Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/230022F2C35E11EFAC005473762E951A.roa
File: 230022F2C35E11EFAC005473762E951A.roa (raw, json)
Hash identifier: NVyNmSaSMd5mM9MRQUhcg1ZjP3Fb66M76Kh9s+WrTl0=
Subject key identifier: B4:9F:16:55:95:EC:09:A0:8A:C6:EB:AB:DD:07:5E:55:C7:CB:00:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012613
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/230022F2C35E11EFAC005473762E951A.roa
Signing time: Thu 26 Dec 2024 07:50:55 +0000
ROA not before: Thu 26 Dec 2024 07:50:52 +0000
ROA not after: Sun 12 Dec 2027 07:50:52 +0000
asID: 17561
IP address blocks: 154.88.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75283 (0x12613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 07:50:52 2024 GMT
Not After : Dec 12 07:50:52 2027 GMT
Subject: CN=676d0adf-caa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:ff:5b:46:e2:4c:6b:43:b4:c6:4b:2a:c8:
d8:ec:cf:8a:66:12:a5:44:e8:19:b1:dc:3b:f7:24:
53:fc:c4:e6:65:41:ce:a5:9e:7e:cf:59:5b:a0:05:
9c:55:9e:d6:2c:de:38:8c:d9:8b:90:69:be:76:e7:
29:ef:1f:39:b5:33:0b:d3:b9:4a:0f:d9:2b:ee:11:
60:59:8a:19:5f:f1:4a:6b:18:ee:d9:09:cd:65:49:
22:1d:d6:1d:51:be:1b:c8:b8:86:05:d5:39:4b:02:
26:66:bd:1e:46:26:81:65:b2:31:98:80:c1:93:13:
cf:fd:d5:2f:49:01:97:70:39:ac:af:30:ba:e5:da:
61:b8:53:be:d9:7e:fc:c3:78:b4:3a:49:95:51:fd:
15:e9:54:59:bf:32:42:40:1d:7c:d7:7a:6e:81:ca:
67:aa:1d:47:f2:56:49:48:3d:dc:0f:59:a1:c4:99:
b9:82:79:08:6a:63:b3:fd:f3:2f:b5:bd:36:9e:12:
58:80:c0:0b:e5:5d:71:bc:ce:9c:ce:1e:31:d1:63:
b1:30:24:f7:d3:42:9b:06:0e:ff:af:5b:b0:8e:53:
84:45:d3:fc:c3:b5:67:0b:e1:67:a2:55:7f:31:9c:
01:b5:ff:88:42:f2:35:9a:d2:66:3a:44:0b:1b:a3:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9F:16:55:95:EC:09:A0:8A:C6:EB:AB:DD:07:5E:55:C7:CB:00:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/230022F2C35E11EFAC005473762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.61.0/24
Signature Algorithm: sha256WithRSAEncryption
10:2a:1e:7d:39:ca:49:d7:37:87:a4:b5:11:0f:f2:dc:cd:f9:
64:0d:2a:06:cd:55:71:69:05:dc:0c:f2:d6:b3:2c:f5:07:bb:
a3:9a:c9:82:4f:aa:e1:50:ba:48:48:5d:ae:ed:7a:bd:e2:eb:
25:bb:87:be:f4:97:9c:bf:ee:50:3a:a8:72:06:7c:11:89:92:
4d:3b:60:15:e1:15:86:f9:ea:b4:ae:98:53:66:4d:c3:33:03:
b8:fe:2b:37:92:4d:9e:86:1c:e7:12:53:8b:9d:d8:a3:53:cb:
e9:bd:25:c0:1f:17:74:68:ca:0b:24:75:96:39:2a:e8:c3:ab:
68:06:54:2b:09:f1:a5:16:99:25:bc:e4:c7:ce:a5:af:11:01:
83:8b:45:61:9f:c8:f0:3f:69:a8:6d:ae:34:f5:84:1b:28:14:
ac:6e:94:c3:f8:1b:2b:36:ca:fa:26:c3:7d:7d:5b:e3:80:3e:
cf:47:60:48:db:55:bd:74:97:63:3b:3a:31:5f:c9:fe:cd:a6:
54:97:00:1e:c8:23:83:70:4b:2d:9f:d3:81:0d:19:65:dc:7a:
9c:c5:fa:bb:d9:3f:76:b9:0d:47:c7:97:30:ae:47:0e:10:76:
2f:79:a6:7c:72:cb:7c:0d:05:e5:61:5c:d7:ff:33:18:2b:6f:
9e:4d:a3:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASYTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDc1MDUyWhcNMjcxMjEyMDc1MDUyWjAYMRYw
FAYDVQQDEw02NzZkMGFkZi1jYWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtcn/W0biTGtDtMZLKsjY7M+KZhKlROgZsdw79yRT/MTmZUHOpZ5+z1lb
oAWcVZ7WLN44jNmLkGm+ducp7x85tTML07lKD9kr7hFgWYoZX/FKaxju2QnNZUki
HdYdUb4byLiGBdU5SwImZr0eRiaBZbIxmIDBkxPP/dUvSQGXcDmsrzC65dphuFO+
2X78w3i0OkmVUf0V6VRZvzJCQB1813pugcpnqh1H8lZJSD3cD1mhxJm5gnkIamOz
/fMvtb02nhJYgMAL5V1xvM6czh4x0WOxMCT300KbBg7/r1uwjlOERdP8w7VnC+Fn
olV/MZwBtf+IQvI1mtJmOkQLG6OHewIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLSf
FlWV7Amgisbrq90HXlXHywBOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMzAwMjJGMkMzNUUxMUVGQUMwMDU0NzM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlg9MA0GCSqGSIb3DQEB
CwUAA4IBAQAQKh59OcpJ1zeHpLURD/LczflkDSoGzVVxaQXcDPLWsyz1B7ujmsmC
T6rhULpISF2u7Xq94uslu4e+9Jecv+5QOqhyBnwRiZJNO2AV4RWG+eq0rphTZk3D
MwO4/is3kk2ehhznElOLndijU8vpvSXAHxd0aMoLJHWWOSrow6toBlQrCfGlFpkl
vOTHzqWvEQGDi0Vhn8jwP2moba409YQbKBSsbpTD+BsrNsr6JsN9fVvjgD7PR2BI
21W9dJdjOzoxX8n+zaZUlwAeyCODcEstn9OBDRll3Hqcxfq72T92uQ1Hx5cwrkcO
EHYveaZ8cst8DQXlYVzX/zMYK2+eTaNc
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:29 2025 by rpki-client