Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6673AD6AC63811EF9A0A9486762E951A.roa
File: 6673AD6AC63811EF9A0A9486762E951A.roa (raw, json)
Hash identifier: RXp+yIukM5uDApmrzEpjbkhXXJmzfCmpbZ/1iBMFjH4=
Subject key identifier: ED:74:22:BE:FF:DD:6C:2D:99:C9:03:62:74:3C:C3:9B:54:B5:79:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01302F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6673AD6AC63811EF9A0A9486762E951A.roa
Signing time: Sun 29 Dec 2024 22:58:21 +0000
ROA not before: Sun 29 Dec 2024 22:58:17 +0000
ROA not after: Sun 12 Dec 2027 22:58:17 +0000
asID: 17561
IP address blocks: 154.217.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77871 (0x1302f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 22:58:17 2024 GMT
Not After : Dec 12 22:58:17 2027 GMT
Subject: CN=6771d40d-0e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:bc:50:f4:e4:92:10:44:3a:1b:8b:1b:f3:
ad:cd:17:fe:83:00:dc:43:5c:04:92:82:35:bf:4d:
4f:6a:60:93:1f:ca:99:3b:44:b1:0d:69:a2:41:75:
41:74:81:2e:b4:cd:6a:40:0a:6b:b1:54:6e:09:5a:
9a:e3:94:ea:e1:6b:05:ed:39:2f:f0:22:eb:9a:d8:
cb:76:6e:ef:a5:8d:a8:c2:c1:3f:82:a1:47:8d:b5:
d4:e2:67:97:9c:8a:e6:72:e2:df:17:c4:39:2d:c1:
f7:62:bf:3e:28:96:15:48:a4:0d:7f:c7:60:fa:56:
b6:ad:dc:e4:76:8e:fe:84:07:5c:dd:b1:c5:74:7c:
02:a4:4f:5d:76:e6:15:dc:05:b1:4b:e7:d6:1c:da:
89:d9:5b:85:b3:d1:f1:11:ac:fb:a0:35:10:85:57:
95:46:e2:c3:70:62:f8:5c:40:4a:e0:4d:a3:4a:9a:
ac:2b:3c:2a:7c:88:49:f6:f5:7a:fc:26:f4:b7:8d:
e7:82:ba:ff:9e:7c:ec:1b:e1:15:a8:43:8d:10:d5:
d8:1d:63:9f:0b:30:2a:11:95:02:b9:20:d0:d6:a9:
a7:99:9a:dc:62:cf:c7:20:ec:4e:67:a6:04:13:ea:
ff:20:88:d1:a3:8c:b3:be:02:8a:46:75:e6:ff:5b:
94:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:74:22:BE:FF:DD:6C:2D:99:C9:03:62:74:3C:C3:9B:54:B5:79:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6673AD6AC63811EF9A0A9486762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.251.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:fc:d4:27:a6:ca:86:3c:1a:f8:55:be:32:8f:a4:1c:1c:6c:
93:56:80:cb:eb:bb:5b:b0:cd:6c:ef:f4:b4:54:43:f1:0e:79:
13:4c:15:81:39:e9:e2:78:6c:46:12:68:8c:6d:e7:49:78:87:
68:19:b2:25:e4:38:a8:d2:68:7b:a7:e6:97:92:9c:da:61:aa:
0c:8f:32:f8:95:41:b5:42:be:85:b5:5e:50:18:69:69:17:60:
e7:5e:9d:dc:a1:7f:a9:2c:ff:e4:be:a7:60:14:c0:cd:65:70:
ed:17:48:c4:83:c9:48:21:a6:22:35:56:09:20:9c:05:de:99:
5e:78:8b:8b:cb:77:7b:e0:1b:7d:5a:98:9d:69:c1:6e:b1:6d:
28:fd:e0:9c:52:1e:54:19:0e:20:eb:46:b8:68:06:ff:f8:e9:
03:43:6a:1f:69:f7:32:7a:34:f5:59:87:4f:81:fb:c8:ce:4c:
b3:4d:4d:64:7c:42:f3:8b:c7:04:55:96:ec:e7:22:5c:80:a4:
78:a5:59:3f:af:c5:22:54:32:7a:a5:ee:d9:34:e4:45:af:ff:
99:59:d0:52:9f:75:1e:9c:50:b5:0a:cd:27:84:88:ce:64:5c:
f3:c6:ef:06:38:e2:72:8a:91:cb:33:4a:23:b8:21:7e:e6:a8:
ad:ea:14:bd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATAvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MjI1ODE3WhcNMjcxMjEyMjI1ODE3WjAYMRYw
FAYDVQQDEw02NzcxZDQwZC0wZTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxAy8UPTkkhBEOhuLG/OtzRf+gwDcQ1wEkoI1v01PamCTH8qZO0SxDWmi
QXVBdIEutM1qQAprsVRuCVqa45Tq4WsF7Tkv8CLrmtjLdm7vpY2owsE/gqFHjbXU
4meXnIrmcuLfF8Q5LcH3Yr8+KJYVSKQNf8dg+la2rdzkdo7+hAdc3bHFdHwCpE9d
duYV3AWxS+fWHNqJ2VuFs9HxEaz7oDUQhVeVRuLDcGL4XEBK4E2jSpqsKzwqfIhJ
9vV6/Cb0t43ngrr/nnzsG+EVqEONENXYHWOfCzAqEZUCuSDQ1qmnmZrcYs/HIOxO
Z6YEE+r/IIjRo4yzvgKKRnXm/1uUzQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFO10
Ir7/3WwtmckDYnQ8w5tUtXk3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NjczQUQ2QUM2MzgxMUVGOUEwQTk0ODY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtn7MA0GCSqGSIb3DQEB
CwUAA4IBAQC5/NQnpsqGPBr4Vb4yj6QcHGyTVoDL67tbsM1s7/S0VEPxDnkTTBWB
OenieGxGEmiMbedJeIdoGbIl5Dio0mh7p+aXkpzaYaoMjzL4lUG1Qr6FtV5QGGlp
F2DnXp3coX+pLP/kvqdgFMDNZXDtF0jEg8lIIaYiNVYJIJwF3pleeIuLy3d74Bt9
WpidacFusW0o/eCcUh5UGQ4g60a4aAb/+OkDQ2ofafcyejT1WYdPgfvIzkyzTU1k
fELzi8cEVZbs5yJcgKR4pVk/r8UiVDJ6pe7ZNORFr/+ZWdBSn3UenFC1Cs0nhIjO
ZFzzxu8GOOJyipHLM0ojuCF+5qit6hS9
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:04 2025 by rpki-client