Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67417600C52011EFADFDD69C762E951A.roa
File: 67417600C52011EFADFDD69C762E951A.roa (raw, json)
Hash identifier: EwGZrxqsJdDo9zsG1URVk42KRYCpQDTM05F8vFDv5y0=
Subject key identifier: 1C:4E:9B:1B:7F:D4:56:C4:CE:73:E4:34:66:1C:4B:C6:E9:67:3C:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B51
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67417600C52011EFADFDD69C762E951A.roa
Signing time: Sat 28 Dec 2024 13:34:03 +0000
ROA not before: Sat 28 Dec 2024 13:34:00 +0000
ROA not after: Sun 12 Dec 2027 13:34:00 +0000
asID: 17561
IP address blocks: 154.203.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76625 (0x12b51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:34:00 2024 GMT
Not After : Dec 12 13:34:00 2027 GMT
Subject: CN=676ffe4b-73a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6b:2f:f2:78:58:11:29:16:25:4a:48:b0:5a:
fe:a0:4b:77:2c:7c:dd:37:cc:2c:82:e9:66:fc:31:
35:cc:87:ec:dd:86:20:2a:8b:8f:38:51:6b:ac:01:
04:67:a0:ee:79:88:fc:af:c7:03:2c:5f:91:ca:9f:
f7:b8:9a:4a:a0:6b:39:16:7d:f0:a9:47:eb:dd:96:
8a:04:1f:87:e3:a5:00:46:14:95:ca:51:1c:30:44:
44:10:32:b8:a2:8d:53:84:3e:fe:75:fc:3c:ec:72:
b4:d7:fd:51:87:cd:87:7c:56:6f:d4:dc:71:cc:dc:
29:b7:76:a2:d0:72:a7:ed:39:58:be:9a:9d:f5:5f:
c6:48:fe:58:f5:85:93:ac:ef:18:a4:af:bd:a6:5c:
4e:41:fc:5e:a3:a4:43:2d:a1:7f:42:62:75:cc:06:
e0:9a:32:e1:80:06:b3:56:1e:96:df:8f:5e:bc:fc:
ea:b8:2e:a6:bc:4d:76:4a:4b:f1:7d:80:f6:89:ca:
1c:2a:13:a2:ef:3f:42:00:10:23:79:af:99:73:15:
15:38:54:ee:e0:39:98:1e:65:4e:5e:f9:f8:c6:cb:
7d:b9:95:f2:8e:2f:b4:6b:1b:98:a4:27:86:84:a0:
5f:b1:f6:34:b7:d3:05:8d:86:44:26:1a:ec:86:fb:
17:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4E:9B:1B:7F:D4:56:C4:CE:73:E4:34:66:1C:4B:C6:E9:67:3C:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67417600C52011EFADFDD69C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.93.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:ed:80:96:63:54:47:f5:79:60:27:e3:7b:ec:74:ce:34:fe:
ee:2f:b6:94:f6:15:9c:84:51:7f:f9:3d:30:70:58:d0:e9:b8:
c3:ff:92:03:bc:62:ba:08:66:23:50:47:ea:fb:3d:dd:c2:25:
27:22:62:10:ef:8d:52:3a:1e:a1:df:64:27:ff:9c:c4:ef:21:
53:64:ba:21:d3:91:11:53:d2:b8:f5:38:a3:5c:06:a5:34:c7:
2a:17:cf:31:d6:3b:ca:98:a0:9e:6b:ca:24:31:3d:a8:5c:38:
c6:d5:c1:96:94:d7:d0:19:ef:60:de:80:cc:11:e5:4f:b8:2a:
62:a4:37:09:e7:30:1e:cc:13:20:2c:09:18:86:a2:8d:a2:e6:
2c:30:1a:c6:8e:f4:2d:84:b3:ea:7e:3c:15:96:9e:10:b7:a1:
48:16:6c:91:d0:3d:8b:91:33:e8:f9:10:21:c1:13:2c:7b:60:
9b:fb:a5:a7:15:c5:77:11:1f:1c:0b:c4:6a:8d:d8:ae:3b:60:
64:f3:2a:91:37:88:da:6c:81:f2:6b:10:92:cb:49:b9:98:08:
cb:40:4e:a8:f1:40:57:08:87:d4:59:89:fc:75:49:30:0f:25:
d7:9f:b5:5e:71:d2:82:9a:b0:be:44:63:46:f6:bf:b0:49:12:
8e:f9:12:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAStRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTMzNDAwWhcNMjcxMjEyMTMzNDAwWjAYMRYw
FAYDVQQDEw02NzZmZmU0Yi03M2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0Wsv8nhYESkWJUpIsFr+oEt3LHzdN8wsgulm/DE1zIfs3YYgKouPOFFr
rAEEZ6DueYj8r8cDLF+Ryp/3uJpKoGs5Fn3wqUfr3ZaKBB+H46UARhSVylEcMERE
EDK4oo1ThD7+dfw87HK01/1Rh82HfFZv1NxxzNwpt3ai0HKn7TlYvpqd9V/GSP5Y
9YWTrO8YpK+9plxOQfxeo6RDLaF/QmJ1zAbgmjLhgAazVh6W349evPzquC6mvE12
SkvxfYD2icocKhOi7z9CABAjea+ZcxUVOFTu4DmYHmVOXvn4xst9uZXyji+0axuY
pCeGhKBfsfY0t9MFjYZEJhrshvsXYwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBxO
mxt/1FbEznPkNGYcS8bpZzzQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NzQxNzYwMEM1MjAxMUVGQURGREQ2OUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmstdMA0GCSqGSIb3DQEB
CwUAA4IBAQC47YCWY1RH9XlgJ+N77HTONP7uL7aU9hWchFF/+T0wcFjQ6bjD/5ID
vGK6CGYjUEfq+z3dwiUnImIQ741SOh6h32Qn/5zE7yFTZLoh05ERU9K49TijXAal
NMcqF88x1jvKmKCea8okMT2oXDjG1cGWlNfQGe9g3oDMEeVPuCpipDcJ5zAezBMg
LAkYhqKNouYsMBrGjvQthLPqfjwVlp4Qt6FIFmyR0D2LkTPo+RAhwRMse2Cb+6Wn
FcV3ER8cC8RqjdiuO2Bk8yqRN4jabIHyaxCSy0m5mAjLQE6o8UBXCIfUWYn8dUkw
DyXXn7VecdKCmrC+RGNG9r+wSRKO+RLH
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:43:42 2025 by rpki-client