Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E7249C8C1CC11EF894C1F6D762E951A.roa
File: 7E7249C8C1CC11EF894C1F6D762E951A.roa (raw, json)
Hash identifier: EwWD6aHEbHKR8GVAsa8EZxU8xKKAGsDbNxlFNOhbqXo=
Subject key identifier: 8B:0E:DB:4F:29:0A:9E:E5:CC:5C:CA:5E:FB:A4:7F:B7:7D:7B:92:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01226D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E7249C8C1CC11EF894C1F6D762E951A.roa
Signing time: Tue 24 Dec 2024 07:55:51 +0000
ROA not before: Tue 24 Dec 2024 07:55:47 +0000
ROA not after: Wed 10 Dec 2025 07:55:47 +0000
asID: 984
IP address blocks: 154.193.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74349 (0x1226d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 07:55:47 2024 GMT
Not After : Dec 10 07:55:47 2025 GMT
Subject: CN=676a6907-967e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1d:d0:8f:cc:d7:ef:96:77:e8:c6:df:15:2c:
d7:59:8a:dc:ec:e5:aa:5a:a0:07:49:b1:56:1c:37:
f0:d1:53:37:db:7f:b9:0a:36:a5:84:3d:a5:fd:29:
2d:1c:6c:00:5d:fa:88:62:87:07:16:45:36:8e:86:
a9:3f:e8:8b:a6:b5:f1:54:a9:21:c8:4b:48:03:aa:
56:f5:6b:d5:19:6f:45:3b:85:a5:db:91:8a:69:3e:
a7:d3:17:9e:63:d8:2e:c4:3b:9c:41:73:d0:37:8e:
4a:56:ea:45:c4:c1:10:e8:ad:55:9f:30:e5:22:ea:
e2:34:8e:f1:97:f3:d1:0f:65:16:27:50:7e:1f:88:
9e:da:37:03:f4:d4:ab:56:5f:20:42:9c:b5:b3:85:
9d:40:3c:3f:a0:4f:9a:71:a8:0f:ce:88:03:c4:be:
4e:58:e7:8e:4c:d1:48:54:1b:82:40:52:9c:ea:6e:
f0:9a:41:6c:d2:00:ab:66:9f:9e:29:7b:1b:ed:5a:
e6:c9:9b:88:16:1b:92:2f:09:cd:fb:47:62:b1:5c:
f5:b5:b0:10:43:c1:4e:bc:ec:6f:35:20:94:c1:bf:
0a:58:d6:0b:9e:c0:b9:60:ef:08:dc:a7:f1:02:1e:
b2:8c:5f:9f:4b:56:fa:c6:ec:39:32:79:1a:cd:b3:
aa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0E:DB:4F:29:0A:9E:E5:CC:5C:CA:5E:FB:A4:7F:B7:7D:7B:92:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E7249C8C1CC11EF894C1F6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.214.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:7e:46:cc:c2:85:2f:c8:42:89:3d:78:87:6d:29:21:f0:cb:
54:cd:c2:4f:13:c2:25:58:a1:d3:bd:0b:d9:f9:5b:ca:0d:e9:
bc:51:20:c8:4b:c6:06:16:8c:07:a2:c5:29:18:42:8b:44:64:
2b:8d:a5:e4:4b:d7:02:eb:8d:11:ff:5a:c9:c1:b3:5c:07:ea:
d6:eb:89:7b:d2:7e:03:37:8f:44:c1:f1:26:a8:ec:a0:c5:16:
f9:d3:b9:52:4f:87:62:37:9c:7e:78:49:45:ad:d3:35:2c:09:
69:31:c8:79:5e:2c:08:c7:a5:ea:d6:f0:cb:f2:17:47:8d:97:
6e:c1:fc:b2:c9:a8:0e:7a:88:a4:8d:d8:b9:11:d7:c0:ca:c3:
a0:51:5d:dd:04:0a:ce:ae:63:84:b4:b8:67:82:96:08:32:52:
57:03:dc:26:f0:43:55:ea:14:59:ef:6e:81:38:78:17:30:3d:
97:18:b0:bc:48:8c:48:2b:e5:b6:b6:7b:f8:ec:fe:cd:47:5c:
18:d5:50:c2:39:e1:8e:ec:6c:e0:3b:0a:48:ee:21:95:34:4e:
b9:f9:07:64:be:7a:3d:a4:4c:5d:8f:87:6d:61:92:bf:b0:ec:
fb:55:f5:59:e9:19:14:58:8d:d4:02:3d:2a:85:07:75:e4:8e:
73:e5:ea:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASJtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDc1NTQ3WhcNMjUxMjEwMDc1NTQ3WjAYMRYw
FAYDVQQDEw02NzZhNjkwNy05NjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4R3Qj8zX75Z36MbfFSzXWYrc7OWqWqAHSbFWHDfw0VM323+5CjalhD2l
/SktHGwAXfqIYocHFkU2joapP+iLprXxVKkhyEtIA6pW9WvVGW9FO4Wl25GKaT6n
0xeeY9guxDucQXPQN45KVupFxMEQ6K1VnzDlIuriNI7xl/PRD2UWJ1B+H4ie2jcD
9NSrVl8gQpy1s4WdQDw/oE+acagPzogDxL5OWOeOTNFIVBuCQFKc6m7wmkFs0gCr
Zp+eKXsb7VrmyZuIFhuSLwnN+0disVz1tbAQQ8FOvOxvNSCUwb8KWNYLnsC5YO8I
3KfxAh6yjF+fS1b6xuw5MnkazbOqLwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIsO
208pCp7lzFzKXvukf7d9e5IWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RTcyNDlDOEMxQ0MxMUVGODk0QzFGNkQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsHWMA0GCSqGSIb3DQEB
CwUAA4IBAQC7fkbMwoUvyEKJPXiHbSkh8MtUzcJPE8IlWKHTvQvZ+VvKDem8USDI
S8YGFowHosUpGEKLRGQrjaXkS9cC640R/1rJwbNcB+rW64l70n4DN49EwfEmqOyg
xRb507lST4diN5x+eElFrdM1LAlpMch5XiwIx6Xq1vDL8hdHjZduwfyyyagOeoik
jdi5EdfAysOgUV3dBArOrmOEtLhngpYIMlJXA9wm8ENV6hRZ726BOHgXMD2XGLC8
SIxIK+W2tnv47P7NR1wY1VDCOeGO7GzgOwpI7iGVNE65+Qdkvno9pExdj4dtYZK/
sOz7VfVZ6RkUWI3UAj0qhQd15I5z5erW
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:56 2025 by rpki-client