:d4:68:31:f2:72:56:f9:7b:af:b2:29:ac:5d:42:2c:e9:
0e:af:57:a2:17:d4:a6:42:25:db:c0:4e:d7:d2:84:e3:fb:5b:
58:92:e2:c9:5c:15:4f:15:01:41:45:3b:7e:4a:e2:cd:fd:44:
16:4b:f6:90:8a:6c:1b:fe:b7:2b:6f:ac:a3:4e:ef:1a:fa:c6:
4b:8c:9c:4c:08:c0:d5:19:94:46:ae:2e:c9:48:2b:68:7c:79:
84:04:68:6b:1e:69:e1:eb:ac:0b:f8:cb:5e:ae:3e:45:42:ba:
6a:c5:2c:53:f8:9d:6f:4b:4a:f7:41:f0:7e:b4:96:f1:e3:18:
06:a7:3b:4a:b3:97:7a:44:72:b1:c1:58:18:88:5c:16:f1:c7:
fe:bc:2e:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASotMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDgyNTI0WhcNMjcxMjEyMDgyNTI0WjAYMRYw
FAYDVQQDEw02NzZlNjQ3Ny03MTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvpO+dSUhH1WM2yKt7u3+wkkmXYrFkiGFdzjYCcnAl1rn9ZM5lifgUVUR
u9ym74DRZ+P4uG/yoaE3RXv1SgKFHIHeOODbipRjfGzZpHGuVDJKOwsyjdlsBV0c
5vUHsNrzvolICuqpEidyU+g9M1BKAHo+NN4FifynyzLFaToGpIXlDvaSIPFPa79P
MIgKOsg7XUx2a7AEoS6AQEoQreaLFf8xHJ/eno3sCDoq6YCRWT+YfBOAYfrDyFGv
r42xQ0MjNZx+bZeTd02OtGzo5PT4q/PwlxlV7ppPPV8oG2josT66j9c6INoH/eK8
ou3d5AzSff0yIZFGuHJCj8xjEUJ4WQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMnC
BcSt8g+9prqWxH7LEuCau2qdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMDdBMzRFQUM0MkMxMUVGOTM0RjNDOTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsp9MA0GCSqGSIb3DQEB
CwUAA4IBAQArGBa/KJnAQ541vn7RIILY4T+YvzO6dEr5+8hw/mXdU5O2AdYmcwQL
q43JR9R9K9+4c3unSTlkKt74Th553TrwoCKcGJ3jPHXsnfTi485Op9C/eNhiumwI
fdGZFURxrexufJeBDVJFynix8SKl+tRoMfJyVvl7r7IprF1CLOkOr1eiF9SmQiXb
wE7X0oTj+1tYkuLJXBVPFQFBRTt+SuLN/UQWS/aQimwb/rcrb6yjTu8a+sZLjJxM
CMDVGZRGri7JSCtofHmEBGhrHmnh66wL+Mterj5FQrpqxSxT+J1vS0r3QfB+tJbx
4xgGpztKs5d6RHKxwVgYiFwW8cf+vC6P
-----END CERTIFICATE-----
Generated at Thu Apr 10 21:25:45 2025 by rpki-client