Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6386CD22C5F611EF8C1CD169762E951A.roa
File: 6386CD22C5F611EF8C1CD169762E951A.roa (raw, json)
Hash identifier: l70QmK2y9ioKMoAEHp4E0+PgYroSI+E84wbK4TtSAuU=
Subject key identifier: A9:4A:B2:D9:BA:DC:88:93:C2:5F:9E:1F:3D:AC:57:F9:04:CE:A8:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E04
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6386CD22C5F611EF8C1CD169762E951A.roa
Signing time: Sun 29 Dec 2024 15:05:49 +0000
ROA not before: Sun 29 Dec 2024 15:05:46 +0000
ROA not after: Fri 12 Dec 2025 15:05:46 +0000
asID: 984
IP address blocks: 154.213.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77316 (0x12e04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 15:05:46 2024 GMT
Not After : Dec 12 15:05:46 2025 GMT
Subject: CN=6771654d-9a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:38:e0:a8:90:9c:fa:ef:d6:63:80:a2:94:79:
91:4a:cd:ad:86:f2:d0:1c:64:7d:1d:c4:3b:aa:22:
49:48:5f:e5:49:69:3b:30:67:99:8f:48:6f:f1:e8:
7a:6c:59:75:24:66:0c:c3:d9:84:b6:a9:7b:81:e0:
b7:3c:38:cf:72:d9:cf:32:39:eb:46:fc:11:0c:40:
b3:b7:53:bb:c5:a0:01:2c:90:00:0d:96:e3:70:f4:
52:57:b4:3d:84:63:77:f8:13:9f:f6:79:37:2e:dd:
87:4f:08:28:b7:31:f3:99:86:47:dc:32:ef:0e:fc:
4b:96:ee:8a:5d:67:35:8d:17:c0:21:33:64:f1:4e:
d9:56:d1:2d:56:4a:92:74:0f:ca:e0:32:8d:f2:93:
5f:ee:96:17:d8:d1:7d:25:a6:02:e2:02:a8:a9:82:
be:5b:a1:10:22:e9:97:f8:76:12:0d:c9:94:ca:0b:
eb:56:eb:62:30:e6:c3:3a:0e:2f:78:ad:a5:7d:e7:
da:02:00:04:2c:08:80:45:06:1a:40:4e:05:b2:71:
f0:e2:53:a8:36:c4:00:ab:1b:7d:8e:4c:91:c3:31:
10:39:5c:c8:f6:89:74:46:2f:d7:86:a4:26:37:80:
fa:35:7f:63:f8:e3:e8:09:df:7e:43:80:9e:9e:a1:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4A:B2:D9:BA:DC:88:93:C2:5F:9E:1F:3D:AC:57:F9:04:CE:A8:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6386CD22C5F611EF8C1CD169762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.208.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ff:75:c7:8d:43:3a:be:2a:70:03:90:48:80:f1:c4:51:12:
e9:18:c0:f6:f8:3b:4e:60:43:0d:15:35:2e:10:44:42:db:ff:
78:84:76:b3:65:6a:af:eb:36:ac:f0:fd:38:06:dd:74:03:e3:
66:64:e7:dd:a7:cd:04:1b:7f:a6:b1:62:93:ea:db:07:f7:8e:
f1:57:ef:48:77:07:2e:90:40:20:78:79:2e:77:e8:70:d2:15:
39:09:29:65:5a:38:03:40:f8:13:7a:3b:7b:ae:78:05:51:5d:
ff:dc:ed:4b:38:eb:00:ad:82:cc:4a:16:62:43:f5:a1:74:00:
f3:56:d6:ee:7d:a9:f1:6f:e5:37:b4:62:21:43:d9:3e:75:62:
31:c1:4e:ef:43:2d:44:7a:26:b3:a0:e1:10:55:73:2a:df:a5:
2e:d2:8f:ae:cd:82:5f:a9:4b:7e:e1:3a:62:28:8f:97:0a:df:
ff:c0:f7:fc:91:1b:05:3e:c8:4b:f4:db:69:67:08:93:a3:03:
4f:04:4e:01:66:5c:01:19:80:a8:6b:5a:56:22:83:98:b6:31:
c4:c9:cd:a4:fd:39:41:a4:16:c5:b0:df:3e:57:23:17:3f:d9:
75:28:b2:76:99:82:24:46:ec:c7:a9:35:c9:b5:44:00:ba:d7:
fb:55:97:79
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS4EMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTUwNTQ2WhcNMjUxMjEyMTUwNTQ2WjAYMRYw
FAYDVQQDEw02NzcxNjU0ZC05YTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5DjgqJCc+u/WY4CilHmRSs2thvLQHGR9HcQ7qiJJSF/lSWk7MGeZj0hv
8eh6bFl1JGYMw9mEtql7geC3PDjPctnPMjnrRvwRDECzt1O7xaABLJAADZbjcPRS
V7Q9hGN3+BOf9nk3Lt2HTwgotzHzmYZH3DLvDvxLlu6KXWc1jRfAITNk8U7ZVtEt
VkqSdA/K4DKN8pNf7pYX2NF9JaYC4gKoqYK+W6EQIumX+HYSDcmUygvrVutiMObD
Og4veK2lfefaAgAELAiARQYaQE4FsnHw4lOoNsQAqxt9jkyRwzEQOVzI9ol0Ri/X
hqQmN4D6NX9j+OPoCd9+Q4CenqFQkQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKlK
stm63IiTwl+eHz2sV/kEzqiOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82Mzg2Q0QyMkM1RjYxMUVGOEMxQ0QxNjk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtXQMA0GCSqGSIb3DQEB
CwUAA4IBAQAL/3XHjUM6vipwA5BIgPHEURLpGMD2+DtOYEMNFTUuEERC2/94hHaz
ZWqv6zas8P04Bt10A+NmZOfdp80EG3+msWKT6tsH947xV+9IdwcukEAgeHkud+hw
0hU5CSllWjgDQPgTejt7rngFUV3/3O1LOOsArYLMShZiQ/WhdADzVtbufanxb+U3
tGIhQ9k+dWIxwU7vQy1EeiazoOEQVXMq36Uu0o+uzYJfqUt+4TpiKI+XCt//wPf8
kRsFPshL9NtpZwiTowNPBE4BZlwBGYCoa1pWIoOYtjHEyc2k/TlBpBbFsN8+VyMX
P9l1KLJ2mYIkRuzHqTXJtUQAutf7VZd5
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:40 2025 by rpki-client