Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F6B9A04C52611EF91752244762E951A.roa
File: 5F6B9A04C52611EF91752244762E951A.roa (raw, json)
Hash identifier: 1jzPFi7uAbvfQM/s99Egd5+2gCVVXerA7SVOKjrJnHA=
Subject key identifier: 36:1C:E7:D6:36:EF:B4:A2:12:23:A0:1B:EA:49:64:CF:41:A4:B6:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B89
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F6B9A04C52611EF91752244762E951A.roa
Signing time: Sat 28 Dec 2024 14:16:47 +0000
ROA not before: Sat 28 Dec 2024 14:16:43 +0000
ROA not after: Fri 12 Dec 2025 14:16:43 +0000
asID: 984
IP address blocks: 154.204.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76681 (0x12b89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:16:43 2024 GMT
Not After : Dec 12 14:16:43 2025 GMT
Subject: CN=6770084f-c999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:23:40:50:8d:a4:26:f6:60:78:1c:02:4d:
bd:67:bf:19:08:1d:af:ff:a5:ab:4b:73:e0:0c:56:
66:6b:5e:9c:ef:1d:a7:59:8d:83:82:d5:89:17:80:
ed:ca:6e:0c:91:3b:59:f9:b2:99:59:f6:55:55:6e:
c2:35:e4:9a:ce:58:77:f2:0c:f4:ad:98:ba:c9:59:
b8:70:df:72:f0:97:71:8e:1f:7f:3b:72:06:b7:c6:
13:f5:28:46:01:68:b2:d4:0e:65:b2:ae:8e:9b:ce:
47:0a:fe:e3:a4:f1:a1:63:bc:16:81:e1:b0:ee:7f:
72:c5:ee:42:5b:2d:40:0f:5c:81:8a:6f:ef:cf:a7:
e0:e6:74:8a:b9:6f:af:f4:88:72:ab:96:e3:b9:8a:
90:0e:b1:fd:ae:43:b8:8c:7e:eb:87:f3:ff:cd:3a:
82:a8:e5:01:3b:52:23:d8:17:c9:d5:d5:87:ac:f9:
f6:09:23:80:ba:da:8a:86:97:d0:71:c1:02:f2:4f:
bf:31:f3:53:74:92:ae:50:43:fd:bf:1f:a2:27:b7:
19:9a:87:8c:db:36:0a:73:f8:2c:ab:cc:47:3e:00:
e8:a6:fb:d6:ef:18:76:94:65:d2:16:76:f7:f8:37:
ae:f0:01:21:6d:70:7d:0a:31:1a:f0:9c:63:85:23:
ae:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1C:E7:D6:36:EF:B4:A2:12:23:A0:1B:EA:49:64:CF:41:A4:B6:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F6B9A04C52611EF91752244762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.1.0/24
Signature Algorithm: sha256WithRSAEncryption
68:46:fe:f0:02:b5:5b:c5:75:3a:e4:65:78:76:3e:38:45:e4:
ba:05:82:32:bf:76:e4:1b:ba:cc:2a:6d:22:38:fd:65:42:ac:
ac:85:3d:2e:55:79:c1:70:4a:03:e6:af:7c:ea:93:eb:89:c7:
5e:d7:92:51:e5:f0:53:ac:9d:85:94:28:6b:82:23:eb:4d:65:
c4:24:ec:d0:4f:2d:bb:04:2d:9d:37:f3:34:21:c2:9f:02:18:
e6:8b:25:9c:11:67:3f:75:aa:96:64:93:d9:01:11:f6:d5:63:
f5:a8:6a:e3:d8:27:b8:73:2a:69:d3:e7:41:17:e7:53:1a:a2:
37:ad:f2:cb:e0:a3:ca:ae:07:10:37:53:45:d3:76:95:c9:3e:
2d:a2:45:83:cf:bf:8a:e3:e5:d3:64:c1:2f:82:50:cd:02:63:
24:06:29:ac:d6:1e:60:af:15:41:8d:56:7d:a4:93:a2:84:4c:
5f:c1:5f:71:86:69:2e:6a:f4:d6:24:9d:a9:61:e4:93:8e:a4:
88:f1:b9:6d:5d:49:b3:16:51:86:19:4e:5b:8d:14:25:3a:c2:
76:f9:d0:50:f5:8d:31:04:2c:cb:3e:93:7b:74:aa:27:ba:0e:
2f:14:7b:73:61:2c:dd:a0:01:ac:7a:cb:b3:0a:59:fe:02:e0:
8b:d6:ef:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASuJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTQxNjQzWhcNMjUxMjEyMTQxNjQzWjAYMRYw
FAYDVQQDEw02NzcwMDg0Zi1jOTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtbwjQFCNpCb2YHgcAk29Z78ZCB2v/6WrS3PgDFZma16c7x2nWY2DgtWJ
F4Dtym4MkTtZ+bKZWfZVVW7CNeSazlh38gz0rZi6yVm4cN9y8Jdxjh9/O3IGt8YT
9ShGAWiy1A5lsq6Om85HCv7jpPGhY7wWgeGw7n9yxe5CWy1AD1yBim/vz6fg5nSK
uW+v9Ihyq5bjuYqQDrH9rkO4jH7rh/P/zTqCqOUBO1Ij2BfJ1dWHrPn2CSOAutqK
hpfQccEC8k+/MfNTdJKuUEP9vx+iJ7cZmoeM2zYKc/gsq8xHPgDopvvW7xh2lGXS
Fnb3+Deu8AEhbXB9CjEa8JxjhSOugwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDYc
59Y277SiEiOgG+pJZM9BpLYDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RjZCOUEwNEM1MjYxMUVGOTE3NTIyNDQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmswBMA0GCSqGSIb3DQEB
CwUAA4IBAQBoRv7wArVbxXU65GV4dj44ReS6BYIyv3bkG7rMKm0iOP1lQqyshT0u
VXnBcEoD5q986pPricde15JR5fBTrJ2FlChrgiPrTWXEJOzQTy27BC2dN/M0IcKf
AhjmiyWcEWc/daqWZJPZARH21WP1qGrj2Ce4cypp0+dBF+dTGqI3rfLL4KPKrgcQ
N1NF03aVyT4tokWDz7+K4+XTZMEvglDNAmMkBims1h5grxVBjVZ9pJOihExfwV9x
hmkuavTWJJ2pYeSTjqSI8bltXUmzFlGGGU5bjRQlOsJ2+dBQ9Y0xBCzLPpN7dKon
ug4vFHtzYSzdoAGsesuzCln+AuCL1u/1
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:03 2025 by rpki-client