Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84C3E2A6C62B11EFA59AA2B5762E951A.roa
File: 84C3E2A6C62B11EFA59AA2B5762E951A.roa (raw, json)
Hash identifier: cjQuRbJCrbxT9oVqFVUJ52uOfJi6apV3wZMRWVSmxr4=
Subject key identifier: F7:DD:2B:02:84:75:F1:11:86:8B:D5:3D:42:9E:76:CE:06:75:F8:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84C3E2A6C62B11EFA59AA2B5762E951A.roa
Signing time: Sun 29 Dec 2024 21:26:08 +0000
ROA not before: Sun 29 Dec 2024 21:26:05 +0000
ROA not after: Sun 12 Dec 2027 21:26:05 +0000
asID: 17561
IP address blocks: 154.217.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77764 (0x12fc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:26:05 2024 GMT
Not After : Dec 12 21:26:05 2027 GMT
Subject: CN=6771be70-72ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:e3:5b:09:f6:a5:66:8b:a0:d8:f0:71:41:
62:f3:8d:81:a2:53:7d:ad:29:fd:7d:d1:15:19:4b:
a1:39:9e:d1:97:d6:59:b8:63:38:5d:c9:70:85:1c:
a0:17:74:aa:93:1e:3e:e9:d7:9b:95:a5:46:f3:08:
63:10:c1:bd:26:c2:20:e7:91:39:c5:4c:cb:83:63:
80:23:9c:87:a5:85:ff:0b:02:ea:82:3f:b9:47:ee:
4b:b3:5c:c5:7d:37:4f:60:e7:12:d2:14:98:18:41:
e6:b4:52:4a:41:cf:5f:db:7c:e5:9d:06:68:d7:8f:
a2:a4:53:8f:12:2c:e5:81:4a:27:38:1f:f5:c3:ef:
a1:6e:f0:6a:00:09:a1:77:40:29:26:26:e4:3c:30:
a0:62:d2:00:8b:1e:55:49:91:8d:d5:6a:06:2e:03:
df:58:8c:8a:80:31:e7:bb:2c:76:de:a3:36:4f:03:
3d:11:64:aa:a9:89:6a:2d:32:8d:c9:83:72:86:5c:
2a:80:90:a6:3c:83:3a:0d:bb:6b:db:18:69:6f:27:
ee:a6:51:ed:01:fd:c9:e0:51:80:fd:27:f8:10:39:
6d:a4:34:85:04:ad:21:46:ad:85:39:a8:87:0f:c3:
aa:b3:0c:e6:6b:e3:5d:9f:8a:3d:ac:92:80:25:84:
9b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DD:2B:02:84:75:F1:11:86:8B:D5:3D:42:9E:76:CE:06:75:F8:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84C3E2A6C62B11EFA59AA2B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.197.0/24
Signature Algorithm: sha256WithRSAEncryption
65:fb:f4:69:21:1c:03:d8:c9:9b:c3:d9:96:da:0d:b3:eb:c8:
ce:14:69:59:6f:3d:9e:c6:95:ea:d3:4e:c4:01:a8:f5:45:c9:
f2:97:4f:da:43:1a:74:fd:50:f6:e7:df:a5:ce:9e:06:b4:2b:
1a:67:94:9c:4c:50:39:86:2f:2d:a2:f9:86:55:de:4b:ff:0b:
17:dd:5a:d1:38:c3:c7:8d:2d:68:9a:51:41:ae:04:a7:da:0f:
99:04:2e:da:30:cb:b3:74:0e:19:e6:ad:c5:03:71:74:2f:b0:
f9:e0:af:30:e6:e5:4a:04:7c:db:f6:37:1f:62:38:06:e7:a6:
57:32:ba:53:2b:0e:ce:cd:23:54:0e:89:04:6c:7a:1f:1e:87:
21:b9:3f:98:a7:a5:ea:a4:89:d3:6d:e0:4f:15:17:79:df:c3:
36:72:f8:7a:48:38:e5:33:69:ae:10:b0:c5:3c:1d:32:9b:6e:
7d:1d:31:1b:65:34:68:30:97:50:6c:c5:71:70:48:ad:ac:2a:
d5:c0:3c:f3:f5:76:73:5b:de:e6:49:97:ac:5d:1b:8f:1d:04:
5c:66:35:9f:79:7f:68:c5:db:0a:28:f3:2c:25:21:96:f4:05:
da:42:6b:7e:10:a9:34:e4:09:09:2a:73:cc:59:6e:65:07:dc:
e2:4f:60:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS/EMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MjEyNjA1WhcNMjcxMjEyMjEyNjA1WjAYMRYw
FAYDVQQDEw02NzcxYmU3MC03MmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtBnjWwn2pWaLoNjwcUFi842BolN9rSn9fdEVGUuhOZ7Rl9ZZuGM4Xclw
hRygF3Sqkx4+6deblaVG8whjEMG9JsIg55E5xUzLg2OAI5yHpYX/CwLqgj+5R+5L
s1zFfTdPYOcS0hSYGEHmtFJKQc9f23zlnQZo14+ipFOPEizlgUonOB/1w++hbvBq
AAmhd0ApJibkPDCgYtIAix5VSZGN1WoGLgPfWIyKgDHnuyx23qM2TwM9EWSqqYlq
LTKNyYNyhlwqgJCmPIM6Dbtr2xhpbyfuplHtAf3J4FGA/Sf4EDltpDSFBK0hRq2F
OaiHD8Oqswzma+Ndn4o9rJKAJYSbOwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPfd
KwKEdfERhovVPUKeds4Gdfg+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NEMzRTJBNkM2MkIxMUVGQTU5QUEyQjU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtnFMA0GCSqGSIb3DQEB
CwUAA4IBAQBl+/RpIRwD2Mmbw9mW2g2z68jOFGlZbz2expXq007EAaj1Rcnyl0/a
Qxp0/VD259+lzp4GtCsaZ5ScTFA5hi8tovmGVd5L/wsX3VrROMPHjS1omlFBrgSn
2g+ZBC7aMMuzdA4Z5q3FA3F0L7D54K8w5uVKBHzb9jcfYjgG56ZXMrpTKw7OzSNU
DokEbHofHochuT+Yp6XqpInTbeBPFRd538M2cvh6SDjlM2muELDFPB0ym259HTEb
ZTRoMJdQbMVxcEitrCrVwDzz9XZzW97mSZesXRuPHQRcZjWfeX9oxdsKKPMsJSGW
9AXaQmt+EKk05AkJKnPMWW5lB9ziT2Dn
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:14 2025 by rpki-client