Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45084D86C40611EFB292FBA9762E951A.roa
File: 45084D86C40611EFB292FBA9762E951A.roa (raw, json)
Hash identifier: j403gb3jhHkF7A/iGs+QGFOAFs4W2mRiv8SxKElSbyU=
Subject key identifier: 04:6C:00:98:AD:FF:55:E5:5A:B1:11:A8:EF:CE:87:EC:F6:3D:14:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45084D86C40611EFB292FBA9762E951A.roa
Signing time: Fri 27 Dec 2024 03:54:28 +0000
ROA not before: Fri 27 Dec 2024 03:54:24 +0000
ROA not after: Fri 12 Dec 2025 03:54:24 +0000
asID: 984
IP address blocks: 154.194.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76003 (0x128e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 03:54:24 2024 GMT
Not After : Dec 12 03:54:24 2025 GMT
Subject: CN=676e24f4-80eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:64:88:cf:62:19:ae:0f:97:0a:54:f8:55:3b:
4b:75:ce:25:28:11:ac:d7:e2:9c:96:f9:e8:cd:1c:
9b:f0:0d:51:bd:57:bf:5a:bc:d4:d5:be:2c:74:b8:
1a:de:f9:fa:97:c4:b6:65:c3:58:31:d7:4a:fa:f4:
12:c2:97:fe:bd:c8:f6:40:dc:32:10:a6:fd:5d:db:
97:76:a3:e3:39:ad:0d:e9:07:00:f6:b5:3c:22:d6:
45:33:40:d1:12:22:72:7a:4f:a4:be:ea:e6:36:ab:
4e:80:40:04:a3:f2:37:7c:fc:31:a9:26:0d:1e:ab:
82:7b:76:38:11:81:87:d2:cd:dc:ea:cc:05:f8:92:
6e:b1:26:63:82:ef:2e:13:14:aa:24:2f:f5:e6:ad:
e4:b4:68:32:5a:d1:06:be:32:80:ae:f5:0d:2c:d6:
44:a7:0d:39:a5:bf:06:d3:99:65:67:ed:de:9b:c3:
a4:96:20:21:39:29:2c:f6:c5:07:56:56:40:69:6b:
14:25:4c:b7:46:b9:b2:4f:ec:a9:b7:64:20:c8:34:
37:27:ca:f5:bc:37:56:53:43:de:76:13:41:87:3c:
f6:f2:d1:01:6e:54:22:8c:bc:c4:00:70:d9:1f:97:
57:68:05:69:5f:4d:9b:9c:ef:a6:63:fc:0d:9c:2d:
b3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6C:00:98:AD:FF:55:E5:5A:B1:11:A8:EF:CE:87:EC:F6:3D:14:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45084D86C40611EFB292FBA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.36.0/24
Signature Algorithm: sha256WithRSAEncryption
10:55:d5:13:b9:a7:9b:b7:ba:3d:08:ab:a5:c2:7b:78:90:d7:
be:b0:ad:de:44:44:6f:91:0d:a0:ed:a0:4d:6a:29:c5:e7:45:
ef:7f:b4:a9:51:01:10:bb:31:76:67:b1:e5:c0:0b:b2:f4:bf:
80:d5:b0:46:c0:b3:a4:7d:29:9a:53:b0:f6:62:fc:da:ec:00:
f7:6a:10:fa:15:4f:64:35:b8:e2:17:06:49:6e:18:4d:d5:43:
87:4f:a0:71:05:83:74:e8:ff:05:85:fb:4a:31:0e:68:f6:4f:
0b:5d:63:99:29:be:88:e2:6b:aa:43:59:13:ca:c2:b5:4b:b0:
c8:33:de:17:9a:0f:ca:12:b5:52:9e:74:85:93:f9:3e:4c:06:
45:b9:33:55:f0:77:ac:6f:62:e0:bb:b6:bd:2b:05:e1:5c:7c:
01:f1:96:ed:9c:0d:10:3a:41:02:34:64:df:19:33:15:94:ae:
af:52:44:e3:08:f8:ca:1a:d4:4f:bf:e8:54:ec:e3:c4:d1:e2:
ce:be:54:c5:fa:9b:81:7e:6f:d8:16:61:8a:a4:f6:fe:d6:a3:
50:12:19:cb:4d:fd:5a:27:ea:ae:0a:24:ed:7c:29:9a:77:dd:
69:dc:43:5f:2b:ac:90:df:62:99:70:1c:87:f8:ef:18:52:a4:
cb:f5:f3:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASjjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDM1NDI0WhcNMjUxMjEyMDM1NDI0WjAYMRYw
FAYDVQQDEw02NzZlMjRmNC04MGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4WSIz2IZrg+XClT4VTtLdc4lKBGs1+KclvnozRyb8A1RvVe/WrzU1b4s
dLga3vn6l8S2ZcNYMddK+vQSwpf+vcj2QNwyEKb9XduXdqPjOa0N6QcA9rU8ItZF
M0DREiJyek+kvurmNqtOgEAEo/I3fPwxqSYNHquCe3Y4EYGH0s3c6swF+JJusSZj
gu8uExSqJC/15q3ktGgyWtEGvjKArvUNLNZEpw05pb8G05llZ+3em8OkliAhOSks
9sUHVlZAaWsUJUy3RrmyT+ypt2QgyDQ3J8r1vDdWU0PedhNBhzz28tEBblQijLzE
AHDZH5dXaAVpX02bnO+mY/wNnC2zJQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFARs
AJit/1XlWrERqO/Oh+z2PRR4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NTA4NEQ4NkM0MDYxMUVGQjI5MkZCQTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsIkMA0GCSqGSIb3DQEB
CwUAA4IBAQAQVdUTuaebt7o9CKulwnt4kNe+sK3eRERvkQ2g7aBNainF50Xvf7Sp
UQEQuzF2Z7HlwAuy9L+A1bBGwLOkfSmaU7D2Yvza7AD3ahD6FU9kNbjiFwZJbhhN
1UOHT6BxBYN06P8FhftKMQ5o9k8LXWOZKb6I4muqQ1kTysK1S7DIM94Xmg/KErVS
nnSFk/k+TAZFuTNV8Hesb2Lgu7a9KwXhXHwB8ZbtnA0QOkECNGTfGTMVlK6vUkTj
CPjKGtRPv+hU7OPE0eLOvlTF+puBfm/YFmGKpPb+1qNQEhnLTf1aJ+quCiTtfCma
d91p3ENfK6yQ32KZcByH+O8YUqTL9fOz
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:46:45 2025 by rpki-client