Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94444810C42D11EFB385D0A0762E951A.roa
File: 94444810C42D11EFB385D0A0762E951A.roa (raw, json)
Hash identifier: eaT7tWjnmtCcP0zUW6Z2UnX9nH8b86P1tvtwTYqQep4=
Subject key identifier: 17:AA:15:7A:83:1A:9B:DB:E5:89:13:47:20:6B:5C:C1:DC:89:D0:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012A3B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94444810C42D11EFB385D0A0762E951A.roa
Signing time: Fri 27 Dec 2024 08:35:51 +0000
ROA not before: Fri 27 Dec 2024 08:35:48 +0000
ROA not after: Fri 12 Dec 2025 08:35:48 +0000
asID: 984
IP address blocks: 154.203.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76347 (0x12a3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 08:35:48 2024 GMT
Not After : Dec 12 08:35:48 2025 GMT
Subject: CN=676e66e7-798a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:2b:ce:a6:1b:05:f6:3f:13:b1:94:82:0c:
af:1d:aa:1d:f6:be:2e:b0:57:17:9f:a1:d2:2d:f9:
3e:b3:47:83:ca:c0:f7:c2:6d:7b:1d:51:89:a1:88:
25:d1:2a:86:b8:fe:38:4a:78:86:21:9d:77:b3:49:
ea:89:19:af:70:71:bd:34:d0:77:8c:69:7c:51:3a:
f8:74:57:3f:0e:98:7d:ba:6f:3b:04:0f:d5:8f:cf:
1a:4d:1a:13:25:1e:de:d2:39:b7:48:5c:82:37:3f:
87:da:2b:85:ce:43:0c:e1:25:45:26:99:b2:cf:ec:
25:4b:4c:d4:cf:e5:a7:30:f5:76:aa:00:85:62:74:
ea:bb:20:b7:33:d1:e1:dd:3b:a2:46:1f:1b:ca:b8:
c8:9a:8d:10:4e:56:a3:de:e6:9c:21:6f:53:b6:5b:
05:c2:20:3c:a0:e1:ac:a2:b4:a0:ad:d9:12:47:ff:
41:d3:50:86:a8:8f:1b:d7:20:fb:85:61:b2:c1:de:
2f:5e:8d:0d:57:36:9b:b1:66:d4:c2:f1:e3:1a:0c:
31:4d:4a:b6:fa:ad:b6:73:36:35:14:ae:72:ec:51:
31:8b:71:53:ea:ca:ed:46:38:69:8a:7c:7b:30:2c:
7a:af:f8:7f:fa:a7:4a:dc:94:42:8c:59:18:54:22:
38:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AA:15:7A:83:1A:9B:DB:E5:89:13:47:20:6B:5C:C1:DC:89:D0:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94444810C42D11EFB385D0A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.6.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a5:3c:12:3e:12:56:f8:e7:ee:b5:d3:58:46:52:b0:b8:c9:
0f:e1:33:72:f0:6f:ee:e4:16:29:89:6e:d6:e5:ba:9e:d3:11:
0c:04:ee:57:92:83:d2:bb:5a:19:a0:cf:89:4a:a5:4f:71:39:
91:45:1a:f0:58:01:41:cc:81:0f:8c:6d:1e:8a:46:85:17:1d:
c5:6e:8a:06:8e:28:92:1d:5c:7b:eb:32:f6:f5:27:b3:e8:e4:
0a:f7:ed:04:21:22:8f:f1:9f:5e:41:e5:b2:9e:5a:39:79:b4:
ac:3c:f5:06:5e:fe:42:73:a6:33:db:32:d7:76:d7:71:81:d9:
62:a4:4c:7a:2b:aa:40:ef:25:60:12:fe:39:a4:30:21:09:eb:
d5:98:85:1d:11:d1:c7:8d:aa:1f:78:39:f8:17:6e:3b:84:7e:
7f:1b:13:11:27:2e:e6:53:3f:0e:d5:46:4a:6e:a3:f1:04:7b:
b2:de:4a:e7:4a:67:31:bd:ac:e8:58:20:4a:55:ca:ec:aa:8e:
43:aa:24:e0:c4:f2:35:de:40:1e:78:e8:66:b6:9a:b8:c3:02:
e8:56:c4:9b:bb:6c:3a:79:e0:17:b5:11:c5:6f:01:09:98:00:
3e:6d:05:e3:57:ff:e7:00:b7:23:cc:4a:fc:b8:3c:4f:77:46:
36:31:75:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASo7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDgzNTQ4WhcNMjUxMjEyMDgzNTQ4WjAYMRYw
FAYDVQQDEw02NzZlNjZlNy03OThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwA0rzqYbBfY/E7GUggyvHaod9r4usFcXn6HSLfk+s0eDysD3wm17HVGJ
oYgl0SqGuP44SniGIZ13s0nqiRmvcHG9NNB3jGl8UTr4dFc/Dph9um87BA/Vj88a
TRoTJR7e0jm3SFyCNz+H2iuFzkMM4SVFJpmyz+wlS0zUz+WnMPV2qgCFYnTquyC3
M9Hh3TuiRh8byrjImo0QTlaj3uacIW9TtlsFwiA8oOGsorSgrdkSR/9B01CGqI8b
1yD7hWGywd4vXo0NVzabsWbUwvHjGgwxTUq2+q22czY1FK5y7FExi3FT6srtRjhp
inx7MCx6r/h/+qdK3JRCjFkYVCI4MQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBeq
FXqDGpvb5YkTRyBrXMHcidDDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NDQ0NDgxMEM0MkQxMUVGQjM4NUQwQTA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmssGMA0GCSqGSIb3DQEB
CwUAA4IBAQAlpTwSPhJW+OfutdNYRlKwuMkP4TNy8G/u5BYpiW7W5bqe0xEMBO5X
koPSu1oZoM+JSqVPcTmRRRrwWAFBzIEPjG0eikaFFx3FbooGjiiSHVx76zL29Sez
6OQK9+0EISKP8Z9eQeWynlo5ebSsPPUGXv5Cc6Yz2zLXdtdxgdlipEx6K6pA7yVg
Ev45pDAhCevVmIUdEdHHjaofeDn4F247hH5/GxMRJy7mUz8O1UZKbqPxBHuy3krn
SmcxvazoWCBKVcrsqo5DqiTgxPI13kAeeOhmtpq4wwLoVsSbu2w6eeAXtRHFbwEJ
mAA+bQXjV//nALcjzEr8uDxPd0Y2MXU7
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:07 2025 by rpki-client