Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/977A6C10C25E11EF9908E38E762E951A.roa
File: 977A6C10C25E11EF9908E38E762E951A.roa (raw, json)
Hash identifier: pq0uMJhtlG6XKR3RJ6xsFv+9KiwxZPH+wELV0QFMly8=
Subject key identifier: A7:AA:76:FD:7B:98:AF:61:E6:03:A8:D6:3F:B7:B5:09:CC:3D:05:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012396
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/977A6C10C25E11EF9908E38E762E951A.roa
Signing time: Wed 25 Dec 2024 01:21:40 +0000
ROA not before: Wed 25 Dec 2024 01:21:36 +0000
ROA not after: Wed 10 Dec 2025 01:21:36 +0000
asID: 984
IP address blocks: 154.199.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74646 (0x12396)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:21:36 2024 GMT
Not After : Dec 10 01:21:36 2025 GMT
Subject: CN=676b5e23-b91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:e0:5b:09:de:f6:ab:bd:74:2d:9e:c0:d6:
6b:11:ed:ee:98:86:e1:7d:c9:c4:92:05:c5:41:b8:
47:8b:59:06:e0:dd:f9:83:c0:98:6b:d5:d5:d6:db:
59:9a:6b:6d:00:06:77:46:89:68:3a:cd:5e:e4:84:
33:08:a3:ae:14:92:37:07:d3:4e:53:fd:10:a7:3e:
61:62:c3:41:36:a2:26:b8:48:a9:1f:1a:78:ee:13:
00:27:72:6f:07:e1:c5:9b:f8:a6:2b:26:97:bf:1f:
56:4c:5b:97:74:97:75:da:a3:2e:60:df:bb:c5:74:
35:b9:ed:e3:aa:40:a6:a2:91:a8:9a:a5:ec:01:64:
74:09:b5:5b:a3:ee:a1:6e:ae:c6:8f:61:00:7c:55:
1f:9c:7e:f3:62:9e:8b:31:5d:58:42:dc:e5:f0:d4:
74:7b:ff:96:5b:ec:bc:82:45:78:c7:7d:92:18:b9:
4e:91:a9:86:a7:00:d1:19:cb:da:2b:b1:3f:b5:04:
ad:b7:a3:b8:60:1a:b6:e2:7c:10:3a:90:d5:1e:a7:
9c:b6:1d:5b:86:fc:de:20:75:bc:c7:68:0d:88:f4:
b7:2c:75:7c:e5:53:bf:3a:4a:12:73:05:d0:97:94:
78:ff:2d:43:14:2d:79:9d:f2:cf:69:82:22:9e:53:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AA:76:FD:7B:98:AF:61:E6:03:A8:D6:3F:B7:B5:09:CC:3D:05:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/977A6C10C25E11EF9908E38E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.88.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:79:99:10:56:7f:18:a5:29:5f:53:e4:f9:01:5b:5c:fb:51:
e0:db:af:66:44:b1:d7:d4:2b:29:96:b5:61:c8:02:1d:b8:37:
6a:fc:8d:0e:d0:18:09:cf:25:44:f2:e2:23:30:52:7a:16:d7:
a9:8b:32:65:65:bc:bb:f7:4c:32:1d:16:f8:10:c0:db:7f:82:
ba:c2:48:9a:9f:61:96:22:5d:c8:63:d4:87:d6:e6:2d:d4:45:
c8:fb:f4:a4:db:22:e4:3c:e4:16:26:d8:2c:e4:88:fe:57:ad:
d4:59:ed:31:e8:13:f3:28:4f:07:b1:b2:2f:e6:bd:69:46:54:
25:28:4c:6f:6e:3c:4c:1e:d4:d2:4a:89:f9:af:fe:3e:e6:29:
5a:69:a1:88:e5:c7:73:82:35:93:4b:07:18:2a:4e:2f:3b:f7:
0d:37:31:38:f2:1d:c8:c0:a6:6e:b2:96:03:57:ab:92:f6:63:
37:63:ef:21:ad:51:16:17:96:76:9f:9e:52:92:22:4f:4c:03:
15:98:19:0e:ae:4e:0a:78:77:75:26:7b:6b:fb:41:08:9f:7d:
7b:90:31:f0:2a:02:f7:cf:47:30:20:43:85:f1:44:4b:98:6c:
e9:04:58:04:c2:2c:54:3c:a5:42:e0:bb:dc:49:39:99:fc:fb:
71:c2:2b:d7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASOWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDEyMTM2WhcNMjUxMjEwMDEyMTM2WjAYMRYw
FAYDVQQDEw02NzZiNWUyMy1iOTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq9TgWwne9qu9dC2ewNZrEe3umIbhfcnEkgXFQbhHi1kG4N35g8CYa9XV
1ttZmmttAAZ3RoloOs1e5IQzCKOuFJI3B9NOU/0Qpz5hYsNBNqImuEipHxp47hMA
J3JvB+HFm/imKyaXvx9WTFuXdJd12qMuYN+7xXQ1ue3jqkCmopGomqXsAWR0CbVb
o+6hbq7Gj2EAfFUfnH7zYp6LMV1YQtzl8NR0e/+WW+y8gkV4x32SGLlOkamGpwDR
GcvaK7E/tQStt6O4YBq24nwQOpDVHqecth1bhvzeIHW8x2gNiPS3LHV85VO/OkoS
cwXQl5R4/y1DFC15nfLPaYIinlMuzQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKeq
dv17mK9h5gOo1j+3tQnMPQViMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NzdBNkMxMEMyNUUxMUVGOTkwOEUzOEU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsdYMA0GCSqGSIb3DQEB
CwUAA4IBAQBdeZkQVn8YpSlfU+T5AVtc+1Hg269mRLHX1CsplrVhyAIduDdq/I0O
0BgJzyVE8uIjMFJ6FtepizJlZby790wyHRb4EMDbf4K6wkian2GWIl3IY9SH1uYt
1EXI+/Sk2yLkPOQWJtgs5Ij+V63UWe0x6BPzKE8HsbIv5r1pRlQlKExvbjxMHtTS
Son5r/4+5ilaaaGI5cdzgjWTSwcYKk4vO/cNNzE48h3IwKZuspYDV6uS9mM3Y+8h
rVEWF5Z2n55SkiJPTAMVmBkOrk4KeHd1Jntr+0EIn317kDHwKgL3z0cwIEOF8URL
mGzpBFgEwixUPKVC4LvcSTmZ/PtxwivX
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:09 2025 by rpki-client