Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9525509EC27511EF9B178FB2762E951A.roa
File: 9525509EC27511EF9B178FB2762E951A.roa (raw, json)
Hash identifier: lpEPVwy3PYz9piQMBeNHMK1kpwAsE0Lyy76DfiPE7Yo=
Subject key identifier: 79:FA:91:AF:87:12:24:59:87:6D:33:1C:16:49:02:75:53:AB:23:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012496
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9525509EC27511EF9B178FB2762E951A.roa
Signing time: Wed 25 Dec 2024 04:06:14 +0000
ROA not before: Wed 25 Dec 2024 04:06:10 +0000
ROA not after: Wed 10 Dec 2025 04:06:10 +0000
asID: 984
IP address blocks: 154.211.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74902 (0x12496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 04:06:10 2024 GMT
Not After : Dec 10 04:06:10 2025 GMT
Subject: CN=676b84b6-55e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:02:0a:ae:c0:38:61:17:90:b3:48:b0:34:
fc:bf:3f:fa:a0:af:4e:cb:9c:f0:fc:24:c2:33:d4:
a7:89:00:52:97:bd:40:3f:d8:57:da:f5:f1:7b:70:
6c:a2:a0:29:f0:76:7f:cc:a7:84:ae:b5:f8:18:94:
2d:55:92:2a:04:42:62:0c:bd:c7:31:cf:e4:40:4a:
ec:14:e7:c2:43:66:c5:59:db:d3:d2:d2:1a:9f:0a:
5a:61:9d:3c:aa:ba:94:f5:b2:b0:b4:0f:7f:b3:b1:
eb:a5:14:20:2f:3e:9a:88:40:04:af:55:85:b2:c8:
b5:12:37:47:ec:51:47:a4:63:31:33:1c:3d:d2:3f:
ea:be:2c:7c:af:be:72:e8:e0:bc:2e:99:ba:19:d8:
47:ae:69:18:19:dd:14:8d:43:83:f8:55:76:50:55:
07:e5:3b:51:1e:8e:aa:7d:59:79:38:b9:85:29:03:
7a:20:05:ed:0e:2d:f0:2c:0b:aa:41:f3:d9:8b:78:
a4:27:38:a7:b0:94:5f:8f:72:88:5d:ed:b9:93:f7:
c2:43:e1:e3:48:ac:6a:8f:5a:72:e0:d4:c6:1d:0c:
4f:30:b7:c5:7d:da:b2:91:fd:e2:42:db:94:59:c7:
05:d2:a1:56:03:f3:85:05:2a:b5:07:2f:e7:b1:44:
0e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FA:91:AF:87:12:24:59:87:6D:33:1C:16:49:02:75:53:AB:23:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9525509EC27511EF9B178FB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.232.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:0e:8c:7a:00:5e:c7:14:0c:01:3f:5a:ed:83:b5:42:25:b6:
f0:d3:a1:a3:cc:5c:4f:22:33:06:82:7a:3a:78:d9:ae:2d:8d:
d4:19:39:a4:af:cb:c5:f5:c6:78:57:e1:0e:d8:37:78:20:86:
94:68:5f:e4:26:7d:4f:44:86:a4:30:6d:7d:0b:ad:4b:c1:04:
1b:a5:29:68:7d:09:8b:25:10:f3:32:8f:ae:9a:91:e2:7c:d9:
5d:14:05:b3:6e:c6:04:4e:11:d7:94:f9:3a:cf:06:61:09:31:
e3:2c:fc:47:33:fb:1a:03:ba:99:2e:f8:64:d0:73:26:98:9a:
43:24:a3:52:1e:13:8e:6b:7c:3b:af:41:6f:6b:60:2b:30:a8:
08:7b:a8:c5:e1:52:40:9c:52:91:60:6e:a9:8a:12:54:34:ea:
7f:d9:16:10:16:b5:09:ba:3b:53:da:ec:f3:0d:1f:29:4d:f3:
ab:e6:a5:da:94:86:fd:9b:d7:d7:c3:36:d5:00:ec:e3:81:f0:
0e:3f:20:ec:f0:f8:3b:61:c3:95:00:3a:68:62:d8:0a:6e:66:
4d:60:fc:76:eb:bc:a4:c6:f5:7f:41:c9:7f:bb:39:59:db:ea:
c1:91:2c:10:b0:83:75:7e:18:c8:ae:39:29:d7:e6:39:0c:85:
c9:71:28:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASSWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDQwNjEwWhcNMjUxMjEwMDQwNjEwWjAYMRYw
FAYDVQQDEw02NzZiODRiNi01NWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1fECCq7AOGEXkLNIsDT8vz/6oK9Oy5zw/CTCM9SniQBSl71AP9hX2vXx
e3BsoqAp8HZ/zKeErrX4GJQtVZIqBEJiDL3HMc/kQErsFOfCQ2bFWdvT0tIanwpa
YZ08qrqU9bKwtA9/s7HrpRQgLz6aiEAEr1WFssi1EjdH7FFHpGMxMxw90j/qvix8
r75y6OC8Lpm6GdhHrmkYGd0UjUOD+FV2UFUH5TtRHo6qfVl5OLmFKQN6IAXtDi3w
LAuqQfPZi3ikJzinsJRfj3KIXe25k/fCQ+HjSKxqj1py4NTGHQxPMLfFfdqykf3i
QtuUWccF0qFWA/OFBSq1By/nsUQOlQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHn6
ka+HEiRZh20zHBZJAnVTqyNPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NTI1NTA5RUMyNzUxMUVGOUIxNzhGQjI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtPoMA0GCSqGSIb3DQEB
CwUAA4IBAQDKDox6AF7HFAwBP1rtg7VCJbbw06GjzFxPIjMGgno6eNmuLY3UGTmk
r8vF9cZ4V+EO2Dd4IIaUaF/kJn1PRIakMG19C61LwQQbpSlofQmLJRDzMo+umpHi
fNldFAWzbsYEThHXlPk6zwZhCTHjLPxHM/saA7qZLvhk0HMmmJpDJKNSHhOOa3w7
r0Fva2ArMKgIe6jF4VJAnFKRYG6pihJUNOp/2RYQFrUJujtT2uzzDR8pTfOr5qXa
lIb9m9fXwzbVAOzjgfAOPyDs8Pg7YcOVADpoYtgKbmZNYPx267ykxvV/Qcl/uzlZ
2+rBkSwQsIN1fhjIrjkp1+Y5DIXJcSjd
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:00 2025 by rpki-client