Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86EFCE3EC42B11EF9C430D94762E951A.roa
File: 86EFCE3EC42B11EF9C430D94762E951A.roa (raw, json)
Hash identifier: V/bYyAWocM2Zq2vWKgqqGRSL/Rrupn7SXkwaJ9VDPvo=
Subject key identifier: 94:DB:C5:5C:EE:20:01:04:08:03:01:7C:FE:78:90:0A:A2:72:63:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012A27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86EFCE3EC42B11EF9C430D94762E951A.roa
Signing time: Fri 27 Dec 2024 08:21:10 +0000
ROA not before: Fri 27 Dec 2024 08:21:06 +0000
ROA not after: Sun 12 Dec 2027 08:21:06 +0000
asID: 17561
IP address blocks: 154.202.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76327 (0x12a27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 08:21:06 2024 GMT
Not After : Dec 12 08:21:06 2027 GMT
Subject: CN=676e6376-abaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2a:52:9d:59:68:95:a0:f5:6f:e4:2a:05:fd:
cb:65:91:c7:72:41:0a:9f:08:56:7b:22:50:88:d9:
eb:7c:f6:21:f3:02:9e:0b:3d:30:5c:27:1e:7c:c5:
a7:9b:87:a0:e0:07:53:10:a2:dd:26:3c:9b:f3:5a:
54:f6:cc:22:cb:e4:2e:9c:3a:a0:dd:79:47:83:f0:
9c:89:48:6a:49:57:83:b5:ce:f4:e4:71:49:0f:b3:
81:f6:3a:30:50:b3:c3:5a:82:32:42:f5:b2:58:c2:
a4:09:e1:41:8e:95:2c:34:e8:79:3f:2c:1e:e9:a7:
bc:0e:6b:d6:38:cf:93:fa:d6:07:b2:a3:93:10:ae:
e2:11:c4:0e:c2:fa:f4:bd:a3:b3:7a:b5:f8:94:87:
bf:72:45:eb:40:29:13:d7:3a:b9:68:3e:77:cc:7e:
e1:da:63:d2:d7:8e:00:d9:7e:e9:4a:3b:9a:2e:3c:
90:7b:5c:97:c6:f5:ce:09:92:7a:13:e4:0d:3a:3e:
58:85:d0:70:77:4e:09:30:57:5c:45:8b:f0:b5:47:
61:35:47:ef:a7:80:e6:fe:98:92:4e:72:ad:94:b5:
ae:73:51:7b:79:6d:cf:9f:25:e7:ae:24:f3:53:49:
c4:c3:a5:85:fc:13:d5:66:21:28:ac:89:7f:65:71:
7a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DB:C5:5C:EE:20:01:04:08:03:01:7C:FE:78:90:0A:A2:72:63:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86EFCE3EC42B11EF9C430D94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.122.0/24
Signature Algorithm: sha256WithRSAEncryption
51:1a:54:3d:0b:7e:2c:e0:41:93:2e:80:4d:c5:2c:b3:da:80:
3c:82:49:9f:4a:16:fd:bd:90:fe:53:02:17:07:f6:bc:3d:e0:
9e:05:eb:ff:47:e8:ce:f0:42:e9:be:d2:45:d0:ea:84:28:c6:
a5:46:6a:4b:fb:d7:d9:44:fe:a0:d7:f1:ad:eb:f7:2a:1b:c1:
3d:61:dc:0b:cd:ca:92:fc:0f:91:b0:16:37:91:58:3c:42:ff:
84:bb:6a:5a:52:ac:18:39:8e:f2:74:09:9a:43:86:df:86:72:
d2:43:88:ec:fe:da:e7:d7:90:08:51:b8:2d:34:2d:bb:db:9d:
74:14:54:01:f4:5c:b3:50:2d:c2:87:e1:5e:29:b3:f8:16:1c:
87:f1:8f:83:8c:52:83:e5:d1:dc:b8:c5:12:59:a5:1a:11:ad:
27:22:ef:d2:d0:19:86:06:c7:68:fe:65:09:0f:68:9d:77:dc:
a6:bd:5b:da:67:1b:dc:7d:84:d6:40:37:96:a9:e5:b0:9b:11:
5a:c6:e9:bd:3e:96:0b:79:1d:b1:ee:7f:e9:b0:ab:07:ea:22:
bf:4c:16:0d:3c:2a:47:b5:d6:90:f6:8f:5a:38:17:18:8f:ac:
90:57:b9:3f:59:2b:d2:57:0e:04:0c:46:57:4e:1d:cf:b2:35:
0a:72:7d:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASonMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDgyMTA2WhcNMjcxMjEyMDgyMTA2WjAYMRYw
FAYDVQQDEw02NzZlNjM3Ni1hYmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4SpSnVlolaD1b+QqBf3LZZHHckEKnwhWeyJQiNnrfPYh8wKeCz0wXCce
fMWnm4eg4AdTEKLdJjyb81pU9swiy+QunDqg3XlHg/CciUhqSVeDtc705HFJD7OB
9jowULPDWoIyQvWyWMKkCeFBjpUsNOh5Pywe6ae8DmvWOM+T+tYHsqOTEK7iEcQO
wvr0vaOzerX4lIe/ckXrQCkT1zq5aD53zH7h2mPS144A2X7pSjuaLjyQe1yXxvXO
CZJ6E+QNOj5YhdBwd04JMFdcRYvwtUdhNUfvp4Dm/piSTnKtlLWuc1F7eW3PnyXn
riTzU0nEw6WF/BPVZiEorIl/ZXF6QwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJTb
xVzuIAEECAMBfP54kAqicmP4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NkVGQ0UzRUM0MkIxMUVGOUM0MzBEOTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsp6MA0GCSqGSIb3DQEB
CwUAA4IBAQBRGlQ9C34s4EGTLoBNxSyz2oA8gkmfShb9vZD+UwIXB/a8PeCeBev/
R+jO8ELpvtJF0OqEKMalRmpL+9fZRP6g1/Gt6/cqG8E9YdwLzcqS/A+RsBY3kVg8
Qv+Eu2paUqwYOY7ydAmaQ4bfhnLSQ4js/trn15AIUbgtNC272510FFQB9FyzUC3C
h+FeKbP4FhyH8Y+DjFKD5dHcuMUSWaUaEa0nIu/S0BmGBsdo/mUJD2idd9ymvVva
ZxvcfYTWQDeWqeWwmxFaxum9PpYLeR2x7n/psKsH6iK/TBYNPCpHtdaQ9o9aOBcY
j6yQV7k/WSvSVw4EDEZXTh3PsjUKcn2V
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:17 2025 by rpki-client