Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95BC25D4C27311EFB3CBD0A4762E951A.roa
File: 95BC25D4C27311EFB3CBD0A4762E951A.roa (raw, json)
Hash identifier: YN2bLcIO3SklWgOqBPmNMZ4YTLoqJHsIc37VAuBubMo=
Subject key identifier: A3:2F:77:86:BA:DF:EE:87:74:8D:7E:EA:CF:D5:79:CB:45:C4:60:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012480
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95BC25D4C27311EFB3CBD0A4762E951A.roa
Signing time: Wed 25 Dec 2024 03:51:56 +0000
ROA not before: Wed 25 Dec 2024 03:51:52 +0000
ROA not after: Wed 10 Dec 2025 03:51:52 +0000
asID: 984
IP address blocks: 154.211.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74880 (0x12480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:51:52 2024 GMT
Not After : Dec 10 03:51:52 2025 GMT
Subject: CN=676b815c-5f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:fe:15:2b:1e:3b:64:c0:2a:d9:14:8e:28:
35:bd:e2:2b:b5:f4:33:64:4d:bf:da:fe:ee:16:36:
0a:a1:ad:1f:2b:0b:74:2d:9f:df:f8:77:5e:71:f5:
e8:5e:05:57:ec:d2:04:d5:93:cd:b7:84:51:e1:ae:
07:18:c8:d7:65:8f:31:22:71:19:03:ea:0b:de:4c:
20:3e:9f:1e:9b:11:25:fc:09:12:f8:1f:b9:4d:ff:
95:7b:af:ad:bd:70:41:13:96:d3:d6:07:e6:e2:4c:
e2:e4:07:29:9c:f9:97:dc:ed:39:b8:24:53:ae:7c:
4c:0a:b7:df:07:e2:1e:6f:7e:b7:c3:fd:75:1b:bd:
2f:ce:33:4d:6d:b5:7f:15:f1:6d:09:39:97:a1:c7:
38:fc:3b:86:0b:56:2c:8a:dd:e5:a8:10:81:25:8a:
86:c9:66:27:54:f5:6a:0c:03:8b:a3:b2:54:50:b1:
b8:79:44:20:ec:17:9e:11:11:f9:84:a6:8b:74:05:
51:41:78:79:05:a6:78:0d:1c:ae:de:3b:f1:86:1e:
33:a3:5b:30:6a:3b:77:e2:eb:d3:77:f8:6b:5a:45:
b9:74:1d:cc:d5:6d:13:7a:db:9d:f9:96:d6:c5:9b:
2c:69:9a:0d:04:a9:d4:87:0c:b8:30:62:bc:82:9e:
27:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2F:77:86:BA:DF:EE:87:74:8D:7E:EA:CF:D5:79:CB:45:C4:60:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95BC25D4C27311EFB3CBD0A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.221.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:c4:2d:73:3a:db:65:79:04:59:33:48:1f:c7:02:f8:24:07:
42:8e:4f:8a:92:6c:b6:7a:6e:da:3c:ac:54:78:7a:ec:85:81:
53:81:2f:fe:f9:26:8d:39:c8:d2:1e:b2:73:04:a6:95:5f:b5:
b8:5b:6c:7b:f2:ce:de:17:b8:dd:1b:7b:21:bf:b1:d8:5d:1b:
c7:b4:03:0c:cc:77:92:ea:96:f7:74:03:e7:e6:27:e3:d2:97:
d9:fa:c4:92:37:85:d8:76:c3:8a:12:97:dd:f2:f4:5f:1a:80:
ba:a9:ec:a3:72:2c:fb:08:31:d7:90:09:ef:80:03:a7:f3:cc:
1e:72:f5:05:8a:cd:1f:e0:e9:0f:8f:5c:8e:fa:0a:75:92:8e:
02:dd:ed:84:35:3a:83:8e:7b:ce:32:72:d0:10:a9:20:00:b9:
5d:4e:27:0c:0f:e4:2a:da:01:ee:9a:a5:a4:cc:68:4e:19:a8:
bc:73:9c:15:1e:e8:1e:1d:74:ff:e1:b0:aa:ab:8b:2f:ce:18:
bf:1b:e7:eb:58:5b:01:22:f3:88:76:a1:c8:0f:17:19:40:5e:
b4:ff:10:ed:c0:5b:98:f9:9c:4d:48:f5:f3:b0:3b:1f:c5:ea:
06:e3:65:73:1f:65:3d:04:29:d0:7e:1b:c4:ea:a1:91:2d:06:
d9:36:45:8a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASSAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDM1MTUyWhcNMjUxMjEwMDM1MTUyWjAYMRYw
FAYDVQQDEw02NzZiODE1Yy01ZjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtuz+FSseO2TAKtkUjig1veIrtfQzZE2/2v7uFjYKoa0fKwt0LZ/f+Hde
cfXoXgVX7NIE1ZPNt4RR4a4HGMjXZY8xInEZA+oL3kwgPp8emxEl/AkS+B+5Tf+V
e6+tvXBBE5bT1gfm4kzi5AcpnPmX3O05uCRTrnxMCrffB+Ieb363w/11G70vzjNN
bbV/FfFtCTmXocc4/DuGC1Ysit3lqBCBJYqGyWYnVPVqDAOLo7JUULG4eUQg7Bee
ERH5hKaLdAVRQXh5BaZ4DRyu3jvxhh4zo1swajt34uvTd/hrWkW5dB3M1W0Tetud
+ZbWxZssaZoNBKnUhwy4MGK8gp4n9QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKMv
d4a63+6HdI1+6s/VectFxGDOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NUJDMjVENEMyNzMxMUVGQjNDQkQwQTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtPdMA0GCSqGSIb3DQEB
CwUAA4IBAQDLxC1zOttleQRZM0gfxwL4JAdCjk+Kkmy2em7aPKxUeHrshYFTgS/+
+SaNOcjSHrJzBKaVX7W4W2x78s7eF7jdG3shv7HYXRvHtAMMzHeS6pb3dAPn5ifj
0pfZ+sSSN4XYdsOKEpfd8vRfGoC6qeyjciz7CDHXkAnvgAOn88wecvUFis0f4OkP
j1yO+gp1ko4C3e2ENTqDjnvOMnLQEKkgALldTicMD+Qq2gHumqWkzGhOGai8c5wV
HugeHXT/4bCqq4svzhi/G+frWFsBIvOIdqHIDxcZQF60/xDtwFuY+ZxNSPXzsDsf
xeoG42VzH2U9BCnQfhvE6qGRLQbZNkWK
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:45 2025 by rpki-client