Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F39100AC1BD11EF94FAA88C762E951A.roa
File: 5F39100AC1BD11EF94FAA88C762E951A.roa (raw, json)
Hash identifier: vpePmB0Ww+kBea5964cnJZ7NFNC//AIXhotK9VpaQKM=
Subject key identifier: 05:38:9E:73:FD:F7:0F:34:FC:B3:25:03:07:06:90:65:4E:DD:A4:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012207
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F39100AC1BD11EF94FAA88C762E951A.roa
Signing time: Tue 24 Dec 2024 06:07:36 +0000
ROA not before: Tue 24 Dec 2024 06:07:33 +0000
ROA not after: Wed 10 Dec 2025 06:07:33 +0000
asID: 984
IP address blocks: 154.193.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74247 (0x12207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 06:07:33 2024 GMT
Not After : Dec 10 06:07:33 2025 GMT
Subject: CN=676a4fa8-3b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:08:de:ec:90:eb:f9:83:37:5f:a1:49:f3:
eb:6b:41:72:7c:e7:27:9a:1b:48:97:56:74:63:8a:
5e:be:85:d6:44:c0:f6:58:45:af:bc:37:d8:7e:3c:
13:e8:f2:ff:22:bf:f4:21:bc:d6:3a:70:0c:80:87:
3d:6a:8e:c5:54:8c:0d:33:07:b1:09:07:83:c8:90:
70:1b:e6:50:18:5e:13:98:e7:88:9b:34:55:86:b3:
2c:ab:ad:98:ab:b0:4e:58:94:74:0b:17:38:59:a1:
31:ef:de:1f:85:dd:d6:48:df:c5:5e:75:88:99:fd:
0c:ff:91:b6:5b:03:2d:98:4c:a7:2d:ef:a2:86:45:
ea:38:23:2f:74:f2:72:9e:c2:ed:cf:e6:76:4d:23:
64:7b:ca:0f:20:f8:9e:8e:dd:ad:ea:89:5c:1a:f2:
81:9a:b7:17:3e:a6:87:f7:93:07:b3:b3:76:c3:6a:
89:a7:81:b3:46:5c:3c:1b:07:cc:06:54:3a:ff:bf:
0a:ac:a0:0c:c2:08:bc:44:6d:1e:c8:57:b5:c2:30:
ad:81:88:75:c5:cc:e6:27:0a:83:39:01:95:91:44:
b4:48:ec:3a:4f:b1:ee:67:fc:75:d2:75:2b:96:4d:
4b:ff:4c:13:7f:c4:68:7c:5e:c7:6f:be:84:b5:63:
43:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:38:9E:73:FD:F7:0F:34:FC:B3:25:03:07:06:90:65:4E:DD:A4:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F39100AC1BD11EF94FAA88C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:9e:56:95:a0:6a:f7:e9:1d:53:bd:59:61:85:5f:8c:84:ce:
35:d5:f3:07:57:b3:4d:b1:8e:01:dc:95:a2:c9:23:1d:a9:13:
4d:f6:47:50:5c:a6:6f:4c:6b:8c:7e:8a:fa:28:8c:b7:83:d6:
03:7a:1e:63:96:b9:1a:ac:44:ed:23:72:8a:bc:58:8c:d0:39:
1d:f0:6c:6f:f8:4d:a9:4d:fa:f5:92:5f:f2:46:17:30:0e:3a:
d1:d3:38:da:4e:1f:e1:e7:1d:1f:6e:86:d2:f9:27:bc:0f:53:
8a:df:c2:d1:e5:f0:ba:e1:c3:93:d7:5b:37:ed:14:ec:1e:ab:
26:47:08:33:2b:5a:22:17:f0:16:83:35:34:83:8c:cf:26:70:
dd:1f:28:c6:94:6e:68:79:4b:49:19:86:ad:0b:fe:99:ca:4d:
88:90:58:42:b5:a0:e5:08:2a:44:86:9f:40:1a:40:ce:c3:bf:
52:70:0e:47:85:dc:e1:fe:aa:c1:af:5f:fa:cc:51:f2:f5:1d:
52:3c:f2:20:3b:59:ef:fd:bb:a9:59:31:59:6e:52:b8:a6:cd:
fd:5c:cb:ff:a5:00:69:5b:65:1f:f3:c0:d9:2f:8f:de:46:10:
6f:1a:9e:d9:e6:e9:ed:20:77:f7:4a:75:af:d4:f7:93:fa:1d:
a9:95:3b:d8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASIHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDYwNzMzWhcNMjUxMjEwMDYwNzMzWjAYMRYw
FAYDVQQDEw02NzZhNGZhOC0zYjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy/sI3uyQ6/mDN1+hSfPra0FyfOcnmhtIl1Z0Y4pevoXWRMD2WEWvvDfY
fjwT6PL/Ir/0IbzWOnAMgIc9ao7FVIwNMwexCQeDyJBwG+ZQGF4TmOeImzRVhrMs
q62Yq7BOWJR0Cxc4WaEx794fhd3WSN/FXnWImf0M/5G2WwMtmEynLe+ihkXqOCMv
dPJynsLtz+Z2TSNke8oPIPiejt2t6olcGvKBmrcXPqaH95MHs7N2w2qJp4GzRlw8
GwfMBlQ6/78KrKAMwgi8RG0eyFe1wjCtgYh1xczmJwqDOQGVkUS0SOw6T7HuZ/x1
0nUrlk1L/0wTf8RofF7Hb76EtWNDSwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAU4
nnP99w80/LMlAwcGkGVO3aTPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RjM5MTAwQUMxQkQxMUVGOTRGQUE4OEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsHAMA0GCSqGSIb3DQEB
CwUAA4IBAQBKnlaVoGr36R1TvVlhhV+MhM411fMHV7NNsY4B3JWiySMdqRNN9kdQ
XKZvTGuMfor6KIy3g9YDeh5jlrkarETtI3KKvFiM0Dkd8Gxv+E2pTfr1kl/yRhcw
DjrR0zjaTh/h5x0fbobS+Se8D1OK38LR5fC64cOT11s37RTsHqsmRwgzK1oiF/AW
gzU0g4zPJnDdHyjGlG5oeUtJGYatC/6Zyk2IkFhCtaDlCCpEhp9AGkDOw79ScA5H
hdzh/qrBr1/6zFHy9R1SPPIgO1nv/bupWTFZblK4ps39XMv/pQBpW2Uf88DZL4/e
RhBvGp7Z5untIHf3SnWv1PeT+h2plTvY
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:43 2025 by rpki-client