Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7982BE4AC5F811EFA5649F76762E951A.roa
File: 7982BE4AC5F811EFA5649F76762E951A.roa (raw, json)
Hash identifier: EWsu0KT7/Cd8DrXdYxGeb2XzshBxhbi43Hpd4Bhcqek=
Subject key identifier: 2D:E3:4F:C5:1E:BE:12:08:20:5A:42:6D:71:46:78:0B:4A:9A:05:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7982BE4AC5F811EFA5649F76762E951A.roa
Signing time: Sun 29 Dec 2024 15:20:45 +0000
ROA not before: Sun 29 Dec 2024 15:20:42 +0000
ROA not after: Sun 12 Dec 2027 15:20:42 +0000
asID: 17561
IP address blocks: 154.213.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77334 (0x12e16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 15:20:42 2024 GMT
Not After : Dec 12 15:20:42 2027 GMT
Subject: CN=677168cd-b8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fb:02:90:23:eb:4f:0c:5a:f0:a6:4a:5d:54:
fc:14:36:f3:96:86:52:5f:eb:3c:de:19:b6:eb:af:
dc:f7:70:db:8f:23:8b:ad:f3:17:66:3b:21:80:12:
ee:01:f2:4e:1b:58:9a:af:a2:96:b7:81:cf:42:33:
ff:98:7a:22:15:8d:c7:79:43:54:25:2e:17:df:4b:
2b:16:14:a3:0b:fd:43:2b:29:6c:63:c2:1f:d5:25:
39:dc:9c:31:63:f9:3b:29:9a:d2:91:20:68:65:fa:
df:d4:4d:07:67:fd:22:3e:a2:c4:90:85:2c:ff:31:
12:57:dd:09:f8:1a:51:ac:09:dc:ba:f4:2e:2e:45:
6f:09:c9:e3:0f:05:3c:33:58:cb:a7:34:53:fe:55:
b3:37:b1:65:13:a4:18:1e:fa:f5:4f:40:40:5b:d5:
82:ab:7e:51:4c:bc:30:78:cf:6f:d4:1a:5b:4f:46:
3e:f8:26:69:ac:d6:2a:bb:86:cf:fb:2f:35:13:d6:
20:5c:35:cd:ca:8c:36:66:2e:21:96:09:78:79:56:
1a:6c:a7:bb:a1:c3:ba:46:aa:3d:b8:6e:5c:b3:f1:
51:42:73:d5:20:d7:30:21:1b:93:56:e5:7e:d0:e6:
36:29:da:96:4a:33:3b:a9:38:6c:a3:64:41:87:27:
e1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E3:4F:C5:1E:BE:12:08:20:5A:42:6D:71:46:78:0B:4A:9A:05:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7982BE4AC5F811EFA5649F76762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.217.0/24
Signature Algorithm: sha256WithRSAEncryption
14:29:88:4b:17:17:26:5c:85:4e:14:6b:11:ed:a7:a8:b9:61:
65:d2:04:a5:8d:f5:98:6c:e3:52:fd:32:5d:22:ca:8f:cb:d8:
fd:c8:27:ea:d5:a3:61:a8:41:f6:19:9b:d2:c7:32:d0:03:a1:
26:1f:68:47:b7:48:0c:7e:89:6d:f0:58:25:af:9c:ff:bf:ec:
31:23:c9:3e:f8:bf:63:ec:68:b7:4c:b5:1d:40:5b:38:3c:76:
95:54:73:12:d8:ca:2f:2c:de:cf:10:4c:af:c8:e6:08:76:c3:
e3:c9:71:fb:0c:32:87:f8:d5:f1:2b:5f:3a:82:78:32:ab:1f:
80:0a:df:72:8a:00:52:96:40:04:89:6a:1c:e5:d3:fa:6b:a4:
8e:b2:ea:bf:54:6b:fb:06:cf:a6:56:2a:25:55:df:79:8c:2e:
fb:29:27:00:74:bb:40:ed:b5:3d:42:13:e8:b7:d3:18:2c:45:
74:b0:7c:56:b9:a5:cd:5f:af:f9:04:17:6a:5c:e4:70:de:25:
6f:66:5e:dd:0c:35:49:3e:d6:38:eb:e0:69:d0:cf:ff:35:62:
82:f4:33:fd:81:95:3c:e2:9a:08:ec:de:36:02:5c:dc:f6:22:
d2:b2:4a:ae:c0:c8:0a:47:ee:bf:14:c7:b9:3c:60:2b:09:75:
8d:49:9c:89
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS4WMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTUyMDQyWhcNMjcxMjEyMTUyMDQyWjAYMRYw
FAYDVQQDEw02NzcxNjhjZC1iOGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu/sCkCPrTwxa8KZKXVT8FDbzloZSX+s83hm266/c93DbjyOLrfMXZjsh
gBLuAfJOG1iar6KWt4HPQjP/mHoiFY3HeUNUJS4X30srFhSjC/1DKylsY8If1SU5
3JwxY/k7KZrSkSBoZfrf1E0HZ/0iPqLEkIUs/zESV90J+BpRrAncuvQuLkVvCcnj
DwU8M1jLpzRT/lWzN7FlE6QYHvr1T0BAW9WCq35RTLwweM9v1BpbT0Y++CZprNYq
u4bP+y81E9YgXDXNyow2Zi4hlgl4eVYabKe7ocO6Rqo9uG5cs/FRQnPVINcwIRuT
VuV+0OY2KdqWSjM7qThso2RBhyfhyQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFC3j
T8UevhIIIFpCbXFGeAtKmgU2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OTgyQkU0QUM1RjgxMUVGQTU2NDlGNzY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtXZMA0GCSqGSIb3DQEB
CwUAA4IBAQAUKYhLFxcmXIVOFGsR7aeouWFl0gSljfWYbONS/TJdIsqPy9j9yCfq
1aNhqEH2GZvSxzLQA6EmH2hHt0gMfolt8Fglr5z/v+wxI8k++L9j7Gi3TLUdQFs4
PHaVVHMS2MovLN7PEEyvyOYIdsPjyXH7DDKH+NXxK186gngyqx+ACt9yigBSlkAE
iWoc5dP6a6SOsuq/VGv7Bs+mViolVd95jC77KScAdLtA7bU9QhPot9MYLEV0sHxW
uaXNX6/5BBdqXORw3iVvZl7dDDVJPtY46+Bp0M//NWKC9DP9gZU84poI7N42Alzc
9iLSskquwMgKR+6/FMe5PGArCXWNSZyJ
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:58:03 2025 by rpki-client