Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20F6EBFEC3CB11EFAD1A019F762E951A.roa
File: 20F6EBFEC3CB11EFAD1A019F762E951A.roa (raw, json)
Hash identifier: 88+XAOvpP3r+i/6fhuRqWNpWQQGBcP+sQ1C18aLTMRA=
Subject key identifier: 21:79:8E:7A:C7:B5:1E:3F:36:04:5F:CC:7C:90:93:BB:EC:5D:89:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012804
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20F6EBFEC3CB11EFAD1A019F762E951A.roa
Signing time: Thu 26 Dec 2024 20:51:07 +0000
ROA not before: Thu 26 Dec 2024 20:51:03 +0000
ROA not after: Sun 12 Dec 2027 20:51:03 +0000
asID: 17561
IP address blocks: 154.83.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75780 (0x12804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:51:03 2024 GMT
Not After : Dec 12 20:51:03 2027 GMT
Subject: CN=676dc1bb-c6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:cd:aa:2a:a8:ac:b0:7c:53:5f:9d:52:80:
ef:37:a6:cc:d7:16:dc:20:d4:e1:e8:3a:61:fe:9a:
9e:3a:3c:00:da:8f:a2:64:a0:52:1e:8f:84:c3:81:
1d:e9:94:92:58:77:05:12:d1:c1:4a:d2:b0:a8:13:
1b:43:dc:f3:97:8e:76:01:9f:3b:36:eb:a5:02:3d:
4f:dd:e2:ec:21:89:57:59:5f:95:7e:bb:a6:de:47:
b4:6f:61:5d:3e:8c:4c:7a:9f:6e:08:30:64:67:a6:
88:28:a6:66:b2:ca:1b:53:32:0f:5c:34:fb:cd:6e:
00:bb:6c:85:90:92:f3:4e:67:61:46:75:08:98:32:
83:75:c3:0d:49:c6:5e:4b:4d:f9:cb:a3:e9:80:2b:
b3:aa:44:40:78:ec:53:e3:6c:53:aa:ea:46:b4:a9:
61:aa:12:25:f4:70:92:71:a8:44:b3:72:5e:13:90:
50:91:e1:62:47:64:30:3a:33:7e:e2:5b:49:9a:34:
5f:47:39:48:f3:52:2c:27:75:92:9e:97:b3:66:f6:
f2:1a:96:13:df:dd:d5:e6:89:b4:99:e1:81:ba:1e:
1a:52:e0:54:7d:fa:07:a6:d4:b8:07:07:51:d2:01:
22:c7:bc:30:96:44:e7:f6:35:5c:0a:c1:aa:64:8e:
51:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:79:8E:7A:C7:B5:1E:3F:36:04:5F:CC:7C:90:93:BB:EC:5D:89:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20F6EBFEC3CB11EFAD1A019F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.151.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:8c:ab:a0:e0:47:47:46:e8:63:53:9e:81:95:19:35:51:4b:
58:ae:bc:de:1a:35:bd:bb:72:ee:1c:26:e7:e6:a7:f4:6a:8d:
a9:7a:a1:bf:61:98:a1:05:b7:d3:a6:36:82:e3:71:c6:8c:c6:
eb:66:42:90:61:79:14:dc:09:5c:d3:4a:8f:63:61:c5:c5:40:
22:29:63:da:0c:14:ba:25:2c:87:fb:fa:24:b6:f2:f5:78:85:
26:ac:0c:7b:ea:e8:5c:91:71:ea:72:5a:ad:92:b0:79:3b:c7:
c4:de:c7:47:cc:22:b5:a4:06:9b:df:ab:43:cf:2d:39:61:42:
71:93:6c:8f:6b:52:6d:66:b8:8d:73:7f:83:5b:9a:db:57:0e:
13:67:df:6e:80:53:cb:c9:df:b7:1b:ba:e3:0c:1e:14:ad:06:
5b:aa:a3:d3:e3:91:37:1c:7c:df:99:a9:c9:25:cb:60:66:04:
a2:d4:f0:8b:0d:75:70:96:4e:20:f8:f8:28:07:91:48:cb:e6:
32:b2:24:3e:25:58:d9:b5:b9:11:04:79:bc:18:6f:9a:a9:ee:
14:54:7b:15:49:67:b0:1d:01:86:a5:0c:91:ec:50:c4:36:65:
f2:b6:ae:df:ce:17:97:61:2b:fb:8d:5f:ac:51:07:8f:3f:16:
bf:69:2e:70
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASgEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MjA1MTAzWhcNMjcxMjEyMjA1MTAzWjAYMRYw
FAYDVQQDEw02NzZkYzFiYi1jNmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsuPNqiqorLB8U1+dUoDvN6bM1xbcINTh6Dph/pqeOjwA2o+iZKBSHo+E
w4Ed6ZSSWHcFEtHBStKwqBMbQ9zzl452AZ87NuulAj1P3eLsIYlXWV+Vfrum3ke0
b2FdPoxMep9uCDBkZ6aIKKZmssobUzIPXDT7zW4Au2yFkJLzTmdhRnUImDKDdcMN
ScZeS035y6PpgCuzqkRAeOxT42xTqupGtKlhqhIl9HCScahEs3JeE5BQkeFiR2Qw
OjN+4ltJmjRfRzlI81IsJ3WSnpezZvbyGpYT393V5om0meGBuh4aUuBUffoHptS4
BwdR0gEix7wwlkTn9jVcCsGqZI5RaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCF5
jnrHtR4/NgRfzHyQk7vsXYkgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMEY2RUJGRUMzQ0IxMUVGQUQxQTAxOUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlOXMA0GCSqGSIb3DQEB
CwUAA4IBAQBMjKug4EdHRuhjU56BlRk1UUtYrrzeGjW9u3LuHCbn5qf0ao2peqG/
YZihBbfTpjaC43HGjMbrZkKQYXkU3Alc00qPY2HFxUAiKWPaDBS6JSyH+/oktvL1
eIUmrAx76uhckXHqclqtkrB5O8fE3sdHzCK1pAab36tDzy05YUJxk2yPa1JtZriN
c3+DW5rbVw4TZ99ugFPLyd+3G7rjDB4UrQZbqqPT45E3HHzfmanJJctgZgSi1PCL
DXVwlk4g+PgoB5FIy+YysiQ+JVjZtbkRBHm8GG+aqe4UVHsVSWewHQGGpQyR7FDE
NmXytq7fzheXYSv7jV+sUQePPxa/aS5w
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:19 2025 by rpki-client