Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5309E1BAC91511EFBEB0D344762E951A.roa
File: 5309E1BAC91511EFBEB0D344762E951A.roa (raw, json)
Hash identifier: XuxivKv8uBUFXtZf49MLbuPopFfWLDj/qxwlvVXNm8o=
Subject key identifier: B9:17:6D:E4:37:71:3F:03:6C:A9:E3:F2:D9:D5:E5:9B:22:A5:F9:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0132CB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5309E1BAC91511EFBEB0D344762E951A.roa
Signing time: Thu 02 Jan 2025 14:24:50 +0000
ROA not before: Thu 02 Jan 2025 14:24:46 +0000
ROA not after: Sat 13 Dec 2025 14:24:46 +0000
asID: 984
IP address blocks: 154.221.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78539 (0x132cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 14:24:46 2025 GMT
Not After : Dec 13 14:24:46 2025 GMT
Subject: CN=6776a1b2-7015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:7a:e6:f1:93:b9:62:ca:77:82:73:1c:8d:
a0:52:cc:93:b8:4c:e0:cd:1d:8f:7c:7c:b8:35:33:
38:33:8e:59:16:31:57:cc:26:79:5d:73:bb:3f:be:
c1:15:2f:88:6f:83:14:95:f4:82:00:8a:15:c5:cd:
d8:f8:12:bc:32:4f:7b:82:1e:79:0a:d4:c7:08:9b:
ed:95:c4:d1:35:e1:c5:ea:18:ec:03:b9:fb:e7:fe:
e6:d6:8a:f9:0c:27:cf:b0:75:7d:da:00:98:e3:60:
57:f9:13:5d:62:10:0b:ba:2a:6c:08:c0:45:ae:35:
7a:b3:9b:e5:e5:1a:3c:17:3a:6d:80:5f:ef:97:36:
e6:17:6b:d9:2c:6c:05:cf:72:26:ba:45:0f:05:79:
23:d5:f4:57:7d:6b:04:9f:3e:45:3f:72:1b:1e:bc:
a4:98:d2:00:76:07:f1:40:ce:0e:a7:b9:09:ed:2e:
8e:85:a5:19:75:24:5b:8f:6e:b8:c6:6c:65:09:aa:
bd:61:95:5d:ef:b8:5c:45:9b:86:27:06:26:72:67:
b3:e8:2e:93:86:7b:7a:a6:95:88:53:19:b4:97:c6:
81:31:4f:e5:6c:f5:97:79:fc:fb:6b:20:d4:88:a7:
9c:b9:60:3a:ba:a0:5e:dc:9c:ec:f1:fa:9f:7b:bb:
11:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:17:6D:E4:37:71:3F:03:6C:A9:E3:F2:D9:D5:E5:9B:22:A5:F9:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5309E1BAC91511EFBEB0D344762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.242.0/24
Signature Algorithm: sha256WithRSAEncryption
79:6b:17:b3:f9:37:c5:d4:75:c1:03:87:c9:66:e4:df:0c:3b:
30:37:3a:4f:4c:6e:1b:45:8c:c5:55:60:e4:7d:ee:19:0e:02:
10:8d:96:c4:89:1b:3a:5f:68:68:db:de:86:83:43:0f:e9:b7:
e8:ac:2e:0c:39:2b:00:4e:df:34:e9:d5:4b:5e:11:4a:d4:35:
3b:bb:4c:49:fb:e3:2f:7c:cd:fb:07:30:b7:63:d9:2e:68:9f:
78:a4:8d:1f:e6:1e:21:d6:8c:32:60:b3:b8:e6:49:54:b5:f6:
a7:86:d4:8a:f7:4d:0f:c1:ca:f6:6c:83:af:31:6c:1a:c7:9f:
e8:81:de:75:ab:6d:76:72:df:2f:c8:21:97:46:93:83:10:55:
e8:26:c8:3e:61:ce:f8:33:25:e5:f6:95:b5:08:e3:c2:bc:4e:
d0:54:49:fa:15:dc:eb:44:e6:ec:4b:83:cf:0b:3d:1d:61:6f:
60:5a:87:57:f2:4c:7b:7d:6c:15:85:fd:68:d8:8c:f4:47:62:
04:d6:e2:9d:86:d6:2c:d1:93:a8:3d:12:3f:52:01:7b:d4:61:
b8:f6:96:e6:7b:31:a2:e9:86:15:98:5e:78:ba:c5:22:a7:f0:
10:95:02:20:e1:ac:70:10:6a:6c:72:7e:66:c1:94:72:f9:2d:
2b:a4:26:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATLLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTQyNDQ2WhcNMjUxMjEzMTQyNDQ2WjAYMRYw
FAYDVQQDEw02Nzc2YTFiMi03MDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsyp65vGTuWLKd4JzHI2gUsyTuEzgzR2PfHy4NTM4M45ZFjFXzCZ5XXO7
P77BFS+Ib4MUlfSCAIoVxc3Y+BK8Mk97gh55CtTHCJvtlcTRNeHF6hjsA7n75/7m
1or5DCfPsHV92gCY42BX+RNdYhALuipsCMBFrjV6s5vl5Ro8FzptgF/vlzbmF2vZ
LGwFz3ImukUPBXkj1fRXfWsEnz5FP3IbHrykmNIAdgfxQM4Op7kJ7S6OhaUZdSRb
j264xmxlCaq9YZVd77hcRZuGJwYmcmez6C6Thnt6ppWIUxm0l8aBMU/lbPWXefz7
ayDUiKecuWA6uqBe3Jzs8fqfe7sROQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLkX
beQ3cT8DbKnj8tnV5Zsipfm+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MzA5RTFCQUM5MTUxMUVGQkVCMEQzNDQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt3yMA0GCSqGSIb3DQEB
CwUAA4IBAQB5axez+TfF1HXBA4fJZuTfDDswNzpPTG4bRYzFVWDkfe4ZDgIQjZbE
iRs6X2ho296Gg0MP6bforC4MOSsATt806dVLXhFK1DU7u0xJ++MvfM37BzC3Y9ku
aJ94pI0f5h4h1owyYLO45klUtfanhtSK900Pwcr2bIOvMWwax5/ogd51q212ct8v
yCGXRpODEFXoJsg+Yc74MyXl9pW1COPCvE7QVEn6FdzrRObsS4PPCz0dYW9gWodX
8kx7fWwVhf1o2Iz0R2IE1uKdhtYs0ZOoPRI/UgF71GG49pbmezGi6YYVmF54usUi
p/AQlQIg4axwEGpscn5mwZRy+S0rpCYG
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:46 2025 by rpki-client