Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25068D4AC1CC11EFB846FC6A762E951A.roa
File: 25068D4AC1CC11EFB846FC6A762E951A.roa (raw, json)
Hash identifier: z/dIww72ISMmkyMrhtI6rp5mkuaRogBCP6tcH/JU94Q=
Subject key identifier: FC:25:54:4F:20:7E:FE:F4:91:9B:AB:3F:6A:23:7E:6C:BC:23:63:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012269
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25068D4AC1CC11EFB846FC6A762E951A.roa
Signing time: Tue 24 Dec 2024 07:53:21 +0000
ROA not before: Tue 24 Dec 2024 07:53:17 +0000
ROA not after: Wed 10 Dec 2025 07:53:17 +0000
asID: 984
IP address blocks: 154.193.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74345 (0x12269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 07:53:17 2024 GMT
Not After : Dec 10 07:53:17 2025 GMT
Subject: CN=676a6871-7e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:58:b7:ca:34:a5:6a:e9:b7:65:d9:3d:b8:
f4:d7:de:60:21:7a:01:8f:da:9e:d1:40:d0:7d:de:
c0:71:62:b3:82:50:35:f5:2d:e4:cf:02:ae:51:aa:
7f:94:a2:23:2f:c6:de:2a:58:d1:e1:69:ff:d3:a1:
bb:a2:61:22:c8:50:08:62:02:f1:5f:26:82:62:53:
1f:28:84:fe:bb:fa:4d:7c:55:c9:2d:88:ca:ca:69:
c5:4d:c1:26:0a:0e:f9:d8:0d:b4:ae:bc:32:ac:5d:
d0:04:52:ca:2f:de:39:a2:41:88:a2:3b:88:a3:29:
1d:94:33:0a:2a:a3:d6:34:b5:f3:9c:38:a4:ef:5d:
10:07:a0:5e:0d:4b:0c:31:9c:b1:a0:c0:01:d1:24:
fa:0d:b3:a8:b8:c2:da:fe:76:48:ac:f3:ed:83:72:
cd:18:7e:6f:94:e9:ac:5d:4f:42:05:08:a3:78:cd:
4b:c4:ff:f5:91:e6:b5:db:17:bd:86:4f:ea:57:c5:
34:8c:a4:ac:4a:12:73:6d:b1:03:0b:81:24:86:a1:
53:1f:f8:c4:46:76:6e:55:d7:83:c7:c7:23:25:e8:
d0:a7:cb:cd:8d:8c:d1:60:f7:32:1a:eb:9b:d2:a8:
42:2d:84:08:c3:24:e6:a8:0c:8e:27:e3:86:cf:a9:
bb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:25:54:4F:20:7E:FE:F4:91:9B:AB:3F:6A:23:7E:6C:BC:23:63:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25068D4AC1CC11EFB846FC6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.212.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:4c:01:b9:2a:e2:5f:3c:33:50:26:b3:fb:9d:29:4a:bf:5a:
1e:e2:97:01:53:8f:1e:bd:ed:22:41:ea:53:fb:84:c8:b4:19:
9f:41:7e:80:05:3e:df:56:ab:49:8e:3b:64:15:7e:1b:34:7a:
33:ea:b3:d3:f1:18:da:f8:b9:7d:55:30:80:d3:d9:06:4a:33:
78:2f:32:81:47:15:08:9c:a9:89:dd:1d:c9:85:58:b5:11:58:
15:5a:8f:06:81:27:4c:5c:64:65:cf:22:26:31:cb:99:c9:19:
64:6d:5f:12:db:fa:82:f5:27:3b:13:52:af:d9:71:81:c4:30:
4e:ab:e2:22:2c:4f:d9:21:01:63:08:b6:aa:74:70:4a:ad:71:
f6:e6:7b:a3:6a:a3:6f:10:97:64:be:a5:f0:ed:43:3f:4f:06:
06:d2:22:24:62:45:32:16:44:e9:ad:be:54:32:8d:e7:57:69:
3d:b0:82:79:a7:1d:f4:36:fc:31:3b:86:9f:c2:42:ea:52:34:
a3:ed:40:1d:e7:a3:20:d5:bc:8f:77:50:f9:c0:79:0e:fc:fa:
e0:17:96:0c:bf:27:e8:48:20:97:6d:e1:c9:e2:47:1b:df:52:
dd:c4:cc:26:dd:62:37:ea:73:37:b4:4b:ee:79:d3:a2:ca:34:
35:f2:e6:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASJpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDc1MzE3WhcNMjUxMjEwMDc1MzE3WjAYMRYw
FAYDVQQDEw02NzZhNjg3MS03ZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsH9Yt8o0pWrpt2XZPbj0195gIXoBj9qe0UDQfd7AcWKzglA19S3kzwKu
Uap/lKIjL8beKljR4Wn/06G7omEiyFAIYgLxXyaCYlMfKIT+u/pNfFXJLYjKymnF
TcEmCg752A20rrwyrF3QBFLKL945okGIojuIoykdlDMKKqPWNLXznDik710QB6Be
DUsMMZyxoMAB0ST6DbOouMLa/nZIrPPtg3LNGH5vlOmsXU9CBQijeM1LxP/1kea1
2xe9hk/qV8U0jKSsShJzbbEDC4EkhqFTH/jERnZuVdeDx8cjJejQp8vNjYzRYPcy
Guub0qhCLYQIwyTmqAyOJ+OGz6m7MwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPwl
VE8gfv70kZurP2ojfmy8I2PjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNTA2OEQ0QUMxQ0MxMUVGQjg0NkZDNkE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsHUMA0GCSqGSIb3DQEB
CwUAA4IBAQCNTAG5KuJfPDNQJrP7nSlKv1oe4pcBU48eve0iQepT+4TItBmfQX6A
BT7fVqtJjjtkFX4bNHoz6rPT8Rja+Ll9VTCA09kGSjN4LzKBRxUInKmJ3R3JhVi1
EVgVWo8GgSdMXGRlzyImMcuZyRlkbV8S2/qC9Sc7E1Kv2XGBxDBOq+IiLE/ZIQFj
CLaqdHBKrXH25nujaqNvEJdkvqXw7UM/TwYG0iIkYkUyFkTprb5UMo3nV2k9sIJ5
px30NvwxO4afwkLqUjSj7UAd56Mg1byPd1D5wHkO/PrgF5YMvyfoSCCXbeHJ4kcb
31LdxMwm3WI36nM3tEvuedOiyjQ18uYJ
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:54:06 2025 by rpki-client