Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B36562AC1A711EFA0247D82762E951A.roa
File: 2B36562AC1A711EFA0247D82762E951A.roa (raw, json)
Hash identifier: JTpTYIxjNL3flj7d4CK9i+wse0kQLwtosfr7kTlPMX4=
Subject key identifier: 32:E4:5C:95:44:4D:14:CD:C7:81:6D:B3:6D:B5:F7:4D:7C:2C:21:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B36562AC1A711EFA0247D82762E951A.roa
Signing time: Tue 24 Dec 2024 03:28:40 +0000
ROA not before: Tue 24 Dec 2024 03:28:36 +0000
ROA not after: Wed 10 Dec 2025 03:28:36 +0000
asID: 984
IP address blocks: 154.92.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73981 (0x120fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:28:36 2024 GMT
Not After : Dec 10 03:28:36 2025 GMT
Subject: CN=676a2a68-334a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ef:e8:21:6c:60:06:64:0a:c6:e9:24:b0:55:
d7:eb:72:9d:ca:25:b6:c0:b1:09:8a:55:6e:84:2d:
c8:13:91:9e:fa:92:8b:cb:eb:7b:51:9e:3f:80:63:
31:79:50:65:48:51:72:8b:69:ab:d6:85:05:be:bf:
52:08:0f:6c:ed:da:e0:a2:81:54:bd:76:31:38:1f:
ee:9f:0e:23:b4:96:f4:22:b0:b1:f4:cf:75:94:ed:
ea:41:9b:2c:e6:37:4d:6e:04:9a:b2:61:f0:bb:d7:
22:a0:38:40:b5:67:db:49:8f:50:aa:86:ac:cc:26:
bb:ec:b9:24:83:a0:95:61:94:57:29:9c:f5:c1:52:
b9:54:35:98:bc:4b:e2:fb:9a:33:85:e0:d2:4b:f8:
a4:51:dd:bd:7f:38:8b:47:24:61:cb:88:dc:b6:7c:
b0:77:a6:97:9f:11:0d:81:f5:a5:ac:52:74:4a:ea:
91:e3:24:45:d7:cd:96:b3:54:2f:76:73:b6:49:fb:
63:30:16:7e:7f:34:e3:27:89:d3:21:e9:bf:28:03:
86:f8:8a:66:ec:ff:e4:36:8b:96:3e:18:6c:f0:c6:
c2:72:31:1a:16:a7:2a:06:0c:76:5e:aa:f6:4d:f3:
cb:d9:df:2c:cf:ce:ec:bd:9d:e9:bf:34:72:51:d2:
49:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E4:5C:95:44:4D:14:CD:C7:81:6D:B3:6D:B5:F7:4D:7C:2C:21:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B36562AC1A711EFA0247D82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.198.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:34:8e:75:be:92:35:45:76:d0:69:bd:09:0c:31:d7:f0:59:
d1:c9:d5:69:6d:7a:f5:ea:a4:d0:13:f3:16:84:d6:9c:ce:1d:
38:af:e8:a2:70:d8:b4:74:1d:f7:4b:16:46:4a:9d:e9:03:64:
5f:f9:ac:a9:dd:c1:82:ee:87:e8:6e:97:cb:40:22:9c:cd:cb:
03:54:c5:da:6b:f1:86:c3:6f:52:ba:1c:60:41:03:3e:96:c2:
ae:7a:1e:74:d3:81:68:b5:b3:2f:85:0d:35:c4:dd:1a:e4:fd:
80:c1:f3:cc:a8:4e:6a:82:74:5c:92:3a:a1:b4:6b:ef:64:f2:
9d:89:8c:27:bf:cf:72:75:ec:09:6b:a1:af:57:4b:63:42:93:
39:49:b7:b0:8b:fc:fc:e3:92:b5:d2:a6:40:4b:ce:be:7c:d9:
d9:ab:9d:4d:ef:28:c5:54:6c:7e:b7:4d:60:82:b6:1b:d3:90:
ae:24:53:b7:62:85:cc:76:df:fc:7c:2a:d5:eb:6a:2d:39:ae:
2e:9d:d7:ec:40:64:b7:13:8e:f8:84:6d:fa:d6:27:4c:06:35:
ee:8a:46:d5:53:e0:da:85:21:7a:df:6f:fb:05:ec:44:28:07:
20:80:91:2f:0c:4c:fd:9a:0e:02:e2:bf:ce:b7:c0:09:0d:66:
d3:69:02:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASD9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDMyODM2WhcNMjUxMjEwMDMyODM2WjAYMRYw
FAYDVQQDEw02NzZhMmE2OC0zMzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4u/oIWxgBmQKxukksFXX63KdyiW2wLEJilVuhC3IE5Ge+pKLy+t7UZ4/
gGMxeVBlSFFyi2mr1oUFvr9SCA9s7drgooFUvXYxOB/unw4jtJb0IrCx9M91lO3q
QZss5jdNbgSasmHwu9cioDhAtWfbSY9QqoaszCa77Lkkg6CVYZRXKZz1wVK5VDWY
vEvi+5ozheDSS/ikUd29fziLRyRhy4jctnywd6aXnxENgfWlrFJ0SuqR4yRF182W
s1QvdnO2SftjMBZ+fzTjJ4nTIem/KAOG+Ipm7P/kNouWPhhs8MbCcjEaFqcqBgx2
Xqr2TfPL2d8sz87svZ3pvzRyUdJJMQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDLk
XJVETRTNx4Fts2219018LCGTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yQjM2NTYyQUMxQTcxMUVGQTAyNDdEODI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlzGMA0GCSqGSIb3DQEB
CwUAA4IBAQCPNI51vpI1RXbQab0JDDHX8FnRydVpbXr16qTQE/MWhNaczh04r+ii
cNi0dB33SxZGSp3pA2Rf+ayp3cGC7ofobpfLQCKczcsDVMXaa/GGw29SuhxgQQM+
lsKueh5004FotbMvhQ01xN0a5P2AwfPMqE5qgnRckjqhtGvvZPKdiYwnv89ydewJ
a6GvV0tjQpM5Sbewi/z845K10qZAS86+fNnZq51N7yjFVGx+t01ggrYb05CuJFO3
YoXMdt/8fCrV62otOa4undfsQGS3E474hG361idMBjXuikbVU+DahSF632/7BexE
KAcggJEvDEz9mg4C4r/Ot8AJDWbTaQK5
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:58 2025 by rpki-client