Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/630E7940C52D11EFA1F1586F762E951A.roa
File: 630E7940C52D11EFA1F1586F762E951A.roa (raw, json)
Hash identifier: Efs5ZHlKv4HjUFIiF4pmxGAaOnePNKVx9eXrSMCskGQ=
Subject key identifier: 16:45:7E:65:DC:58:05:72:3D:8A:F0:32:D2:87:8C:AD:D9:1D:4C:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BCB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/630E7940C52D11EFA1F1586F762E951A.roa
Signing time: Sat 28 Dec 2024 15:07:00 +0000
ROA not before: Sat 28 Dec 2024 15:06:56 +0000
ROA not after: Sun 12 Dec 2027 15:06:56 +0000
asID: 17561
IP address blocks: 154.204.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76747 (0x12bcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 15:06:56 2024 GMT
Not After : Dec 12 15:06:56 2027 GMT
Subject: CN=67701414-8280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:17:78:3f:0d:08:0b:07:32:d5:6a:5b:9e:
82:2f:66:2d:6e:f3:d7:7a:62:63:13:47:03:64:39:
a3:8c:87:40:21:ac:8f:67:94:53:26:58:e4:f0:c8:
68:e2:65:0f:3e:19:9e:09:9b:95:07:17:a3:a1:7e:
3f:7f:5f:7c:f7:fd:2f:08:ac:5d:5c:77:87:fe:29:
41:e7:5b:d4:b6:d8:79:52:d2:b3:38:11:a1:f5:bf:
d7:6f:fb:04:a0:14:ca:dc:0e:87:99:8d:73:f6:f2:
27:0a:0e:ca:fb:69:f1:ae:2f:ed:54:81:a3:eb:16:
54:f7:8c:51:02:c8:03:9f:7c:14:24:70:73:de:88:
43:cd:31:34:c5:d3:4e:cb:f8:dc:59:43:c7:b1:dd:
9f:d7:e1:39:a4:2f:f6:ee:fe:d1:71:1f:92:b6:d3:
8a:0a:df:48:37:d4:55:f7:db:5b:11:9b:64:45:d9:
8e:aa:98:aa:d3:9e:51:f8:b2:0d:1a:30:df:f9:b5:
b4:bb:98:f3:67:25:7b:bb:f6:ed:93:fa:78:7d:1a:
1b:34:1c:82:37:46:d4:2b:c0:ee:4b:97:e1:d8:43:
46:b3:e3:e3:2d:3f:31:b6:9f:75:e9:0c:2c:bd:77:
c3:7c:b3:8b:4f:f0:58:27:1d:57:7d:18:f4:6a:a0:
1b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:45:7E:65:DC:58:05:72:3D:8A:F0:32:D2:87:8C:AD:D9:1D:4C:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/630E7940C52D11EFA1F1586F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:b0:d5:a7:6f:43:58:08:16:d3:2c:f7:78:96:d7:e7:59:b9:
15:88:3d:61:87:d4:2d:6f:be:56:3f:a7:e9:b6:9f:df:4b:97:
f9:11:bd:74:69:4d:8d:82:9b:7a:33:11:a3:91:5a:14:47:e7:
42:25:ca:5a:4b:b9:21:13:0d:ac:87:29:8d:7c:4f:7d:fc:72:
4a:c4:95:2f:17:6b:61:48:44:8b:c9:c4:5d:03:45:89:17:d2:
44:38:0f:f0:b0:a4:b5:05:99:fc:7b:69:74:e5:82:7f:3e:1b:
86:36:ef:b2:34:d7:be:52:91:ec:d0:c8:07:ea:53:fe:5a:96:
b3:cc:7b:0b:c0:d4:c8:24:d2:c2:1e:ba:71:1a:64:e3:80:79:
83:be:86:c3:c5:9f:3e:68:cf:6a:42:18:fc:d2:8c:4c:0f:b5:
f1:e3:50:03:30:73:69:46:8a:0f:26:a5:dd:fa:64:a2:f8:2c:
14:26:96:e5:10:42:65:dd:34:eb:4e:d7:58:28:21:90:77:2d:
40:85:b0:d2:b9:3c:de:70:a3:d2:c6:f1:48:a0:f4:3c:9a:a4:
dd:cb:b9:bc:2d:7b:eb:d4:80:5f:7c:bd:cb:da:cc:e1:48:1b:
a2:72:45:89:ba:c9:7c:69:3c:d7:21:97:a2:c5:87:27:b7:bb:
e4:8d:fa:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASvLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTUwNjU2WhcNMjcxMjEyMTUwNjU2WjAYMRYw
FAYDVQQDEw02NzcwMTQxNC04MjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvZ0XeD8NCAsHMtVqW56CL2YtbvPXemJjE0cDZDmjjIdAIayPZ5RTJljk
8Mho4mUPPhmeCZuVBxejoX4/f1989/0vCKxdXHeH/ilB51vUtth5UtKzOBGh9b/X
b/sEoBTK3A6HmY1z9vInCg7K+2nxri/tVIGj6xZU94xRAsgDn3wUJHBz3ohDzTE0
xdNOy/jcWUPHsd2f1+E5pC/27v7RcR+SttOKCt9IN9RV99tbEZtkRdmOqpiq055R
+LINGjDf+bW0u5jzZyV7u/btk/p4fRobNByCN0bUK8DuS5fh2ENGs+PjLT8xtp91
6QwsvXfDfLOLT/BYJx1XfRj0aqAbUwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBZF
fmXcWAVyPYrwMtKHjK3ZHUy9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MzBFNzk0MEM1MkQxMUVGQTFGMTU4NkY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsxOMA0GCSqGSIb3DQEB
CwUAA4IBAQCpsNWnb0NYCBbTLPd4ltfnWbkViD1hh9Qtb75WP6fptp/fS5f5Eb10
aU2Ngpt6MxGjkVoUR+dCJcpaS7khEw2shymNfE99/HJKxJUvF2thSESLycRdA0WJ
F9JEOA/wsKS1BZn8e2l05YJ/PhuGNu+yNNe+UpHs0MgH6lP+WpazzHsLwNTIJNLC
HrpxGmTjgHmDvobDxZ8+aM9qQhj80oxMD7Xx41ADMHNpRooPJqXd+mSi+CwUJpbl
EEJl3TTrTtdYKCGQdy1AhbDSuTzecKPSxvFIoPQ8mqTdy7m8LXvr1IBffL3L2szh
SBuickWJusl8aTzXIZeixYcnt7vkjfoV
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:57 2025 by rpki-client