Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F868744C5F511EFB8426663762E951A.roa
File: 6F868744C5F511EFB8426663762E951A.roa (raw, json)
Hash identifier: u8SDz8aQqJdMyW2UJ8GzjYXqrRluNPhLgJVuhATF7To=
Subject key identifier: B8:70:6B:1F:6C:D8:04:B7:31:21:C9:62:FD:03:CA:EA:B5:C2:98:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F868744C5F511EFB8426663762E951A.roa
Signing time: Sun 29 Dec 2024 14:59:00 +0000
ROA not before: Sun 29 Dec 2024 14:58:56 +0000
ROA not after: Sun 12 Dec 2027 14:58:56 +0000
asID: 17561
IP address blocks: 154.213.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77308 (0x12dfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 14:58:56 2024 GMT
Not After : Dec 12 14:58:56 2027 GMT
Subject: CN=677163b4-492c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:24:30:58:1b:aa:30:7e:94:ff:51:a8:5f:
a8:db:54:b0:f9:e5:dd:c9:83:ab:11:84:95:9a:36:
c6:09:36:09:fa:b7:2c:44:bf:74:2e:db:41:76:e1:
06:1b:27:c5:fe:04:c1:00:e5:c7:0f:0e:eb:4b:8d:
55:c1:a5:17:64:a1:20:32:e7:92:e2:ac:bc:22:a4:
0b:45:5c:cd:e9:78:40:d6:66:90:42:bc:58:b2:e4:
aa:7c:29:37:1e:ff:e6:c4:db:19:b7:72:cb:0b:eb:
d7:3a:6a:6d:42:d9:16:c2:9c:02:4a:61:f7:44:33:
a4:c0:92:35:5a:a5:ba:19:96:df:76:26:db:3f:ed:
40:88:d2:ab:48:74:0f:f0:61:0d:bf:09:13:2a:d9:
c3:25:0f:1d:aa:dd:4f:0f:cd:c5:f7:73:5e:81:af:
b3:9b:59:87:3c:57:4b:e0:4f:54:10:36:50:b2:7d:
9d:fb:16:fa:24:20:24:e6:4a:8e:5a:4b:64:71:fc:
11:cf:87:52:3e:a8:a3:4c:24:3f:fa:fb:28:9d:46:
4d:b1:e3:d7:7d:8a:47:5d:34:9c:27:6a:83:25:76:
c9:99:d4:4d:aa:ed:7f:a2:2a:c4:3e:62:c3:71:95:
36:79:6a:aa:35:c8:fe:07:cb:60:e6:7b:4b:51:7e:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:70:6B:1F:6C:D8:04:B7:31:21:C9:62:FD:03:CA:EA:B5:C2:98:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F868744C5F511EFB8426663762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.183.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:7c:93:68:b3:59:08:16:62:86:8c:13:bf:67:cf:61:69:46:
4c:df:6d:85:bd:1a:1d:61:b6:a3:07:35:7a:e1:38:61:9b:a7:
b1:56:8b:e4:42:50:f6:dd:48:81:10:7d:aa:d2:23:22:a0:f2:
cf:ed:fc:51:db:27:8f:fa:09:30:79:03:4a:ea:5c:6d:fa:47:
f7:4d:02:d5:9a:06:93:10:b5:c0:8c:71:b3:83:83:6c:c2:48:
9e:94:2e:a7:6b:c3:c7:ff:01:26:f7:4f:5b:1c:27:9f:08:27:
02:d4:76:5d:3d:fb:87:9c:d3:f6:68:64:ac:3d:40:1c:97:da:
fd:35:1c:1d:a1:34:3d:37:8f:17:3b:8b:10:8e:6e:a4:59:c7:
cf:2e:26:67:25:56:81:fc:26:c5:f4:4c:1a:c4:61:fd:51:6b:
d3:49:c8:4c:e0:45:35:bd:ae:b8:69:79:bb:4c:a5:86:26:f8:
18:e1:46:10:90:08:a2:2c:67:ac:31:fb:e0:06:b8:c0:61:c0:
95:20:df:5b:6c:54:12:9c:db:97:96:0a:44:1d:7c:93:90:e2:
07:bc:05:26:33:94:fc:a1:d5:13:73:84:83:d6:f6:a1:9b:69:
b1:54:f7:ad:5f:ed:6e:71:96:83:01:80:f5:f4:2d:a0:f6:55:
a3:5e:07:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS38MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTQ1ODU2WhcNMjcxMjEyMTQ1ODU2WjAYMRYw
FAYDVQQDEw02NzcxNjNiNC00OTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuJUkMFgbqjB+lP9RqF+o21Sw+eXdyYOrEYSVmjbGCTYJ+rcsRL90LttB
duEGGyfF/gTBAOXHDw7rS41VwaUXZKEgMueS4qy8IqQLRVzN6XhA1maQQrxYsuSq
fCk3Hv/mxNsZt3LLC+vXOmptQtkWwpwCSmH3RDOkwJI1WqW6GZbfdibbP+1AiNKr
SHQP8GENvwkTKtnDJQ8dqt1PD83F93Nega+zm1mHPFdL4E9UEDZQsn2d+xb6JCAk
5kqOWktkcfwRz4dSPqijTCQ/+vsonUZNsePXfYpHXTScJ2qDJXbJmdRNqu1/oirE
PmLDcZU2eWqqNcj+B8tg5ntLUX487wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLhw
ax9s2AS3MSHJYv0Dyuq1wpgcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82Rjg2ODc0NEM1RjUxMUVGQjg0MjY2NjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtW3MA0GCSqGSIb3DQEB
CwUAA4IBAQBsfJNos1kIFmKGjBO/Z89haUZM322FvRodYbajBzV64Thhm6exVovk
QlD23UiBEH2q0iMioPLP7fxR2yeP+gkweQNK6lxt+kf3TQLVmgaTELXAjHGzg4Ns
wkielC6na8PH/wEm909bHCefCCcC1HZdPfuHnNP2aGSsPUAcl9r9NRwdoTQ9N48X
O4sQjm6kWcfPLiZnJVaB/CbF9EwaxGH9UWvTSchM4EU1va64aXm7TKWGJvgY4UYQ
kAiiLGesMfvgBrjAYcCVIN9bbFQSnNuXlgpEHXyTkOIHvAUmM5T8odUTc4SD1vah
m2mxVPetX+1ucZaDAYD19C2g9lWjXgfw
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:09 2025 by rpki-client