Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/678BBF2AC26F11EF81942C8B762E951A.roa
File: 678BBF2AC26F11EF81942C8B762E951A.roa (raw, json)
Hash identifier: 9TCTOV/ew114/5kNEAh3XXHAKcz215bXKm0qBO+gLGc=
Subject key identifier: 7B:D2:3D:5E:A5:35:5A:AA:21:56:EC:27:0B:0F:4D:AD:2E:E8:6B:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012452
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/678BBF2AC26F11EF81942C8B762E951A.roa
Signing time: Wed 25 Dec 2024 03:22:01 +0000
ROA not before: Wed 25 Dec 2024 03:21:57 +0000
ROA not after: Wed 10 Dec 2025 03:21:57 +0000
asID: 984
IP address blocks: 154.211.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74834 (0x12452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:21:57 2024 GMT
Not After : Dec 10 03:21:57 2025 GMT
Subject: CN=676b7a59-4ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4c:c6:c1:db:fe:06:bb:fe:5e:69:93:40:ea:
b4:a3:84:b9:04:e6:ec:b7:44:23:7f:ef:6e:f1:0f:
73:dc:6a:ae:30:9a:ac:c0:76:b5:cd:fa:01:78:fc:
31:0e:f4:9c:81:87:e0:a1:4f:a5:ab:94:07:9d:02:
f8:69:4b:63:46:c8:f7:d8:6f:b6:12:e9:5d:db:b6:
41:ed:a3:03:16:0d:87:77:70:55:06:e7:37:dd:7e:
9d:d7:76:67:06:37:10:7c:af:6a:1e:2c:f6:d2:27:
ac:93:2a:d1:ea:36:b3:36:37:fe:09:e0:ca:9e:11:
49:af:2a:03:a9:7c:77:bd:06:4d:b6:1b:e6:50:8a:
9d:5c:a2:50:0d:e4:80:33:11:7f:7c:46:ed:f9:ee:
c5:d3:36:08:d4:d8:8a:17:3d:39:cf:1d:91:f2:6d:
26:4a:1c:a9:66:2e:1d:61:e7:98:0d:3a:a5:e6:80:
c8:49:2f:49:29:63:25:fe:be:d1:11:e3:93:61:d3:
f1:ca:85:5e:30:78:e8:25:19:08:dd:76:2e:88:15:
2b:d5:33:e4:24:1f:60:fa:ab:f6:a4:ff:1b:d1:a5:
26:88:a8:60:36:b0:d9:e8:cc:7a:0b:23:82:7e:ef:
fa:9e:ba:fe:24:e3:e1:8f:b7:61:f0:c5:5d:79:09:
20:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D2:3D:5E:A5:35:5A:AA:21:56:EC:27:0B:0F:4D:AD:2E:E8:6B:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/678BBF2AC26F11EF81942C8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.192.0/24
Signature Algorithm: sha256WithRSAEncryption
87:de:cb:3a:4c:3a:6d:8b:0a:cd:37:d0:a7:f8:c7:45:85:04:
4e:96:51:cf:31:36:15:0d:26:b9:06:53:b9:f3:1f:a0:0f:86:
98:49:99:e2:a6:02:9b:bd:9d:9b:30:c8:a5:45:80:b8:17:94:
79:fc:83:03:a7:5b:4e:5b:13:34:25:e4:da:9a:c0:88:aa:60:
a4:2c:96:2b:6f:ef:d5:66:8e:33:30:fe:41:56:14:9b:73:7e:
51:d0:56:d0:df:6f:f4:5f:c8:a6:c4:e7:8b:b7:b2:dd:f8:8a:
d8:04:c1:6a:64:4a:ac:9f:54:20:94:94:07:65:1a:14:f7:62:
1a:b9:4a:e4:1e:d9:4d:0c:3a:b5:89:74:92:f5:8a:4b:87:69:
e0:af:e2:67:fd:2c:b8:c6:30:5a:cd:11:17:9c:0b:03:fb:f5:
df:60:c2:3d:d2:45:92:87:b3:14:98:38:be:ce:3f:cf:b8:ef:
dc:97:70:9b:c4:e6:b4:98:e3:97:56:6d:7d:0c:49:14:84:e4:
e6:aa:db:7c:87:78:16:9c:a9:1d:b4:ae:3e:75:b1:a4:52:8a:
16:45:56:fb:89:11:10:cc:cd:ce:ff:31:c9:bb:b6:9e:13:af:
55:94:07:e2:71:2e:4f:a0:80:7c:e0:01:69:9f:8b:b1:18:8c:
69:eb:db:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASRSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDMyMTU3WhcNMjUxMjEwMDMyMTU3WjAYMRYw
FAYDVQQDEw02NzZiN2E1OS00Y2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5UzGwdv+Brv+XmmTQOq0o4S5BObst0Qjf+9u8Q9z3GquMJqswHa1zfoB
ePwxDvScgYfgoU+lq5QHnQL4aUtjRsj32G+2Euld27ZB7aMDFg2Hd3BVBuc33X6d
13ZnBjcQfK9qHiz20ieskyrR6jazNjf+CeDKnhFJryoDqXx3vQZNthvmUIqdXKJQ
DeSAMxF/fEbt+e7F0zYI1NiKFz05zx2R8m0mShypZi4dYeeYDTql5oDISS9JKWMl
/r7REeOTYdPxyoVeMHjoJRkI3XYuiBUr1TPkJB9g+qv2pP8b0aUmiKhgNrDZ6Mx6
CyOCfu/6nrr+JOPhj7dh8MVdeQkgfwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHvS
PV6lNVqqIVbsJwsPTa0u6GtJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NzhCQkYyQUMyNkYxMUVGODE5NDJDOEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtPAMA0GCSqGSIb3DQEB
CwUAA4IBAQCH3ss6TDptiwrNN9Cn+MdFhQROllHPMTYVDSa5BlO58x+gD4aYSZni
pgKbvZ2bMMilRYC4F5R5/IMDp1tOWxM0JeTamsCIqmCkLJYrb+/VZo4zMP5BVhSb
c35R0FbQ32/0X8imxOeLt7Ld+IrYBMFqZEqsn1QglJQHZRoU92IauUrkHtlNDDq1
iXSS9YpLh2ngr+Jn/Sy4xjBazREXnAsD+/XfYMI90kWSh7MUmDi+zj/PuO/cl3Cb
xOa0mOOXVm19DEkUhOTmqtt8h3gWnKkdtK4+dbGkUooWRVb7iREQzM3O/zHJu7ae
E69VlAficS5PoIB84AFpn4uxGIxp69sJ
-----END CERTIFICATE-----
Generated at Fri Apr 11 01:50:10 2025 by rpki-client