Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69561668C40711EFB6F1B2B0762E951A.roa
File: 69561668C40711EFB6F1B2B0762E951A.roa (raw, json)
Hash identifier: KxdKYvkGkxrPIcOatQQG5R606eFvoDuzvNo4flFHYCM=
Subject key identifier: F7:08:1D:93:EE:20:FA:4D:76:44:B9:4F:3C:22:BE:B5:A5:F1:42:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69561668C40711EFB6F1B2B0762E951A.roa
Signing time: Fri 27 Dec 2024 04:02:38 +0000
ROA not before: Fri 27 Dec 2024 04:02:35 +0000
ROA not after: Fri 12 Dec 2025 04:02:35 +0000
asID: 984
IP address blocks: 154.194.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76015 (0x128ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:02:35 2024 GMT
Not After : Dec 12 04:02:35 2025 GMT
Subject: CN=676e26de-e5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:4e:cf:0c:0f:ff:c1:f3:77:9d:16:82:ab:
3a:18:57:3a:ac:31:a8:91:c5:08:01:29:5a:f1:e1:
62:4f:ec:7c:86:db:d1:c4:8c:bc:3b:b5:99:cd:61:
67:3b:b7:c6:ff:6c:b9:ac:73:01:4d:a8:c5:15:57:
5a:57:52:9c:67:87:d7:d7:31:b9:13:7c:00:d1:bd:
8b:0a:f3:6b:83:76:79:f7:d6:b2:e4:95:ab:72:6a:
c4:61:dd:a7:46:46:35:ef:52:b4:c7:8d:6e:75:a3:
66:98:ff:7b:71:7f:23:74:5b:ce:b4:63:7e:f6:08:
45:05:c3:ff:4b:97:37:bc:82:1e:9d:2d:81:2c:3b:
ed:89:82:2c:2e:85:fd:65:e2:ab:14:08:7b:9f:fd:
37:e9:55:60:45:30:61:5a:a9:8d:f9:ed:8b:af:8d:
60:f1:9f:63:62:a6:8b:17:f2:a1:e3:bc:1c:1e:9a:
d8:43:27:77:41:9f:43:d7:41:4b:cf:b0:53:49:d2:
56:e1:38:4f:69:ee:3d:6f:a3:e5:97:0b:db:1d:75:
58:19:af:f1:14:80:47:2f:07:05:d1:9c:ed:4a:08:
74:19:b6:8e:47:9f:e0:38:76:b1:11:9e:e5:34:53:
ac:dc:e2:62:94:d2:f3:b6:4e:2f:24:7a:18:a7:eb:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:08:1D:93:EE:20:FA:4D:76:44:B9:4F:3C:22:BE:B5:A5:F1:42:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69561668C40711EFB6F1B2B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.60.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:5f:fd:6a:4d:4f:d1:44:a1:d0:ad:f6:45:63:4c:94:a8:9a:
c1:f2:11:86:e4:fc:b2:d4:88:a5:52:1c:7b:77:a8:34:d8:01:
ac:01:6c:93:4a:2a:62:81:4a:ac:c2:e7:5f:7f:af:7a:ea:06:
1b:87:24:8e:32:47:eb:4c:43:94:52:30:a7:74:05:f9:48:4b:
1a:83:c5:a1:28:63:3d:47:33:56:01:99:10:ba:bb:2b:61:c6:
fa:bc:30:91:af:8d:91:ee:b3:8b:3a:07:54:71:90:a6:7f:1c:
91:35:ef:fd:1d:30:a3:09:92:14:e4:3a:a8:6a:df:ba:20:77:
21:fd:c7:0a:74:14:80:47:a2:1b:4f:0b:73:d0:6e:54:ad:5a:
e9:d8:d0:65:f9:87:d5:c3:75:f2:ce:c4:3f:ea:49:c4:82:1f:
86:36:29:a0:c0:04:1c:0c:5e:b6:2b:ce:23:a9:3c:d8:88:c2:
f1:f8:b6:f7:a3:e9:5b:26:6b:59:e4:10:66:36:92:4a:b0:c1:
54:e6:d6:68:b4:70:aa:b2:e9:d6:d9:2c:8d:48:c8:ea:98:ac:
80:9c:e1:3c:bb:1f:e6:c3:c2:f3:6b:23:17:2e:bd:d6:db:ce:
d9:e7:9d:b8:b3:46:45:e6:37:ce:71:ca:30:4a:12:84:4c:ff:
60:2b:0a:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASjvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDQwMjM1WhcNMjUxMjEyMDQwMjM1WjAYMRYw
FAYDVQQDEw02NzZlMjZkZS1lNWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtSVOzwwP/8Hzd50Wgqs6GFc6rDGokcUIASla8eFiT+x8htvRxIy8O7WZ
zWFnO7fG/2y5rHMBTajFFVdaV1KcZ4fX1zG5E3wA0b2LCvNrg3Z599ay5JWrcmrE
Yd2nRkY171K0x41udaNmmP97cX8jdFvOtGN+9ghFBcP/S5c3vIIenS2BLDvtiYIs
LoX9ZeKrFAh7n/036VVgRTBhWqmN+e2Lr41g8Z9jYqaLF/Kh47wcHprYQyd3QZ9D
10FLz7BTSdJW4ThPae49b6PllwvbHXVYGa/xFIBHLwcF0ZztSgh0GbaOR5/gOHax
EZ7lNFOs3OJilNLztk4vJHoYp+vjhQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPcI
HZPuIPpNdkS5TzwivrWl8UIjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82OTU2MTY2OEM0MDcxMUVGQjZGMUIyQjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsI8MA0GCSqGSIb3DQEB
CwUAA4IBAQAdX/1qTU/RRKHQrfZFY0yUqJrB8hGG5Pyy1IilUhx7d6g02AGsAWyT
SipigUqswudff6966gYbhySOMkfrTEOUUjCndAX5SEsag8WhKGM9RzNWAZkQursr
Ycb6vDCRr42R7rOLOgdUcZCmfxyRNe/9HTCjCZIU5Dqoat+6IHch/ccKdBSAR6Ib
Twtz0G5UrVrp2NBl+YfVw3XyzsQ/6knEgh+GNimgwAQcDF62K84jqTzYiMLx+Lb3
o+lbJmtZ5BBmNpJKsMFU5tZotHCqsunW2SyNSMjqmKyAnOE8ux/mw8LzayMXLr3W
287Z5524s0ZF5jfOccowShKETP9gKwp6
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:57 2025 by rpki-client