Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98A955A4C42211EF91D1145C762E951A.roa
File: 98A955A4C42211EF91D1145C762E951A.roa (raw, json)
Hash identifier: ukfgAdRl20Pv/3PK4S0J+zRWrX/aQ6d203tzLRYbcOs=
Subject key identifier: 3C:A2:F3:12:91:E3:8B:D2:B2:BF:87:2C:D5:AC:7E:86:8B:40:77:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98A955A4C42211EF91D1145C762E951A.roa
Signing time: Fri 27 Dec 2024 07:17:14 +0000
ROA not before: Fri 27 Dec 2024 07:17:10 +0000
ROA not after: Fri 12 Dec 2025 07:17:10 +0000
asID: 984
IP address blocks: 154.201.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76241 (0x129d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 07:17:10 2024 GMT
Not After : Dec 12 07:17:10 2025 GMT
Subject: CN=676e547a-7eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:b1:63:69:ba:84:87:83:b0:10:7e:37:1c:
f3:0d:12:94:0f:99:31:70:86:b5:66:95:b3:19:89:
db:54:55:13:5b:fd:d1:fb:57:70:39:17:56:31:28:
63:10:86:8c:20:a6:5d:d4:ec:d3:59:8f:a1:dc:c7:
45:f3:f8:df:70:e2:13:2b:12:d7:cb:6e:63:6e:1a:
3e:53:97:d2:d6:e7:05:79:88:7a:0c:03:89:73:ed:
bd:c0:d2:4e:ab:4f:1f:48:a0:65:d1:02:12:38:c7:
fd:55:89:f9:5f:c5:a1:04:a9:bb:d2:2d:95:6f:78:
d2:e2:76:95:3f:00:8f:d1:c8:80:01:c5:d9:4c:3a:
a0:de:68:ee:ec:95:4d:0d:e9:79:35:3c:2e:34:93:
3c:fd:99:9b:34:69:d6:91:d2:60:28:27:58:34:65:
2a:92:48:ea:ac:f1:75:32:b8:8f:06:33:41:46:21:
8b:14:b5:91:98:e6:76:a7:57:19:ea:27:88:40:e3:
fc:28:c0:eb:ff:9d:b8:74:d1:6d:c4:ae:5f:13:5d:
f4:8e:17:5a:6f:bc:6a:46:50:2b:9f:06:b6:d1:35:
7f:3b:00:18:29:e1:3d:ed:f2:15:ea:8d:3a:31:af:
9e:0d:a2:72:9b:00:84:6c:d4:07:62:a0:68:8e:27:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A2:F3:12:91:E3:8B:D2:B2:BF:87:2C:D5:AC:7E:86:8B:40:77:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98A955A4C42211EF91D1145C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:fb:32:d0:d6:dc:79:1d:0f:86:66:bc:de:84:4a:bd:bf:17:
11:2b:af:55:99:89:bb:2b:f6:11:11:c7:de:e9:0d:19:8c:3f:
66:35:ee:a9:92:e9:91:70:36:db:f0:3c:14:e7:da:1c:0a:09:
5c:1e:ac:09:dc:3b:03:83:9b:83:66:9c:6d:13:16:05:02:f1:
20:b5:12:11:e6:e0:12:3a:de:5a:46:f1:16:80:a8:a4:50:fe:
cd:5e:68:83:4e:0a:c7:ab:63:9b:37:38:21:34:dc:64:36:5b:
59:e3:e0:b7:7e:0a:8e:9a:05:3f:8d:aa:7f:15:a7:9d:00:5e:
e9:f9:ce:d2:f1:1a:dd:ba:85:95:31:dc:54:cd:e5:e4:be:46:
3d:f7:56:64:7a:7a:31:9f:f3:03:f8:cb:48:f5:d4:dc:71:ae:
72:cd:0a:33:ba:cc:7c:b2:61:a7:d0:6b:5e:44:da:95:d7:ed:
9d:ca:53:72:e8:d9:ad:a9:22:4f:7a:65:5d:e6:0e:5b:ad:07:
0d:6d:02:e5:08:0c:e9:68:de:8b:83:c4:d8:9e:71:3d:08:f4:
a0:45:4f:f3:e9:7a:db:85:1f:97:db:35:cf:ba:02:51:88:61:
75:67:cc:5d:02:71:4b:80:de:0d:ed:7f:a7:ee:a9:dd:02:ba:
58:88:f7:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASnRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDcxNzEwWhcNMjUxMjEyMDcxNzEwWjAYMRYw
FAYDVQQDEw02NzZlNTQ3YS03ZWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArlGxY2m6hIeDsBB+NxzzDRKUD5kxcIa1ZpWzGYnbVFUTW/3R+1dwORdW
MShjEIaMIKZd1OzTWY+h3MdF8/jfcOITKxLXy25jbho+U5fS1ucFeYh6DAOJc+29
wNJOq08fSKBl0QISOMf9VYn5X8WhBKm70i2Vb3jS4naVPwCP0ciAAcXZTDqg3mju
7JVNDel5NTwuNJM8/ZmbNGnWkdJgKCdYNGUqkkjqrPF1MriPBjNBRiGLFLWRmOZ2
p1cZ6ieIQOP8KMDr/524dNFtxK5fE130jhdab7xqRlArnwa20TV/OwAYKeE97fIV
6o06Ma+eDaJymwCEbNQHYqBojicjeQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDyi
8xKR44vSsr+HLNWsfoaLQHdFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85OEE5NTVBNEM0MjIxMUVGOTFEMTE0NUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsk/MA0GCSqGSIb3DQEB
CwUAA4IBAQBe+zLQ1tx5HQ+GZrzehEq9vxcRK69VmYm7K/YREcfe6Q0ZjD9mNe6p
kumRcDbb8DwU59ocCglcHqwJ3DsDg5uDZpxtExYFAvEgtRIR5uASOt5aRvEWgKik
UP7NXmiDTgrHq2ObNzghNNxkNltZ4+C3fgqOmgU/jap/FaedAF7p+c7S8RrduoWV
MdxUzeXkvkY991Zkenoxn/MD+MtI9dTcca5yzQozusx8smGn0GteRNqV1+2dylNy
6NmtqSJPemVd5g5brQcNbQLlCAzpaN6Lg8TYnnE9CPSgRU/z6XrbhR+X2zXPugJR
iGF1Z8xdAnFLgN4N7X+n7qndArpYiPef
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:27:26 2025 by rpki-client