Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/769D8BAEC61D11EFB08AF95E762E951A.roa
File: 769D8BAEC61D11EFB08AF95E762E951A.roa (raw, json)
Hash identifier: TubbDkP++9CbqooVYmLoQq9SC0OXRldFSjdsrpRNct8=
Subject key identifier: 31:97:F0:A4:E7:AF:A0:3F:66:97:26:5F:7B:CF:E3:88:16:B4:56:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/769D8BAEC61D11EFB08AF95E762E951A.roa
Signing time: Sun 29 Dec 2024 19:45:32 +0000
ROA not before: Sun 29 Dec 2024 19:45:28 +0000
ROA not after: Sun 12 Dec 2027 19:45:28 +0000
asID: 17561
IP address blocks: 154.217.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77646 (0x12f4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 19:45:28 2024 GMT
Not After : Dec 12 19:45:28 2027 GMT
Subject: CN=6771a6dc-4b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:95:1f:d6:60:e7:39:81:0c:ff:52:fb:f5:
48:3f:a4:1e:52:44:d3:65:19:6a:d9:01:4b:c7:81:
92:4b:5d:8c:28:d3:f6:e3:ed:54:2c:48:47:e6:76:
98:31:6b:c7:06:55:d1:83:6c:0f:3b:d8:f5:13:33:
a7:04:9f:92:98:e5:c7:0f:5c:b2:ba:39:81:00:8b:
ec:95:64:3b:c6:d3:e4:81:f7:4e:20:59:2d:7d:44:
49:f1:b9:c8:5e:23:d8:bd:4f:4a:cf:9d:de:99:30:
a2:9b:71:7f:be:e8:83:4b:f5:2c:20:73:72:eb:50:
67:fc:5b:64:d5:d7:9a:5c:b6:66:21:32:88:1f:f8:
78:16:5a:1b:ce:09:15:56:b0:d1:f0:a9:e1:43:1e:
6f:9b:1e:c2:26:3d:19:45:7f:32:10:ad:3f:94:47:
33:43:e8:0d:e6:04:12:f2:e8:b9:73:fd:c5:72:dc:
bc:37:b3:f1:a7:bd:6d:89:9b:11:e9:37:f4:18:22:
31:a6:c2:bf:ca:c9:d8:b1:83:16:b6:a0:21:b3:15:
77:e8:f8:e2:ab:f2:21:58:24:94:f1:e5:18:81:79:
a8:74:3e:6f:24:c8:ab:0c:a1:99:9e:03:2d:b1:50:
6d:d1:12:2e:df:3d:5f:02:89:4d:96:cc:ab:5a:ce:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:97:F0:A4:E7:AF:A0:3F:66:97:26:5F:7B:CF:E3:88:16:B4:56:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/769D8BAEC61D11EFB08AF95E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.138.0/24
Signature Algorithm: sha256WithRSAEncryption
16:d8:fd:3e:cf:dd:15:19:42:dd:94:5f:9b:35:d3:64:c1:62:
1c:69:15:70:5b:24:d3:e6:cd:96:fc:4d:ab:52:35:81:aa:53:
09:82:61:47:fc:61:9b:3c:b4:30:8c:54:21:ea:52:19:75:e4:
43:e3:20:13:b6:27:c6:f3:9e:bb:93:c3:6e:f5:f9:5a:7b:5b:
9f:40:b8:ae:21:42:32:a8:13:be:a1:89:f3:0f:24:6a:4a:e9:
36:d7:28:cc:9d:f7:04:f2:73:c8:fa:14:3c:db:2c:5c:35:c3:
5d:4d:7b:9e:ce:ea:30:f6:e6:d9:a5:b5:61:f4:17:06:03:53:
05:1c:1a:1d:a4:40:69:0d:cd:71:0d:e2:2c:d9:e6:1a:5e:b7:
89:e1:da:93:1d:99:f5:63:dc:78:56:b4:93:d8:c4:e3:36:90:
9f:c7:2f:74:80:10:62:a9:92:5f:0d:30:d4:e6:af:70:28:d0:
67:a8:e3:56:1d:af:74:1a:d8:6d:08:98:9f:03:94:a9:87:2d:
8c:19:74:da:3a:7d:5a:ed:92:5f:e0:a4:a1:84:9e:c3:bd:1b:
46:04:ab:88:62:b4:25:59:1e:56:40:fa:13:27:5c:94:88:68:
c8:42:cd:75:c3:7f:19:54:d4:4f:68:11:d3:21:c4:d2:e2:d6:
6b:60:2f:dc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS9OMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTk0NTI4WhcNMjcxMjEyMTk0NTI4WjAYMRYw
FAYDVQQDEw02NzcxYTZkYy00YjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArFuVH9Zg5zmBDP9S+/VIP6QeUkTTZRlq2QFLx4GSS12MKNP24+1ULEhH
5naYMWvHBlXRg2wPO9j1EzOnBJ+SmOXHD1yyujmBAIvslWQ7xtPkgfdOIFktfURJ
8bnIXiPYvU9Kz53emTCim3F/vuiDS/UsIHNy61Bn/Ftk1deaXLZmITKIH/h4Flob
zgkVVrDR8KnhQx5vmx7CJj0ZRX8yEK0/lEczQ+gN5gQS8ui5c/3Fcty8N7Pxp71t
iZsR6Tf0GCIxpsK/ysnYsYMWtqAhsxV36Pjiq/IhWCSU8eUYgXmodD5vJMirDKGZ
ngMtsVBt0RIu3z1fAolNlsyrWs6/WwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDGX
8KTnr6A/ZpcmX3vP44gWtFaTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NjlEOEJBRUM2MUQxMUVGQjA4QUY5NUU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtmKMA0GCSqGSIb3DQEB
CwUAA4IBAQAW2P0+z90VGULdlF+bNdNkwWIcaRVwWyTT5s2W/E2rUjWBqlMJgmFH
/GGbPLQwjFQh6lIZdeRD4yATtifG8567k8Nu9flae1ufQLiuIUIyqBO+oYnzDyRq
Suk21yjMnfcE8nPI+hQ82yxcNcNdTXuezuow9ubZpbVh9BcGA1MFHBodpEBpDc1x
DeIs2eYaXreJ4dqTHZn1Y9x4VrST2MTjNpCfxy90gBBiqZJfDTDU5q9wKNBnqONW
Ha90GthtCJifA5Sphy2MGXTaOn1a7ZJf4KShhJ7DvRtGBKuIYrQlWR5WQPoTJ1yU
iGjIQs11w38ZVNRPaBHTIcTS4tZrYC/c
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:05:42 2025 by rpki-client