Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/266FB2FABEB211EFBFFE135F762E951A.roa
File: 266FB2FABEB211EFBFFE135F762E951A.roa (raw, json)
Hash identifier: u6PGKJauyb7Ry5F5Yz9pw2UlNI4p1YqVNZKP/BjRZPA=
Subject key identifier: FE:15:6A:F7:C6:B5:6F:E8:C0:6F:6E:21:1E:60:23:D4:E0:72:07:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/266FB2FABEB211EFBFFE135F762E951A.roa
Signing time: Fri 20 Dec 2024 09:09:43 +0000
ROA not before: Fri 20 Dec 2024 09:09:39 +0000
ROA not after: Wed 25 Jun 2025 09:09:39 +0000
asID: 201411
IP address blocks: 154.84.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72860 (0x11c9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 09:09:39 2024 GMT
Not After : Jun 25 09:09:39 2025 GMT
Subject: CN=67653457-ff61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:40:9f:30:ae:f2:14:f6:3b:80:16:99:38:27:
ef:7f:c1:ac:74:e9:93:1a:c8:ee:74:ea:8f:0a:a1:
21:76:e3:e2:f6:e3:af:76:f7:c3:36:d7:61:e1:3a:
6c:13:ad:de:19:ac:6f:5b:42:ba:36:7f:34:cd:8e:
a2:99:a9:0f:7d:d3:e5:99:b6:98:da:d8:33:e7:10:
1e:e7:56:ea:4b:6b:21:43:25:65:77:9e:9f:cc:3c:
f3:27:fd:50:57:59:27:15:30:82:75:db:db:ef:18:
c3:8e:5b:25:65:29:de:cc:f5:26:82:7a:2d:dd:81:
24:6c:25:e8:cc:1c:31:d3:a1:f1:60:50:21:c2:11:
bd:76:50:b8:9b:f7:66:0e:bb:79:e3:10:42:e9:7d:
06:c6:17:7d:f5:c4:f0:1f:2b:a1:a5:4c:3a:11:7c:
cd:3a:d8:f5:db:3c:62:ab:e5:ba:54:95:d1:86:3b:
6a:4c:fd:dc:11:c7:e6:41:6e:5b:61:6d:25:21:81:
89:06:c2:0e:dd:47:99:dd:14:20:68:d7:34:46:bd:
b0:fd:a8:67:ba:a6:67:2c:74:d3:e1:d6:38:f2:29:
c9:b7:cd:a5:eb:a6:fb:75:16:6d:bd:51:f7:d0:53:
18:86:10:18:b1:1d:22:ee:6d:c0:fc:94:d9:90:5f:
51:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:15:6A:F7:C6:B5:6F:E8:C0:6F:6E:21:1E:60:23:D4:E0:72:07:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/266FB2FABEB211EFBFFE135F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.159.0/24
Signature Algorithm: sha256WithRSAEncryption
62:20:d9:73:70:06:f8:d8:be:01:4c:d6:a7:da:3b:b2:7f:02:
6c:d6:74:fb:d0:f8:d2:e3:e6:8e:08:c3:6d:8f:7f:b0:f7:0c:
44:8b:c7:d2:42:13:ac:e3:9f:e3:e2:70:df:e5:36:a1:84:d8:
99:75:c7:bb:d1:8f:ef:48:24:ab:55:cf:4b:2f:a4:f8:f9:b4:
e9:58:f7:9b:e1:65:30:11:d5:e7:33:5f:6e:48:ba:ab:f4:08:
c5:51:34:6f:57:f9:0a:bf:0e:4e:28:9d:04:f2:4a:00:97:8e:
2b:a8:f3:60:f5:13:64:d5:e6:57:eb:44:2f:a1:48:75:86:47:
a8:96:d2:08:96:ce:41:d8:c1:25:be:37:27:12:e1:3d:50:e3:
6a:bc:f5:4b:c7:0e:7c:ad:89:1c:d1:fc:97:81:56:ba:18:aa:
43:73:1e:b3:a8:6c:37:f9:cb:3a:74:74:61:fd:82:5a:5f:97:
b0:2b:49:65:05:3c:ed:69:f8:10:7c:e1:ce:f4:84:6c:37:43:
80:87:5e:da:b3:30:01:ae:49:dc:29:af:2f:e6:5c:0c:5e:b1:
da:e2:b6:cf:7d:09:50:79:b5:b5:d0:38:b2:5d:0a:12:5b:63:
95:99:74:58:17:68:e5:21:5e:d2:0b:da:68:f3:28:68:9f:7e:
77:7c:c2:49
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARycMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIwMDkwOTM5WhcNMjUwNjI1MDkwOTM5WjAYMRYw
FAYDVQQDEw02NzY1MzQ1Ny1mZjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2UCfMK7yFPY7gBaZOCfvf8GsdOmTGsjudOqPCqEhduPi9uOvdvfDNtdh
4TpsE63eGaxvW0K6Nn80zY6imakPfdPlmbaY2tgz5xAe51bqS2shQyVld56fzDzz
J/1QV1knFTCCddvb7xjDjlslZSnezPUmgnot3YEkbCXozBwx06HxYFAhwhG9dlC4
m/dmDrt54xBC6X0Gxhd99cTwHyuhpUw6EXzNOtj12zxiq+W6VJXRhjtqTP3cEcfm
QW5bYW0lIYGJBsIO3UeZ3RQgaNc0Rr2w/ahnuqZnLHTT4dY48inJt82l66b7dRZt
vVH30FMYhhAYsR0i7m3A/JTZkF9RswIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFP4V
avfGtW/owG9uIR5gI9TgcgfYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNjZGQjJGQUJFQjIxMUVGQkZGRTEzNUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlSfMA0GCSqGSIb3DQEB
CwUAA4IBAQBiINlzcAb42L4BTNan2juyfwJs1nT70PjS4+aOCMNtj3+w9wxEi8fS
QhOs45/j4nDf5TahhNiZdce70Y/vSCSrVc9LL6T4+bTpWPeb4WUwEdXnM19uSLqr
9AjFUTRvV/kKvw5OKJ0E8koAl44rqPNg9RNk1eZX60QvoUh1hkeoltIIls5B2MEl
vjcnEuE9UONqvPVLxw58rYkc0fyXgVa6GKpDcx6zqGw3+cs6dHRh/YJaX5ewK0ll
BTztafgQfOHO9IRsN0OAh17aszABrkncKa8v5lwMXrHa4rbPfQlQebW10DiyXQoS
W2OVmXRYF2jlIV7SC9po8yhon353fMJJ
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:45 2025 by rpki-client