Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61EC3CC6C90811EFA1FD9371762E951A.roa
File: 61EC3CC6C90811EFA1FD9371762E951A.roa (raw, json)
Hash identifier: RCKh4g4/WkUlBKyDCBFENWuve8j4GPLmJXLAPq6hB9o=
Subject key identifier: AB:4C:2C:3F:B2:DD:C1:49:4F:A9:3B:4C:FA:DD:E8:01:5B:57:C8:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01327D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61EC3CC6C90811EFA1FD9371762E951A.roa
Signing time: Thu 02 Jan 2025 12:52:11 +0000
ROA not before: Thu 02 Jan 2025 12:52:07 +0000
ROA not after: Mon 13 Dec 2027 12:52:07 +0000
asID: 17561
IP address blocks: 154.221.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78461 (0x1327d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 12:52:07 2025 GMT
Not After : Dec 13 12:52:07 2027 GMT
Subject: CN=67768bfb-53b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:a3:6c:b3:ff:bd:95:a9:3c:e8:87:7d:49:
21:96:19:c2:3a:36:54:3a:61:ec:d2:20:dc:69:79:
b9:e2:16:4f:6f:d2:3a:e5:4a:bb:c0:a2:d8:b3:af:
15:e8:02:3c:68:99:59:39:49:2c:77:50:3a:7b:0e:
7f:c8:7c:5b:d6:a7:b3:5e:8f:e1:4f:b6:45:9a:01:
33:fb:2b:8c:9e:a7:ea:8d:ff:3f:d5:86:c8:d1:7f:
bc:8c:98:dc:7d:80:39:96:e5:a5:59:02:aa:cc:2b:
28:26:5c:f6:16:44:92:8b:ed:59:1d:21:b7:cd:6a:
0b:26:ac:93:64:52:49:6c:bb:3f:ab:cb:8f:b4:de:
ca:db:85:81:29:8d:f9:c9:31:d8:ce:29:56:af:bd:
cf:56:1c:84:0b:4c:8f:88:c0:39:03:86:7b:84:37:
51:67:09:1d:42:fb:1c:87:85:e8:d5:17:76:82:35:
b4:86:fb:f4:08:8f:30:0c:73:5a:70:51:ba:5d:6a:
69:e9:ca:69:64:da:a7:0d:a1:5b:0b:00:f7:51:ba:
e5:61:80:35:22:ab:90:73:1f:8b:e7:63:ac:d1:a7:
98:78:75:4f:da:91:a2:55:83:cb:4e:c0:66:09:42:
b2:a2:b0:6a:2a:62:81:fa:df:5c:b0:03:2d:3c:44:
7f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4C:2C:3F:B2:DD:C1:49:4F:A9:3B:4C:FA:DD:E8:01:5B:57:C8:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61EC3CC6C90811EFA1FD9371762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.203.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d7:dd:90:9f:cb:fb:71:36:00:11:4f:67:10:2b:7f:a4:95:
5b:45:0f:03:5d:79:cb:6e:85:4e:f6:c2:89:52:fd:48:69:7b:
8b:dd:b1:26:87:03:6d:b2:4e:fc:5c:14:a4:25:2f:ad:05:49:
30:f6:1f:76:63:21:0a:0d:17:84:2d:bc:67:ae:47:fb:08:b1:
92:f0:3b:53:a2:00:99:52:0f:d0:b1:bb:bd:db:95:f0:73:61:
91:15:be:d9:69:09:99:3b:b4:ed:27:e7:2d:73:0e:eb:47:eb:
08:20:cc:72:d3:f2:30:80:83:46:68:99:a5:08:83:4a:8d:08:
30:d2:7b:73:78:14:86:bb:e9:d2:99:0a:5f:b6:88:2a:b7:93:
28:98:98:f6:7d:98:9c:88:61:7d:9b:dd:36:cb:23:ff:37:ce:
b9:04:dc:19:61:52:bd:93:df:1a:9d:e9:22:e3:9f:bb:7e:96:
aa:89:25:51:36:75:ed:35:f6:a4:22:e5:37:22:f2:79:1b:40:
d7:b3:a3:c7:d7:f1:94:d5:87:75:ff:31:eb:8a:1c:bf:50:9b:
0d:7d:f7:d9:ba:2a:82:df:64:88:11:a7:42:7c:98:3f:85:ff:
94:d9:0b:1a:c1:ac:d6:9e:b0:76:63:5e:be:ae:eb:a6:d9:e7:
ca:3f:23:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATJ9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTI1MjA3WhcNMjcxMjEzMTI1MjA3WjAYMRYw
FAYDVQQDEw02Nzc2OGJmYi01M2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3bajbLP/vZWpPOiHfUkhlhnCOjZUOmHs0iDcaXm54hZPb9I65Uq7wKLY
s68V6AI8aJlZOUksd1A6ew5/yHxb1qezXo/hT7ZFmgEz+yuMnqfqjf8/1YbI0X+8
jJjcfYA5luWlWQKqzCsoJlz2FkSSi+1ZHSG3zWoLJqyTZFJJbLs/q8uPtN7K24WB
KY35yTHYzilWr73PVhyEC0yPiMA5A4Z7hDdRZwkdQvsch4Xo1Rd2gjW0hvv0CI8w
DHNacFG6XWpp6cppZNqnDaFbCwD3UbrlYYA1IquQcx+L52Os0aeYeHVP2pGiVYPL
TsBmCUKyorBqKmKB+t9csAMtPER/CwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKtM
LD+y3cFJT6k7TPrd6AFbV8gbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MUVDM0NDNkM5MDgxMUVGQTFGRDkzNzE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt3LMA0GCSqGSIb3DQEB
CwUAA4IBAQB8192Qn8v7cTYAEU9nECt/pJVbRQ8DXXnLboVO9sKJUv1IaXuL3bEm
hwNtsk78XBSkJS+tBUkw9h92YyEKDReELbxnrkf7CLGS8DtTogCZUg/Qsbu925Xw
c2GRFb7ZaQmZO7TtJ+ctcw7rR+sIIMxy0/IwgINGaJmlCINKjQgw0ntzeBSGu+nS
mQpftogqt5MomJj2fZiciGF9m902yyP/N865BNwZYVK9k98aneki45+7fpaqiSVR
NnXtNfakIuU3IvJ5G0DXs6PH1/GU1Yd1/zHrihy/UJsNfffZuiqC32SIEadCfJg/
hf+U2QsawazWnrB2Y16+ruum2efKPyOd
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:50:21 2025 by rpki-client