Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76EDCFC2C26911EF962B3E60762E951A.roa
File: 76EDCFC2C26911EF962B3E60762E951A.roa (raw, json)
Hash identifier: 0ExAtknn5EdC27teaGyezg6DeTsuDo/heYd8OBvwp6g=
Subject key identifier: 8B:29:18:32:95:56:50:17:EE:E5:17:42:0F:A0:3A:B9:B1:25:F2:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012410
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76EDCFC2C26911EF962B3E60762E951A.roa
Signing time: Wed 25 Dec 2024 02:39:30 +0000
ROA not before: Wed 25 Dec 2024 02:39:26 +0000
ROA not after: Wed 10 Dec 2025 02:39:26 +0000
asID: 984
IP address blocks: 154.211.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74768 (0x12410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:39:26 2024 GMT
Not After : Dec 10 02:39:26 2025 GMT
Subject: CN=676b7061-1283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:a4:2f:21:24:db:61:ee:33:91:f0:92:ec:
96:78:01:79:aa:87:33:65:bd:e0:f9:9c:1a:68:90:
34:d9:1c:1f:11:29:9d:17:00:a3:23:f8:52:7b:88:
67:4b:f0:2f:a8:f6:90:86:d3:27:68:51:88:58:1f:
35:3e:9d:6a:0e:9e:8a:b8:0e:06:14:d8:7a:7d:ed:
9d:da:37:b3:fc:d5:00:28:51:ae:8d:78:74:9f:e4:
61:95:45:c8:1e:14:0e:f8:d0:64:00:da:56:84:eb:
b6:15:1b:f0:e6:4d:e3:7e:79:38:8a:0f:8f:c7:b0:
da:d9:28:86:81:13:f0:04:f5:45:a2:bc:1f:08:46:
ea:6d:9d:b2:0f:47:52:00:e8:6a:14:af:ba:a9:be:
48:70:75:09:2f:c0:b3:2a:b8:e0:db:9d:ba:e6:3d:
e2:1c:2b:61:24:68:3a:b9:95:55:53:44:18:9d:9b:
ec:5f:28:15:53:c1:f4:38:ef:05:38:51:b9:da:2f:
e6:38:fd:45:e3:55:e6:7f:90:35:6d:7a:7f:61:52:
32:3a:12:87:30:be:91:6d:d0:a4:77:1c:8a:c7:5d:
1f:0c:62:32:d4:34:58:e0:31:48:80:63:c6:42:c7:
6d:fa:df:30:b1:80:99:7a:7c:d7:10:70:57:34:c8:
c2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:29:18:32:95:56:50:17:EE:E5:17:42:0F:A0:3A:B9:B1:25:F2:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76EDCFC2C26911EF962B3E60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.148.0/24
Signature Algorithm: sha256WithRSAEncryption
39:68:59:aa:35:d4:ed:08:e3:9f:43:16:b0:44:ad:9b:2d:70:
fa:93:f0:c5:28:1a:3d:f5:19:7d:1d:4f:b7:2b:08:b1:4e:1b:
35:9e:b1:eb:bb:75:0b:ba:9a:fd:22:3c:74:41:f0:18:63:b5:
fe:32:67:38:0e:79:90:41:78:d5:6e:de:6c:55:5a:92:23:8c:
4d:92:f4:70:e7:c8:ec:a0:50:96:0d:cb:56:96:7e:c5:36:79:
c9:34:1b:93:42:a9:41:7a:1d:b9:ed:b7:61:15:05:00:c5:d1:
3b:90:26:52:1e:45:2f:88:f1:0b:b4:d7:7c:53:88:c5:ef:1a:
f5:67:1f:ae:84:75:91:e7:d1:4f:7c:92:ba:31:f4:37:e7:96:
3c:10:2d:19:e1:89:75:d8:46:7c:e5:16:bd:af:1d:6f:ea:8f:
f9:bf:a4:89:72:08:a0:62:24:1e:88:06:26:1b:2f:88:ad:53:
bd:57:4b:25:5e:da:6d:8e:25:06:0a:85:f8:0b:1b:1b:02:64:
e3:a0:f4:d5:38:c8:6f:56:78:d0:68:88:d0:10:a4:5a:b6:2f:
a6:ec:66:85:f4:ac:77:23:37:d9:bd:51:b8:e8:67:a7:af:f1:
7e:3d:0a:2e:85:f3:f7:38:bb:09:a6:89:63:55:8b:21:99:75:
df:bb:95:8a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASQQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDIzOTI2WhcNMjUxMjEwMDIzOTI2WjAYMRYw
FAYDVQQDEw02NzZiNzA2MS0xMjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1ESkLyEk22HuM5HwkuyWeAF5qoczZb3g+ZwaaJA02RwfESmdFwCjI/hS
e4hnS/AvqPaQhtMnaFGIWB81Pp1qDp6KuA4GFNh6fe2d2jez/NUAKFGujXh0n+Rh
lUXIHhQO+NBkANpWhOu2FRvw5k3jfnk4ig+Px7Da2SiGgRPwBPVForwfCEbqbZ2y
D0dSAOhqFK+6qb5IcHUJL8CzKrjg25265j3iHCthJGg6uZVVU0QYnZvsXygVU8H0
OO8FOFG52i/mOP1F41Xmf5A1bXp/YVIyOhKHML6RbdCkdxyKx10fDGIy1DRY4DFI
gGPGQsdt+t8wsYCZenzXEHBXNMjCwwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIsp
GDKVVlAX7uUXQg+gOrmxJfK5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NkVEQ0ZDMkMyNjkxMUVGOTYyQjNFNjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtOUMA0GCSqGSIb3DQEB
CwUAA4IBAQA5aFmqNdTtCOOfQxawRK2bLXD6k/DFKBo99Rl9HU+3KwixThs1nrHr
u3ULupr9Ijx0QfAYY7X+Mmc4DnmQQXjVbt5sVVqSI4xNkvRw58jsoFCWDctWln7F
NnnJNBuTQqlBeh257bdhFQUAxdE7kCZSHkUviPELtNd8U4jF7xr1Zx+uhHWR59FP
fJK6MfQ355Y8EC0Z4Yl12EZ85Ra9rx1v6o/5v6SJcgigYiQeiAYmGy+IrVO9V0sl
XtptjiUGCoX4CxsbAmTjoPTVOMhvVnjQaIjQEKRati+m7GaF9Kx3IzfZvVG46Gen
r/F+PQouhfP3OLsJpoljVYshmXXfu5WK
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:56 2025 by rpki-client