Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BB8729EC26411EF986B89B8762E951A.roa
File: 4BB8729EC26411EF986B89B8762E951A.roa (raw, json)
Hash identifier: 3+8elN3SIJyaBhm6+oczmm3OD99w0+Lb128XxuNLA3A=
Subject key identifier: 93:00:5A:53:1B:E7:25:5F:D2:BB:64:C4:A4:D9:CD:B8:A0:CD:E7:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BB8729EC26411EF986B89B8762E951A.roa
Signing time: Wed 25 Dec 2024 02:02:29 +0000
ROA not before: Wed 25 Dec 2024 02:02:26 +0000
ROA not after: Wed 10 Dec 2025 02:02:26 +0000
asID: 984
IP address blocks: 154.199.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74710 (0x123d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:02:26 2024 GMT
Not After : Dec 10 02:02:26 2025 GMT
Subject: CN=676b67b5-b7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:ea:e7:b5:7e:e4:10:5a:26:72:a4:87:f8:
5d:2f:aa:26:47:6d:ba:0b:07:c2:84:91:dd:b4:05:
18:29:5d:3d:2d:68:32:84:dd:7f:fd:13:1f:c3:64:
c8:31:2d:6f:70:60:fd:0b:47:59:9f:86:a1:0c:df:
06:e0:2d:82:c6:f1:f4:d0:f4:d9:c7:30:79:52:f9:
a4:63:48:18:56:ee:b8:40:66:42:a3:50:5a:eb:38:
88:f2:59:87:a4:21:48:37:52:d1:28:77:5c:47:d0:
9a:ec:a0:e9:d9:a4:56:3e:d6:50:83:9e:f1:9f:ae:
3c:2f:b4:ac:5f:29:d2:b4:74:82:3a:7f:73:3b:c9:
52:f0:a0:de:fb:a2:7b:8b:5d:e8:5b:38:17:2e:59:
b1:69:86:4f:82:16:3e:5b:27:b2:4a:66:62:f5:b9:
f9:3f:3a:45:8f:e2:77:3f:f0:39:45:d6:b9:7e:ef:
59:90:3f:c6:57:51:7a:03:2a:da:cf:a5:ed:17:f0:
a2:42:d1:ce:29:dc:4a:f8:45:b6:1d:6f:29:9f:48:
a5:43:b8:67:66:8e:c6:8c:a5:33:0e:d1:da:38:57:
71:1d:80:e2:8e:aa:82:63:8d:3c:d5:68:26:3f:6f:
e6:a5:fd:d0:0c:94:9b:ca:e9:be:e4:bd:7c:98:8f:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:00:5A:53:1B:E7:25:5F:D2:BB:64:C4:A4:D9:CD:B8:A0:CD:E7:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BB8729EC26411EF986B89B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.120.0/24
Signature Algorithm: sha256WithRSAEncryption
44:18:7f:c4:85:ed:6f:9e:96:a5:fd:cd:10:72:ce:6b:dd:c0:
0b:6d:4f:f3:6f:23:53:cd:da:7d:99:78:18:56:23:9b:57:44:
9a:b9:98:c2:81:6e:03:4f:f5:d8:5a:66:61:53:b9:24:6d:9a:
95:99:96:c1:f7:1a:43:48:b4:83:c7:e9:d0:80:9b:11:00:45:
5d:46:4e:ac:a0:d1:e0:a5:dc:4e:47:bf:dc:ac:c8:df:dd:b6:
a5:13:db:f3:ad:02:46:11:ce:5a:d7:bb:5c:6a:c7:5e:7a:06:
54:45:ce:62:eb:a6:73:3c:db:ac:49:e7:8b:d6:3d:42:c4:0e:
70:d0:22:5c:ae:15:6b:7a:37:07:ed:3f:f9:03:6c:79:93:cf:
65:ce:02:c9:a0:54:1d:fb:87:0f:99:65:2f:36:e5:b1:ea:6c:
9f:63:82:57:91:23:b8:93:bc:74:6a:7e:f0:26:59:86:14:45:
d4:3c:ae:65:fa:75:7c:f8:af:af:c9:68:c5:9a:56:8f:ba:e7:
cb:98:5d:c8:64:fc:42:3a:78:d8:76:4a:fc:b1:c3:03:a4:60:
94:ca:97:50:70:5b:ca:01:54:33:1d:ed:7a:79:15:5c:1f:72:
c7:4c:92:55:a8:75:9c:2f:4b:a4:32:8e:ac:97:f8:2e:b8:64:
ed:4c:8e:76
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASPWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDIwMjI2WhcNMjUxMjEwMDIwMjI2WjAYMRYw
FAYDVQQDEw02NzZiNjdiNS1iN2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvUnq57V+5BBaJnKkh/hdL6omR226CwfChJHdtAUYKV09LWgyhN1//RMf
w2TIMS1vcGD9C0dZn4ahDN8G4C2CxvH00PTZxzB5UvmkY0gYVu64QGZCo1Ba6ziI
8lmHpCFIN1LRKHdcR9Ca7KDp2aRWPtZQg57xn648L7SsXynStHSCOn9zO8lS8KDe
+6J7i13oWzgXLlmxaYZPghY+WyeySmZi9bn5PzpFj+J3P/A5Rda5fu9ZkD/GV1F6
Ayraz6XtF/CiQtHOKdxK+EW2HW8pn0ilQ7hnZo7GjKUzDtHaOFdxHYDijqqCY408
1WgmP2/mpf3QDJSbyum+5L18mI8hQwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJMA
WlMb5yVf0rtkxKTZzbigzecWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80QkI4NzI5RUMyNjQxMUVGOTg2Qjg5Qjg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsd4MA0GCSqGSIb3DQEB
CwUAA4IBAQBEGH/Ehe1vnpal/c0Qcs5r3cALbU/zbyNTzdp9mXgYViObV0SauZjC
gW4DT/XYWmZhU7kkbZqVmZbB9xpDSLSDx+nQgJsRAEVdRk6soNHgpdxOR7/crMjf
3balE9vzrQJGEc5a17tcasdeegZURc5i66ZzPNusSeeL1j1CxA5w0CJcrhVrejcH
7T/5A2x5k89lzgLJoFQd+4cPmWUvNuWx6myfY4JXkSO4k7x0an7wJlmGFEXUPK5l
+nV8+K+vyWjFmlaPuufLmF3IZPxCOnjYdkr8scMDpGCUypdQcFvKAVQzHe16eRVc
H3LHTJJVqHWcL0ukMo6sl/guuGTtTI52
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:35 2025 by rpki-client