Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/730C0510C54B11EF9E95DFAB762E951A.roa
File: 730C0510C54B11EF9E95DFAB762E951A.roa (raw, json)
Hash identifier: JUNPj2O9r5MCNzYmBDmKuMlNzb4LAXxMM5irUekXpck=
Subject key identifier: 7C:81:3C:F2:56:90:3E:BB:3C:CD:7F:3F:96:6B:21:85:44:AF:C2:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CDD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/730C0510C54B11EF9E95DFAB762E951A.roa
Signing time: Sat 28 Dec 2024 18:42:11 +0000
ROA not before: Sat 28 Dec 2024 18:42:08 +0000
ROA not after: Sun 12 Dec 2027 18:42:08 +0000
asID: 17561
IP address blocks: 154.209.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77021 (0x12cdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:42:08 2024 GMT
Not After : Dec 12 18:42:08 2027 GMT
Subject: CN=67704683-64cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:54:cb:16:a2:b3:fe:18:3a:87:0b:3c:90:eb:
c7:88:85:f6:81:bd:2f:f7:45:35:29:59:c4:f7:52:
b2:fd:e2:d4:39:f4:47:55:e7:41:06:a7:29:ec:de:
21:ca:10:59:ed:80:07:6c:16:7a:c1:76:59:b4:a8:
58:3a:f7:7e:5b:4c:c9:c9:9e:84:fb:10:8e:10:7e:
26:a7:be:e2:49:cb:79:de:83:2b:36:e4:37:da:76:
44:4b:9f:85:e7:93:3e:53:20:91:27:b8:df:23:cb:
cc:c0:6e:a3:a4:35:20:a2:aa:78:b5:ac:cb:ad:7f:
b8:93:4a:78:f0:c5:4f:87:8b:cb:b5:de:9f:62:d3:
ef:e8:e6:37:d0:c7:ea:99:f7:70:bf:3e:ea:a6:c9:
23:83:b0:b8:3d:26:f8:ad:b0:41:a5:bf:93:91:16:
0a:7b:28:55:a2:54:da:a4:ca:a9:e4:1e:72:f4:0d:
63:b5:f0:5c:c5:14:d0:3d:d0:ac:3a:86:01:81:e8:
6b:16:bc:f3:bc:6d:b8:11:28:88:28:a2:94:5b:1f:
04:9d:f4:f6:2c:96:e0:1a:9b:29:60:68:00:79:64:
ef:55:e8:66:1f:5c:d2:37:61:96:13:df:b3:38:ce:
34:fa:05:5b:de:28:ae:2c:2a:7d:2c:df:80:30:9e:
e5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:81:3C:F2:56:90:3E:BB:3C:CD:7F:3F:96:6B:21:85:44:AF:C2:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/730C0510C54B11EF9E95DFAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.75.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:76:6e:14:29:67:39:99:1e:89:22:28:5e:42:a1:02:77:21:
72:d9:9e:c9:d4:73:ec:bd:fc:e3:7d:f3:c9:a2:0b:46:43:bd:
e1:a8:7e:8a:f8:0c:ce:b5:2d:e7:79:df:15:fc:a6:66:0f:be:
5a:16:00:62:4c:e2:1d:25:8f:36:86:c4:74:2c:90:c3:13:77:
ad:ed:b8:f7:43:74:ce:32:ae:70:72:8c:96:a8:52:0c:4d:21:
85:f5:e4:ff:53:05:0e:22:94:4e:8e:18:72:d3:e4:54:98:13:
54:7a:a6:29:de:1b:8d:5e:6c:04:7a:25:6a:af:7d:71:fa:04:
43:19:62:b1:0c:40:88:16:2f:08:a5:d5:d7:14:92:74:29:e7:
46:0d:07:83:0a:c4:f6:1e:a5:32:8c:d0:72:0e:ee:1c:c6:a6:
20:ce:8d:45:3d:c6:a3:88:e4:e1:14:63:2a:aa:81:74:34:fb:
c4:e1:6d:dc:50:04:f3:e7:f4:04:a8:85:9d:27:9a:1c:30:50:
64:e2:8f:50:a1:17:04:27:74:1f:84:ca:fe:8c:01:bf:49:be:
09:b9:f9:73:e7:0c:df:74:85:5b:ae:77:c6:03:ee:aa:39:08:
82:52:d1:4c:33:3f:3f:2c:58:dd:4d:64:0d:c2:6f:2c:89:6e:
93:63:c2:de
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASzdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTg0MjA4WhcNMjcxMjEyMTg0MjA4WjAYMRYw
FAYDVQQDEw02NzcwNDY4My02NGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3VTLFqKz/hg6hws8kOvHiIX2gb0v90U1KVnE91Ky/eLUOfRHVedBBqcp
7N4hyhBZ7YAHbBZ6wXZZtKhYOvd+W0zJyZ6E+xCOEH4mp77iSct53oMrNuQ32nZE
S5+F55M+UyCRJ7jfI8vMwG6jpDUgoqp4tazLrX+4k0p48MVPh4vLtd6fYtPv6OY3
0Mfqmfdwvz7qpskjg7C4PSb4rbBBpb+TkRYKeyhVolTapMqp5B5y9A1jtfBcxRTQ
PdCsOoYBgehrFrzzvG24ESiIKKKUWx8EnfT2LJbgGpspYGgAeWTvVehmH1zSN2GW
E9+zOM40+gVb3iiuLCp9LN+AMJ7lUQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHyB
PPJWkD67PM1/P5ZrIYVEr8J0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MzBDMDUxMEM1NEIxMUVGOUU5NURGQUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtFLMA0GCSqGSIb3DQEB
CwUAA4IBAQCbdm4UKWc5mR6JIiheQqECdyFy2Z7J1HPsvfzjffPJogtGQ73hqH6K
+AzOtS3ned8V/KZmD75aFgBiTOIdJY82hsR0LJDDE3et7bj3Q3TOMq5wcoyWqFIM
TSGF9eT/UwUOIpROjhhy0+RUmBNUeqYp3huNXmwEeiVqr31x+gRDGWKxDECIFi8I
pdXXFJJ0KedGDQeDCsT2HqUyjNByDu4cxqYgzo1FPcajiOThFGMqqoF0NPvE4W3c
UATz5/QEqIWdJ5ocMFBk4o9QoRcEJ3QfhMr+jAG/Sb4Juflz5wzfdIVbrnfGA+6q
OQiCUtFMMz8/LFjdTWQNwm8siW6TY8Le
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:53 2025 by rpki-client