Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/321FE85EC8B211EF8CBC7152762E951A.roa
File: 321FE85EC8B211EF8CBC7152762E951A.roa (raw, json)
Hash identifier: 2r4U+qXfRZHKX++ilswqj3xPJcLYkN+lY03OFHZmrJc=
Subject key identifier: 5E:4B:0F:CB:2F:78:60:81:02:DC:BF:A9:73:67:9A:9A:77:1F:C4:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/321FE85EC8B211EF8CBC7152762E951A.roa
Signing time: Thu 02 Jan 2025 02:35:14 +0000
ROA not before: Thu 02 Jan 2025 02:35:11 +0000
ROA not after: Mon 13 Dec 2027 02:35:11 +0000
asID: 17561
IP address blocks: 154.220.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78258 (0x131b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 02:35:11 2025 GMT
Not After : Dec 13 02:35:11 2027 GMT
Subject: CN=6775fb62-cb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f0:34:f4:c7:de:5a:7e:3b:18:27:b0:1f:a8:
f0:7d:59:22:52:d3:67:9e:fb:7a:fb:57:1e:f4:84:
73:31:17:d6:52:b2:b8:37:88:2a:1b:87:03:23:16:
33:96:cc:0c:b1:f5:fc:30:6a:14:30:6a:c6:6b:40:
55:b2:37:9e:83:d4:60:6d:27:21:33:57:d6:1b:6e:
74:04:a8:d3:c6:1b:34:49:7f:8d:e5:a4:e8:03:ec:
11:d1:c5:96:68:27:50:56:f2:ee:a0:a5:c9:59:4d:
11:f1:17:01:3c:fa:87:55:42:20:6d:50:a2:ef:31:
3a:e7:08:cb:4c:bd:e4:11:c2:76:69:b8:55:7b:8d:
90:46:4a:98:ba:88:b5:ba:75:a7:b9:8b:89:17:c1:
06:66:59:fe:4c:76:8d:70:b9:78:58:06:90:22:44:
36:3a:46:e5:a9:9a:95:82:12:38:de:48:5d:d2:9e:
7b:f3:1a:79:3e:12:ba:91:26:0f:08:92:4a:6f:a9:
cc:a5:33:f4:83:18:cf:fa:f2:56:f8:55:a3:ad:98:
2d:04:0a:dd:d6:46:38:07:9a:bd:19:ff:36:74:82:
72:82:35:bf:14:ae:f8:f9:27:ba:1f:91:f3:5f:61:
17:98:6e:3d:85:d6:10:0f:a1:3b:35:1d:d0:09:70:
86:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4B:0F:CB:2F:78:60:81:02:DC:BF:A9:73:67:9A:9A:77:1F:C4:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/321FE85EC8B211EF8CBC7152762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.181.0/24
Signature Algorithm: sha256WithRSAEncryption
24:07:d8:b8:ae:4f:3d:d5:8c:47:4d:58:88:8f:39:59:9f:47:
3b:14:e1:d8:cd:0e:5b:c6:83:6e:46:ec:57:86:ac:ee:a9:1b:
34:12:5f:03:61:39:7f:49:de:27:9a:53:36:00:04:97:e6:37:
2c:a9:63:de:36:17:94:48:58:24:9c:c6:d8:63:86:f1:43:11:
fb:29:68:e7:f6:0c:af:b9:61:25:30:cc:bc:ed:5b:27:17:5b:
b9:c0:4d:60:2e:af:b1:f0:9c:1d:3c:c5:09:9b:50:98:98:99:
0d:c0:49:50:44:30:19:a4:b9:d7:41:03:9f:46:56:0f:db:7d:
bb:04:a5:23:25:6c:71:30:30:b3:48:56:5d:74:b2:33:17:15:
08:48:e4:d9:59:7d:d4:c9:3c:06:0b:e0:dc:50:6b:8a:39:53:
cf:7b:97:f5:92:d0:5a:60:b0:52:73:f2:43:7f:54:dc:31:84:
7b:98:3a:3f:6b:6b:91:fd:6e:ef:c9:b2:2e:07:1a:7c:21:be:
fa:99:9e:df:fe:28:63:c0:a0:3b:08:cc:c0:fe:ea:05:a2:ea:
95:73:d6:15:9b:a4:d2:ce:d1:7c:20:07:0c:92:6a:13:59:9b:
56:ac:c9:c1:a0:96:f4:4f:31:99:fa:09:32:22:11:8f:c9:01:
81:91:4b:72
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATGyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMDIzNTExWhcNMjcxMjEzMDIzNTExWjAYMRYw
FAYDVQQDEw02Nzc1ZmI2Mi1jYjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7PA09MfeWn47GCewH6jwfVkiUtNnnvt6+1ce9IRzMRfWUrK4N4gqG4cD
IxYzlswMsfX8MGoUMGrGa0BVsjeeg9RgbSchM1fWG250BKjTxhs0SX+N5aToA+wR
0cWWaCdQVvLuoKXJWU0R8RcBPPqHVUIgbVCi7zE65wjLTL3kEcJ2abhVe42QRkqY
uoi1unWnuYuJF8EGZln+THaNcLl4WAaQIkQ2OkblqZqVghI43khd0p578xp5PhK6
kSYPCJJKb6nMpTP0gxjP+vJW+FWjrZgtBArd1kY4B5q9Gf82dIJygjW/FK74+Se6
H5HzX2EXmG49hdYQD6E7NR3QCXCGmQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF5L
D8sveGCBAty/qXNnmpp3H8TMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMjFGRTg1RUM4QjIxMUVGOENCQzcxNTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmty1MA0GCSqGSIb3DQEB
CwUAA4IBAQAkB9i4rk891YxHTViIjzlZn0c7FOHYzQ5bxoNuRuxXhqzuqRs0El8D
YTl/Sd4nmlM2AASX5jcsqWPeNheUSFgknMbYY4bxQxH7KWjn9gyvuWElMMy87Vsn
F1u5wE1gLq+x8JwdPMUJm1CYmJkNwElQRDAZpLnXQQOfRlYP2327BKUjJWxxMDCz
SFZddLIzFxUISOTZWX3UyTwGC+DcUGuKOVPPe5f1ktBaYLBSc/JDf1TcMYR7mDo/
a2uR/W7vybIuBxp8Ib76mZ7f/ihjwKA7CMzA/uoFouqVc9YVm6TSztF8IAcMkmoT
WZtWrMnBoJb0TzGZ+gkyIhGPyQGBkUty
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:37 2025 by rpki-client