Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78CED990C3D011EF94FD9B41762E951A.roa
File: 78CED990C3D011EF94FD9B41762E951A.roa (raw, json)
Hash identifier: hLhJAxOtVrfWQOkWYNrHCWQcXtD62VfUnUgOuXSg7lA=
Subject key identifier: 33:AC:86:F6:29:DC:E7:25:D6:E2:E2:F0:A4:81:B4:D8:4B:46:4B:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01283A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78CED990C3D011EF94FD9B41762E951A.roa
Signing time: Thu 26 Dec 2024 21:29:22 +0000
ROA not before: Thu 26 Dec 2024 21:29:18 +0000
ROA not after: Sun 12 Dec 2027 21:29:18 +0000
asID: 17561
IP address blocks: 154.83.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75834 (0x1283a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:29:18 2024 GMT
Not After : Dec 12 21:29:18 2027 GMT
Subject: CN=676dcab2-c101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:d2:11:14:9a:ac:86:26:b8:ed:70:f3:6f:
6f:43:83:90:9c:83:ce:9e:98:74:da:30:b0:10:7b:
22:45:ea:a2:a2:f7:10:8c:5d:68:7c:9d:e2:d9:ca:
23:d2:d2:a9:cb:c0:d5:3a:0a:8c:61:38:eb:6c:40:
c4:a4:de:7a:59:c8:c9:3f:0e:2f:33:6e:c4:90:c7:
f8:f2:7c:72:0b:c9:00:b1:a2:40:96:1b:8f:42:c8:
6d:dc:12:d0:7f:a8:1a:aa:7c:5f:ec:bb:bc:0a:f5:
06:dd:6a:7a:6b:93:c7:37:cd:59:8f:8b:bc:31:c6:
10:bd:06:2b:d2:a9:05:76:ca:c1:b2:7c:b9:c0:67:
f8:c3:0d:62:07:54:cf:61:ea:e2:1c:5c:46:ce:1a:
0b:ce:5c:24:56:93:f4:18:27:79:8a:09:64:27:da:
c8:f1:bb:92:cc:83:66:3f:9f:de:f1:f1:d0:c6:b0:
f3:76:f2:f2:45:59:dd:65:42:3e:03:55:ec:c8:60:
dc:06:7d:3c:f2:af:38:5c:c5:16:c8:7e:2a:29:cc:
51:c8:a8:76:3a:bf:83:1b:42:a5:6a:6e:41:47:0d:
41:23:30:23:2e:d1:7e:d4:5d:8c:09:8f:15:de:d8:
10:5b:e6:a6:f3:a1:c0:eb:50:56:d9:a4:e4:47:46:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AC:86:F6:29:DC:E7:25:D6:E2:E2:F0:A4:81:B4:D8:4B:46:4B:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78CED990C3D011EF94FD9B41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.179.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:aa:7e:af:52:3b:41:9e:f3:d0:6f:ad:52:88:96:fc:e2:61:
95:74:db:79:ca:bb:76:a9:5a:a5:37:c4:5e:f8:66:f4:2f:24:
4f:1c:a5:42:9a:1e:0d:6b:30:14:fe:f4:48:41:09:14:4b:9e:
52:e1:ba:67:93:a0:72:a9:5b:a7:3a:ff:8f:e5:e9:2f:59:83:
d3:36:a3:c9:24:9a:aa:5a:b7:87:92:82:bb:50:5e:01:92:9e:
11:90:a9:60:ec:32:38:35:68:15:90:62:bf:1e:a0:9f:f6:84:
f1:1d:e5:77:7b:95:88:a6:55:5c:4c:c8:b0:d7:6d:85:0c:6a:
51:db:01:80:a0:b6:b2:7b:0f:12:8c:f1:31:58:74:8f:b5:63:
28:02:4b:ce:26:65:58:cf:c5:f8:0c:0a:a2:83:5c:23:46:08:
e2:9f:de:34:45:2a:38:d2:90:8c:e6:2c:9b:b9:a7:7c:14:d9:
b0:49:b5:da:7b:b2:55:ff:0a:13:d7:e5:bd:58:40:8e:42:67:
d4:9b:2a:75:5a:96:fa:d4:4c:16:64:32:13:b0:3e:a2:fb:11:
79:09:62:b2:b6:26:43:c8:2f:51:9f:47:cb:cf:57:10:45:c7:
44:4d:d7:58:78:bc:fb:bb:ee:ee:88:67:b3:b7:4e:ad:85:45:
8a:3c:75:a6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASg6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MjEyOTE4WhcNMjcxMjEyMjEyOTE4WjAYMRYw
FAYDVQQDEw02NzZkY2FiMi1jMTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyVbSERSarIYmuO1w829vQ4OQnIPOnph02jCwEHsiReqiovcQjF1ofJ3i
2coj0tKpy8DVOgqMYTjrbEDEpN56WcjJPw4vM27EkMf48nxyC8kAsaJAlhuPQsht
3BLQf6gaqnxf7Lu8CvUG3Wp6a5PHN81Zj4u8McYQvQYr0qkFdsrBsny5wGf4ww1i
B1TPYeriHFxGzhoLzlwkVpP0GCd5iglkJ9rI8buSzINmP5/e8fHQxrDzdvLyRVnd
ZUI+A1XsyGDcBn088q84XMUWyH4qKcxRyKh2Or+DG0Klam5BRw1BIzAjLtF+1F2M
CY8V3tgQW+am86HA61BW2aTkR0ZEIQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDOs
hvYp3Ocl1uLi8KSBtNhLRku6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OENFRDk5MEMzRDAxMUVGOTRGRDlCNDE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlOzMA0GCSqGSIb3DQEB
CwUAA4IBAQB8qn6vUjtBnvPQb61SiJb84mGVdNt5yrt2qVqlN8Re+Gb0LyRPHKVC
mh4NazAU/vRIQQkUS55S4bpnk6ByqVunOv+P5ekvWYPTNqPJJJqqWreHkoK7UF4B
kp4RkKlg7DI4NWgVkGK/HqCf9oTxHeV3e5WIplVcTMiw122FDGpR2wGAoLayew8S
jPExWHSPtWMoAkvOJmVYz8X4DAqig1wjRgjin940RSo40pCM5iybuad8FNmwSbXa
e7JV/woT1+W9WECOQmfUmyp1Wpb61EwWZDITsD6i+xF5CWKytiZDyC9Rn0fLz1cQ
RcdETddYeLz7u+7uiGezt06thUWKPHWm
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:36 2025 by rpki-client