Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/292078FCC1DE11EF9D1F815B762E951A.roa
File: 292078FCC1DE11EF9D1F815B762E951A.roa (raw, json)
Hash identifier: ZSvQ0cKSxj6HtqE9wVGhDcBtuwa3aYquuPbOHwGNUEM=
Subject key identifier: F0:42:7B:CF:72:BC:8A:24:85:84:01:69:AF:AC:4E:2B:72:2F:8F:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012325
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/292078FCC1DE11EF9D1F815B762E951A.roa
Signing time: Tue 24 Dec 2024 10:02:19 +0000
ROA not before: Tue 24 Dec 2024 10:02:15 +0000
ROA not after: Wed 10 Dec 2025 10:02:15 +0000
asID: 984
IP address blocks: 154.199.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74533 (0x12325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 10:02:15 2024 GMT
Not After : Dec 10 10:02:15 2025 GMT
Subject: CN=676a86ab-281b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:2a:66:4e:fa:d9:b7:03:c4:82:b8:fd:5e:
9a:ae:2b:84:77:91:ee:cf:37:4e:7b:69:b4:2f:09:
cc:50:a9:dd:24:96:e6:f9:bd:60:08:bf:cf:16:f4:
a4:17:08:56:80:33:65:3e:50:7f:88:7d:fe:13:bd:
4b:ae:e7:25:4e:8a:23:47:ed:73:85:37:d7:2f:17:
86:44:55:1a:12:b0:cb:5f:c7:ba:a2:ce:7d:90:a4:
ab:1f:96:ca:01:83:09:59:2c:a1:d6:e7:df:44:00:
f5:59:b0:a8:c8:64:79:ad:a2:63:c9:c9:a6:e8:cd:
98:71:dd:eb:07:aa:ca:ef:76:02:ef:cf:ef:02:79:
7a:f1:30:2c:ee:72:b6:19:71:c5:a9:51:63:50:2c:
76:f9:0d:ef:24:6d:e6:8d:7f:3d:29:e0:0c:d1:5f:
d7:07:73:77:0b:09:42:ee:8f:15:42:d4:2e:e2:67:
a9:5c:45:ef:09:6c:f0:a8:28:20:23:bf:ae:cf:83:
53:b7:1a:8e:7d:f0:b7:97:fe:17:70:1d:b5:d5:63:
ac:2d:52:7d:d1:44:b9:69:d3:bf:d3:f9:41:aa:e1:
b7:1c:ff:b2:59:f2:b7:8d:b3:7f:d8:2a:6a:08:94:
55:40:dd:24:1c:cb:2f:fa:b4:f2:a4:79:25:a3:3a:
31:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:42:7B:CF:72:BC:8A:24:85:84:01:69:AF:AC:4E:2B:72:2F:8F:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/292078FCC1DE11EF9D1F815B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.35.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:1d:5c:84:ec:4f:7a:c8:b5:da:ab:a4:e8:50:95:6c:56:32:
d7:b2:00:e0:db:f9:f3:b0:16:ba:10:01:91:d2:8f:a7:e4:87:
bb:62:ca:91:2c:cf:a4:a3:09:65:aa:b9:43:ea:2c:25:9d:91:
46:c4:7d:1d:77:0a:3f:b8:b7:0f:32:1c:38:58:d7:78:73:fd:
eb:7e:37:ce:7a:4b:b3:6f:de:3e:6b:e9:49:bf:2f:f1:e6:80:
ce:f1:3e:71:9c:a8:f9:d4:e0:37:93:2b:d4:56:33:9a:40:0c:
aa:51:c2:84:b6:de:bd:6f:f1:27:4a:00:51:28:0e:a5:9c:50:
37:f7:42:80:52:03:20:fb:5c:ee:a9:b7:90:cf:44:4b:d6:f6:
62:c7:eb:d4:19:f1:c4:16:e9:26:3a:9a:4d:bf:dc:55:0b:7c:
2d:2e:3d:f5:c8:54:9d:7d:1c:e8:f6:ee:95:dd:a5:77:c9:bd:
74:7c:37:51:c9:fb:0d:70:74:ae:a8:4b:e2:47:0a:3f:7b:2b:
49:45:d9:14:5e:f2:29:d5:6d:03:98:b5:87:f3:eb:4b:1a:c7:
58:5b:d4:4e:34:bd:c2:1a:17:12:d7:1f:43:a2:00:e2:8b:c4:
05:6c:41:12:6f:3c:26:cc:ee:b1:8f:23:e9:01:44:21:52:a3:
eb:18:cc:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASMlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MTAwMjE1WhcNMjUxMjEwMTAwMjE1WjAYMRYw
FAYDVQQDEw02NzZhODZhYi0yODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArEcqZk762bcDxIK4/V6ariuEd5HuzzdOe2m0LwnMUKndJJbm+b1gCL/P
FvSkFwhWgDNlPlB/iH3+E71LruclToojR+1zhTfXLxeGRFUaErDLX8e6os59kKSr
H5bKAYMJWSyh1uffRAD1WbCoyGR5raJjycmm6M2Ycd3rB6rK73YC78/vAnl68TAs
7nK2GXHFqVFjUCx2+Q3vJG3mjX89KeAM0V/XB3N3CwlC7o8VQtQu4mepXEXvCWzw
qCggI7+uz4NTtxqOffC3l/4XcB211WOsLVJ90US5adO/0/lBquG3HP+yWfK3jbN/
2CpqCJRVQN0kHMsv+rTypHklozoxMQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPBC
e89yvIokhYQBaa+sTityL4/NMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yOTIwNzhGQ0MxREUxMUVGOUQxRjgxNUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmscjMA0GCSqGSIb3DQEB
CwUAA4IBAQC6HVyE7E96yLXaq6ToUJVsVjLXsgDg2/nzsBa6EAGR0o+n5Ie7YsqR
LM+kowllqrlD6iwlnZFGxH0ddwo/uLcPMhw4WNd4c/3rfjfOekuzb94+a+lJvy/x
5oDO8T5xnKj51OA3kyvUVjOaQAyqUcKEtt69b/EnSgBRKA6lnFA390KAUgMg+1zu
qbeQz0RL1vZix+vUGfHEFukmOppNv9xVC3wtLj31yFSdfRzo9u6V3aV3yb10fDdR
yfsNcHSuqEviRwo/eytJRdkUXvIp1W0DmLWH8+tLGsdYW9RONL3CGhcS1x9DogDi
i8QFbEESbzwmzO6xjyPpAUQhUqPrGMzr
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:04 2025 by rpki-client