Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AD9E238C35F11EFA1FBF47B762E951A.roa
File: 6AD9E238C35F11EFA1FBF47B762E951A.roa (raw, json)
Hash identifier: sAzN9ysrxDzLc7pEx79ciQI6GIKKyZQrp28Q4XddKa0=
Subject key identifier: 06:D6:B0:34:38:34:E0:B2:9E:21:DC:2D:C5:BB:03:F3:EF:62:7E:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012630
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AD9E238C35F11EFA1FBF47B762E951A.roa
Signing time: Thu 26 Dec 2024 08:00:05 +0000
ROA not before: Thu 26 Dec 2024 08:00:02 +0000
ROA not after: Fri 12 Dec 2025 08:00:02 +0000
asID: 984
IP address blocks: 154.90.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75312 (0x12630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:00:02 2024 GMT
Not After : Dec 12 08:00:02 2025 GMT
Subject: CN=676d0d05-d2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7b:6b:9c:7a:ae:a4:f6:3e:44:1e:45:09:90:
71:22:64:b5:78:67:56:47:1d:a2:c4:97:ce:e5:68:
65:99:d0:ce:af:1a:92:3e:09:d8:b4:60:82:28:0b:
b9:e4:7c:12:24:15:3f:11:f8:9e:2d:ab:8f:2f:36:
1c:19:7d:84:7a:6f:27:af:be:cd:b3:07:bc:ad:e6:
dd:46:e3:80:4b:aa:ec:da:5a:58:dc:32:59:28:f5:
bc:6a:11:e8:c1:50:6c:ab:0a:4f:69:85:0f:0a:34:
66:d4:aa:fb:67:18:3b:b1:d1:0b:c1:2d:db:17:4d:
25:8a:5e:d5:35:42:d1:e9:47:9f:3b:c9:f7:9d:ef:
08:ed:8a:3f:05:c9:82:e5:d7:0c:c7:84:f1:3b:91:
cc:01:79:c7:43:7a:a8:b3:e4:7e:39:02:8a:93:e4:
69:48:c8:04:eb:94:c9:77:a8:14:bc:36:bc:4f:a8:
e8:5a:e6:71:3b:68:76:fc:3e:fa:02:d3:1c:5f:4c:
fd:ec:70:de:9d:52:21:74:58:b4:e6:79:5e:5d:37:
fb:56:c2:71:0d:67:30:49:34:e5:9a:15:b5:06:bb:
75:82:03:fa:57:79:47:de:80:8b:db:03:db:2c:18:
35:e5:fb:8e:e2:5a:05:fd:c8:26:a7:c7:e0:97:dc:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D6:B0:34:38:34:E0:B2:9E:21:DC:2D:C5:BB:03:F3:EF:62:7E:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AD9E238C35F11EFA1FBF47B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.30.0/24
Signature Algorithm: sha256WithRSAEncryption
24:2c:0a:74:cf:f9:f2:0b:f0:bc:a6:40:87:16:20:58:bc:35:
96:07:20:e0:c1:9e:0c:ea:7d:f9:07:e9:cd:f6:b0:8f:a2:68:
ae:73:a6:90:95:10:91:78:4d:3d:70:b1:29:5d:97:aa:9a:be:
bb:cc:5f:71:b0:62:9b:21:e7:17:e6:e6:ff:60:4f:44:d2:12:
8b:df:cd:16:a7:4f:82:75:f6:77:c1:ec:10:f1:11:b2:87:49:
7a:f6:2d:3e:ff:90:0c:dd:92:d8:18:a1:e2:b7:41:62:93:01:
10:41:f4:3e:e6:c8:d7:05:a5:4f:91:c2:c1:c0:cd:91:20:78:
c1:7e:81:72:33:65:53:f1:2c:d9:9c:31:95:2f:50:a9:94:0f:
5c:be:86:c5:dd:fb:f7:38:8c:e2:7e:41:a7:04:e4:5b:9b:0e:
5a:2d:9c:60:03:34:83:cf:b2:a4:47:94:0f:7b:b6:68:4a:79:
8c:44:4b:57:be:b0:e1:f3:5d:17:cd:98:fd:f8:12:88:e1:d6:
a4:f4:cc:2e:eb:fb:fd:24:e3:7f:60:f5:5f:19:76:0f:ef:c5:
14:ca:4d:45:55:6b:b5:ab:b3:5a:cd:65:b4:5e:7e:5c:08:cd:
c6:4b:67:bf:38:9d:8b:96:af:0f:99:b4:d2:5d:9f:cc:ef:59:
b2:6a:32:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASYwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDgwMDAyWhcNMjUxMjEyMDgwMDAyWjAYMRYw
FAYDVQQDEw02NzZkMGQwNS1kMmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1ntrnHqupPY+RB5FCZBxImS1eGdWRx2ixJfO5WhlmdDOrxqSPgnYtGCC
KAu55HwSJBU/EfieLauPLzYcGX2Eem8nr77Nswe8rebdRuOAS6rs2lpY3DJZKPW8
ahHowVBsqwpPaYUPCjRm1Kr7Zxg7sdELwS3bF00lil7VNULR6UefO8n3ne8I7Yo/
BcmC5dcMx4TxO5HMAXnHQ3qos+R+OQKKk+RpSMgE65TJd6gUvDa8T6joWuZxO2h2
/D76AtMcX0z97HDenVIhdFi05nleXTf7VsJxDWcwSTTlmhW1Brt1ggP6V3lH3oCL
2wPbLBg15fuO4loF/cgmp8fgl9w/7QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAbW
sDQ4NOCyniHcLcW7A/PvYn7HMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QUQ5RTIzOEMzNUYxMUVGQTFGQkY0N0I3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmloeMA0GCSqGSIb3DQEB
CwUAA4IBAQAkLAp0z/nyC/C8pkCHFiBYvDWWByDgwZ4M6n35B+nN9rCPomiuc6aQ
lRCReE09cLEpXZeqmr67zF9xsGKbIecX5ub/YE9E0hKL380Wp0+CdfZ3wewQ8RGy
h0l69i0+/5AM3ZLYGKHit0FikwEQQfQ+5sjXBaVPkcLBwM2RIHjBfoFyM2VT8SzZ
nDGVL1CplA9cvobF3fv3OIzifkGnBORbmw5aLZxgAzSDz7KkR5QPe7ZoSnmMREtX
vrDh810XzZj9+BKI4dak9Mwu6/v9JON/YPVfGXYP78UUyk1FVWu1q7NazWW0Xn5c
CM3GS2e/OJ2Llq8PmbTSXZ/M71myajLR
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:38:00 2025 by rpki-client