Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4755225EC5F411EFBA88E95C762E951A.roa
File: 4755225EC5F411EFBA88E95C762E951A.roa (raw, json)
Hash identifier: bTuYKk9+7QtAmdpX3MhLHIP/SQaGncJ/7HI/sfLSifA=
Subject key identifier: 7A:B8:32:9A:50:3F:88:F7:34:8A:03:23:20:A8:1B:5E:69:49:AF:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4755225EC5F411EFBA88E95C762E951A.roa
Signing time: Sun 29 Dec 2024 14:50:43 +0000
ROA not before: Sun 29 Dec 2024 14:50:39 +0000
ROA not after: Fri 12 Dec 2025 14:50:39 +0000
asID: 984
IP address blocks: 154.213.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77298 (0x12df2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 14:50:39 2024 GMT
Not After : Dec 12 14:50:39 2025 GMT
Subject: CN=677161c3-0a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:9e:33:1b:06:50:bc:59:9d:cf:9b:04:25:
2c:c9:30:85:38:f9:25:6b:f9:bd:79:5a:5c:57:0b:
70:53:6c:51:1c:cd:f6:31:96:2e:5d:d2:8f:29:27:
b6:f0:18:a6:bc:71:1e:d3:8c:ea:0d:dc:ae:24:b2:
90:ef:36:c8:8f:69:7c:02:a0:12:29:41:58:2e:1f:
6b:08:b0:da:b7:94:22:a4:dd:ab:3d:af:94:84:96:
be:81:08:78:66:b1:98:61:48:7d:71:c9:8d:f5:0b:
31:eb:c8:5d:6e:dd:ce:30:08:a7:48:7b:0e:6b:f0:
a7:7f:d4:93:0c:1f:d7:80:69:10:f1:4f:3f:e1:dd:
64:6a:b9:ba:1c:1c:b3:b6:59:4e:de:bc:8e:6c:ad:
4a:18:bf:74:22:b9:a4:df:2e:6a:9f:06:f7:36:45:
36:4f:8a:9a:3a:36:40:15:53:48:72:83:cc:e8:18:
0b:2e:c9:8c:55:66:45:33:c9:a1:5a:5e:df:d8:11:
8b:e1:af:14:4b:d6:e9:61:5e:b1:7b:96:e3:86:ec:
c1:36:06:9a:43:03:3e:bb:ae:67:cd:fc:31:b9:d9:
ee:25:c8:e9:1a:24:84:55:10:b4:d4:08:b9:85:6d:
d5:33:04:44:8e:12:23:c5:e8:10:e3:ae:0d:36:35:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B8:32:9A:50:3F:88:F7:34:8A:03:23:20:A8:1B:5E:69:49:AF:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4755225EC5F411EFBA88E95C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.178.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f9:cb:b7:fc:c8:1e:fc:7b:aa:8a:2b:3d:5e:23:ba:06:bf:
df:03:fa:b4:08:83:e1:ea:0a:da:fb:f5:25:06:4b:5d:66:63:
8b:22:dd:de:79:aa:0b:ad:5c:b0:33:d4:64:23:08:0b:17:f1:
74:b3:07:b4:24:01:0b:d7:1e:0d:b8:32:c3:80:8d:aa:0d:55:
21:2e:fd:d3:00:bf:38:ea:24:46:0a:0b:2d:14:e0:b6:0f:d9:
a8:e4:66:2e:ff:29:e7:42:ef:91:18:a1:52:43:6f:10:57:9e:
4f:10:f8:e9:30:0b:33:f9:04:f1:d5:a7:29:21:f1:2c:12:4a:
c8:85:12:05:58:01:e3:94:42:15:49:ff:5a:39:2b:d4:d5:65:
d5:22:c2:56:9a:ea:1a:e6:0d:1a:8c:de:ba:b7:37:69:40:e9:
5a:97:bb:65:4e:77:48:62:91:38:e1:a7:9b:d6:dc:0a:88:c8:
de:2b:a3:eb:01:fd:de:f2:b6:04:ff:4b:09:a8:29:b6:84:38:
09:0a:31:b4:18:59:b4:66:70:82:28:7d:e2:c2:e4:c0:d7:46:
a1:49:5b:62:aa:29:01:22:40:b8:c4:0d:3a:96:6a:79:91:dc:
72:ef:d0:02:1f:be:30:af:67:50:08:b1:1b:b8:da:2f:2a:c9:
6f:73:4e:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS3yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTQ1MDM5WhcNMjUxMjEyMTQ1MDM5WjAYMRYw
FAYDVQQDEw02NzcxNjFjMy0wYTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtLKeMxsGULxZnc+bBCUsyTCFOPkla/m9eVpcVwtwU2xRHM32MZYuXdKP
KSe28BimvHEe04zqDdyuJLKQ7zbIj2l8AqASKUFYLh9rCLDat5QipN2rPa+UhJa+
gQh4ZrGYYUh9ccmN9Qsx68hdbt3OMAinSHsOa/Cnf9STDB/XgGkQ8U8/4d1karm6
HByztllO3ryObK1KGL90Irmk3y5qnwb3NkU2T4qaOjZAFVNIcoPM6BgLLsmMVWZF
M8mhWl7f2BGL4a8US9bpYV6xe5bjhuzBNgaaQwM+u65nzfwxudnuJcjpGiSEVRC0
1Ai5hW3VMwREjhIjxegQ464NNjUmLQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHq4
MppQP4j3NIoDIyCoG15pSa8UMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NzU1MjI1RUM1RjQxMUVGQkE4OEU5NUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtWyMA0GCSqGSIb3DQEB
CwUAA4IBAQBG+cu3/Mge/Huqiis9XiO6Br/fA/q0CIPh6gra+/UlBktdZmOLIt3e
eaoLrVywM9RkIwgLF/F0swe0JAEL1x4NuDLDgI2qDVUhLv3TAL846iRGCgstFOC2
D9mo5GYu/ynnQu+RGKFSQ28QV55PEPjpMAsz+QTx1acpIfEsEkrIhRIFWAHjlEIV
Sf9aOSvU1WXVIsJWmuoa5g0ajN66tzdpQOlal7tlTndIYpE44aeb1twKiMjeK6Pr
Af3e8rYE/0sJqCm2hDgJCjG0GFm0ZnCCKH3iwuTA10ahSVtiqikBIkC4xA06lmp5
kdxy79ACH74wr2dQCLEbuNovKslvc07u
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:33 2025 by rpki-client