Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78A989CCC60C11EF96CE3E73762E951A.roa
File: 78A989CCC60C11EF96CE3E73762E951A.roa (raw, json)
Hash identifier: 8koEDTnqIFksnBfbJWcjpV+XwyCBakhhzmmRNjC96a8=
Subject key identifier: AC:BE:4E:24:E4:C5:29:53:3D:6D:77:77:D6:B5:27:5A:C2:9C:23:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012EC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78A989CCC60C11EF96CE3E73762E951A.roa
Signing time: Sun 29 Dec 2024 17:43:54 +0000
ROA not before: Sun 29 Dec 2024 17:43:50 +0000
ROA not after: Sun 12 Dec 2027 17:43:50 +0000
asID: 17561
IP address blocks: 154.217.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77504 (0x12ec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 17:43:50 2024 GMT
Not After : Dec 12 17:43:50 2027 GMT
Subject: CN=67718a5a-242d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:ac:d1:0a:73:3e:9a:74:50:be:4e:b9:c1:
a5:0d:42:8e:6d:29:6a:51:0d:28:62:5f:69:a2:f8:
7c:be:5b:7a:ce:d4:0b:15:0a:c9:5e:48:3d:c0:76:
92:b2:b8:84:0c:1d:43:88:ac:37:67:a3:9b:94:5f:
fd:c4:6b:d5:e7:32:57:f2:ff:d2:95:e2:e2:5c:4c:
8a:39:c6:88:5e:28:b7:9b:a7:e3:91:15:07:e2:ff:
ac:0c:2c:b2:3b:51:c7:26:b6:ea:f8:58:f5:8f:18:
1b:37:ac:2b:8a:2d:b4:05:92:66:ab:33:25:fd:14:
e6:3b:0b:f4:1e:b7:36:f9:5b:c9:e5:02:18:10:2f:
b0:35:5a:c1:0c:cb:57:48:c9:ca:86:75:9d:ad:0b:
2b:43:4f:90:b8:b5:39:c6:fc:fc:41:2d:4b:5a:00:
86:25:48:c0:66:38:ae:f5:41:0c:5a:65:21:ef:5e:
97:77:27:29:97:8d:b9:e3:05:04:11:65:aa:78:e9:
f9:47:29:02:09:4d:e5:4b:56:db:d5:c4:4a:aa:09:
3e:0b:f7:48:35:2e:d7:ab:84:0d:94:67:1b:9b:c7:
c3:f2:1b:83:d1:b7:a4:a3:55:79:49:88:1e:c3:1f:
35:60:98:7c:ed:79:6d:ad:87:49:cc:f6:0c:d8:73:
f2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BE:4E:24:E4:C5:29:53:3D:6D:77:77:D6:B5:27:5A:C2:9C:23:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78A989CCC60C11EF96CE3E73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.67.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:1e:96:cb:e3:57:d4:49:84:0f:08:fc:65:28:d6:64:0d:98:
01:d5:1b:87:a9:e7:54:80:56:3b:d3:35:ac:f6:5e:8d:73:10:
f8:b3:3e:b8:a8:86:e0:b1:bf:4d:3d:17:e9:be:04:27:b3:89:
b2:ce:23:89:14:4b:62:c3:1c:25:f0:84:5f:72:ee:44:05:a4:
e3:c0:83:5e:e1:c8:62:c4:02:30:a6:4f:e3:31:82:88:09:7b:
4c:fd:ae:10:4c:9c:ae:22:35:ab:50:0f:69:23:6f:ad:a7:4e:
8a:de:55:ce:93:19:1b:67:da:64:43:be:70:fa:a8:1f:c2:f6:
ae:5e:a5:9b:1c:7b:50:b5:28:7e:ee:51:1b:f3:ca:f3:31:26:
b5:14:41:4b:7d:68:e0:78:b0:2a:7c:0e:bf:37:1c:72:42:e3:
d5:7f:07:24:a5:21:a0:56:c5:21:74:5c:61:54:d1:8b:52:ea:
be:82:07:29:3a:68:21:83:f6:50:f4:56:75:3e:f8:70:ae:0e:
97:5b:93:fc:b2:63:f9:13:69:94:1b:72:27:2d:e4:6e:40:7f:
ae:bc:a5:b0:e8:ab:dc:51:48:7c:b1:a2:a2:8c:28:5c:2c:03:
f4:bf:f3:0e:b1:3d:b7:6f:0d:d7:5e:e9:9c:cb:48:f8:93:24:
1d:5b:b1:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS7AMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTc0MzUwWhcNMjcxMjEyMTc0MzUwWjAYMRYw
FAYDVQQDEw02NzcxOGE1YS0yNDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqa6s0QpzPpp0UL5OucGlDUKObSlqUQ0oYl9povh8vlt6ztQLFQrJXkg9
wHaSsriEDB1DiKw3Z6OblF/9xGvV5zJX8v/SleLiXEyKOcaIXii3m6fjkRUH4v+s
DCyyO1HHJrbq+Fj1jxgbN6wrii20BZJmqzMl/RTmOwv0Hrc2+VvJ5QIYEC+wNVrB
DMtXSMnKhnWdrQsrQ0+QuLU5xvz8QS1LWgCGJUjAZjiu9UEMWmUh716Xdycpl425
4wUEEWWqeOn5RykCCU3lS1bb1cRKqgk+C/dINS7Xq4QNlGcbm8fD8huD0beko1V5
SYgewx81YJh87XltrYdJzPYM2HPyJQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKy+
TiTkxSlTPW13d9a1J1rCnCNFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OEE5ODlDQ0M2MEMxMUVGOTZDRTNFNzM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtlDMA0GCSqGSIb3DQEB
CwUAA4IBAQDGHpbL41fUSYQPCPxlKNZkDZgB1RuHqedUgFY70zWs9l6NcxD4sz64
qIbgsb9NPRfpvgQns4myziOJFEtiwxwl8IRfcu5EBaTjwINe4chixAIwpk/jMYKI
CXtM/a4QTJyuIjWrUA9pI2+tp06K3lXOkxkbZ9pkQ75w+qgfwvauXqWbHHtQtSh+
7lEb88rzMSa1FEFLfWjgeLAqfA6/NxxyQuPVfwckpSGgVsUhdFxhVNGLUuq+ggcp
Omghg/ZQ9FZ1Pvhwrg6XW5P8smP5E2mUG3InLeRuQH+uvKWw6KvcUUh8saKijChc
LAP0v/MOsT23bw3XXumcy0j4kyQdW7Gf
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:43 2025 by rpki-client