Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/366E5A2CC42E11EF9A0217A5762E951A.roa
File: 366E5A2CC42E11EF9A0217A5762E951A.roa (raw, json)
Hash identifier: QDmk3dq5yIvA4kRy7584knkwk3u27BeJmh+hscP3M90=
Subject key identifier: 11:98:82:F3:DC:E7:AC:08:85:5F:19:1E:1C:A4:05:6C:F8:4C:11:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012A43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/366E5A2CC42E11EF9A0217A5762E951A.roa
Signing time: Fri 27 Dec 2024 08:40:23 +0000
ROA not before: Fri 27 Dec 2024 08:40:20 +0000
ROA not after: Sun 12 Dec 2027 08:40:20 +0000
asID: 17561
IP address blocks: 154.203.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76355 (0x12a43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 08:40:20 2024 GMT
Not After : Dec 12 08:40:20 2027 GMT
Subject: CN=676e67f7-7693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cc:79:17:80:12:6e:a6:da:e9:89:a1:1e:64:
67:57:f6:1e:a0:df:13:06:25:7d:6d:3c:72:a8:88:
52:74:da:c8:bb:13:c2:65:36:ff:fb:a4:ca:7d:82:
9a:08:1e:3a:22:94:2c:c6:ab:b7:60:db:b2:8c:b1:
65:ff:ca:6d:c7:ee:25:04:82:79:a8:a2:9b:3c:3b:
98:be:98:a8:c0:17:26:57:31:dc:dd:d9:11:f0:87:
af:83:34:db:7c:f7:20:40:35:b5:9d:a2:a9:10:2b:
eb:30:05:2b:02:a4:00:0b:f6:ce:58:c5:00:3d:25:
0f:7b:96:dd:5a:98:e6:eb:e9:06:f8:f5:8d:70:d1:
c8:30:28:82:71:9c:f7:7d:39:36:de:4b:95:a8:4f:
cc:6c:c4:69:a7:57:e0:9c:40:4d:ea:bb:d2:16:f3:
72:19:e5:73:1d:c5:23:ea:10:66:1e:f6:4a:7a:6b:
b3:b0:8c:4c:7e:09:6f:9d:b8:5c:b4:2a:d2:34:8f:
0e:cf:0a:03:ff:0c:e2:df:3b:fb:98:e4:a5:44:84:
69:ec:b7:9b:7e:f9:f7:f2:7f:4d:8c:c8:40:65:95:
ce:be:ef:42:e0:a0:7d:8e:fc:dc:03:54:9f:e0:26:
a3:da:88:21:27:83:e9:f4:3e:b6:4d:c6:3c:a2:58:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:98:82:F3:DC:E7:AC:08:85:5F:19:1E:1C:A4:05:6C:F8:4C:11:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/366E5A2CC42E11EF9A0217A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.9.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d1:e9:c7:99:d2:65:a7:b6:7e:7c:49:34:2b:81:71:85:69:
5c:06:01:99:9a:ce:36:b3:ce:cf:88:9c:5a:93:68:c6:5b:6f:
86:21:0b:4e:64:0b:25:a8:bc:18:43:6c:9b:78:92:7c:64:c9:
f1:ca:2f:f1:24:0a:18:79:04:c9:9e:52:37:6e:fb:44:28:d9:
a3:5e:32:50:b7:66:9a:09:a1:54:b2:8b:b6:9b:f5:53:1c:90:
9a:49:da:75:1a:1e:73:f4:b8:fa:46:0b:b6:8c:01:59:48:10:
7a:e0:d1:0c:cd:01:c2:05:cc:ee:c8:01:2f:77:8a:ac:1c:86:
1a:70:f8:cd:73:72:7d:54:cf:68:e9:62:89:76:1f:53:e7:f3:
3d:60:3c:b0:21:c8:98:ee:b7:23:f5:96:30:1e:42:dc:ff:fd:
24:aa:f5:53:96:37:55:23:16:48:91:b4:49:b4:c8:a8:c1:72:
a8:28:25:c5:27:bd:e3:b7:a6:6b:41:40:78:27:4e:b4:7b:b2:
7b:f4:e7:b5:c6:25:3c:bf:24:aa:46:0e:01:ff:94:37:43:28:
79:fd:f4:bc:30:3f:3c:5f:6c:f0:6b:21:04:3b:8c:1c:69:ae:
4a:ac:6f:ea:7f:01:5f:12:e3:7f:79:41:70:e1:5b:3f:4d:a0:
42:71:ee:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASpDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDg0MDIwWhcNMjcxMjEyMDg0MDIwWjAYMRYw
FAYDVQQDEw02NzZlNjdmNy03NjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy8x5F4ASbqba6YmhHmRnV/YeoN8TBiV9bTxyqIhSdNrIuxPCZTb/+6TK
fYKaCB46IpQsxqu3YNuyjLFl/8ptx+4lBIJ5qKKbPDuYvpiowBcmVzHc3dkR8Iev
gzTbfPcgQDW1naKpECvrMAUrAqQAC/bOWMUAPSUPe5bdWpjm6+kG+PWNcNHIMCiC
cZz3fTk23kuVqE/MbMRpp1fgnEBN6rvSFvNyGeVzHcUj6hBmHvZKemuzsIxMfglv
nbhctCrSNI8OzwoD/wzi3zv7mOSlRIRp7Lebfvn38n9NjMhAZZXOvu9C4KB9jvzc
A1Sf4Caj2oghJ4Pp9D62TcY8olgIpwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBGY
gvPc56wIhV8ZHhykBWz4TBELMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNjZFNUEyQ0M0MkUxMUVGOUEwMjE3QTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmssJMA0GCSqGSIb3DQEB
CwUAA4IBAQB50enHmdJlp7Z+fEk0K4FxhWlcBgGZms42s87PiJxak2jGW2+GIQtO
ZAslqLwYQ2ybeJJ8ZMnxyi/xJAoYeQTJnlI3bvtEKNmjXjJQt2aaCaFUsou2m/VT
HJCaSdp1Gh5z9Lj6Rgu2jAFZSBB64NEMzQHCBczuyAEvd4qsHIYacPjNc3J9VM9o
6WKJdh9T5/M9YDywIciY7rcj9ZYwHkLc//0kqvVTljdVIxZIkbRJtMiowXKoKCXF
J73jt6ZrQUB4J060e7J79Oe1xiU8vySqRg4B/5Q3Qyh5/fS8MD88X2zwayEEO4wc
aa5KrG/qfwFfEuN/eUFw4Vs/TaBCce78
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:34 2025 by rpki-client