Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A339524C1CA11EFB415A560762E951A.roa
File: 9A339524C1CA11EFB415A560762E951A.roa (raw, json)
Hash identifier: bHa3XIpfO5P9oE9nRUtZIVdx1q4r34dNuYM6Uq4m3I8=
Subject key identifier: 5C:96:A9:61:D1:AD:4F:8E:98:70:70:D8:38:9C:49:A7:9B:9C:DC:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012257
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A339524C1CA11EFB415A560762E951A.roa
Signing time: Tue 24 Dec 2024 07:42:19 +0000
ROA not before: Tue 24 Dec 2024 07:42:15 +0000
ROA not after: Wed 10 Dec 2025 07:42:15 +0000
asID: 984
IP address blocks: 154.193.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74327 (0x12257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 07:42:15 2024 GMT
Not After : Dec 10 07:42:15 2025 GMT
Subject: CN=676a65db-fce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:21:e4:b8:79:56:bc:11:09:1f:91:26:d1:
95:4b:d2:b9:da:78:d2:53:c0:b7:cf:d1:8c:45:de:
8c:a7:8b:27:c6:23:8f:cb:5c:32:fb:24:8b:38:3c:
6d:4b:72:e7:57:eb:d9:ab:59:69:29:58:ac:01:a9:
9d:e4:e5:67:a7:8c:59:e6:04:43:40:cc:76:07:9e:
d0:e8:ad:6b:21:67:58:64:22:a1:cb:75:28:51:16:
38:dd:2d:b8:04:8e:9c:fe:49:5e:53:81:5b:cb:59:
20:f1:d2:5b:94:b3:42:e8:68:be:75:e2:aa:3f:f2:
a7:08:6b:5a:cb:d6:c2:ac:dd:56:9b:71:02:1f:7f:
87:6c:c3:54:5b:a1:31:7e:fa:d8:30:34:e8:33:5e:
a2:9a:dc:b1:80:f5:73:8c:6e:2e:de:4d:56:3d:73:
55:0a:ba:dd:42:62:84:3d:93:0f:0f:1f:1f:91:78:
40:e3:8b:73:4e:1a:d4:0d:ea:88:7c:75:01:69:ac:
f0:5c:46:fb:17:e3:38:ab:80:b7:50:c1:0f:bc:50:
d7:6b:71:50:f0:1a:df:a9:2f:59:56:a9:2d:ad:96:
00:95:0b:1e:82:80:49:51:8c:59:38:55:a0:81:4b:
ee:d3:17:4e:fb:9b:0f:cb:34:65:77:3d:09:70:25:
d3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:96:A9:61:D1:AD:4F:8E:98:70:70:D8:38:9C:49:A7:9B:9C:DC:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A339524C1CA11EFB415A560762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.203.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:68:52:5e:2c:1f:b6:4c:1a:a7:b2:db:bd:12:61:f6:e0:f2:
20:27:4c:64:35:0c:f9:86:00:25:3a:ec:3d:83:ab:3a:3f:39:
54:5e:84:c2:fa:45:00:d7:03:20:b4:fa:91:67:11:69:6e:9f:
47:57:05:c8:bf:5d:c6:c9:85:94:0d:37:3f:85:07:ec:09:3a:
cf:70:ef:0d:51:ff:42:19:22:75:f5:60:c5:46:4a:8d:0e:fc:
74:88:2c:cc:ed:0f:89:b6:80:22:d4:bf:4b:6f:89:96:27:42:
f1:65:cd:64:5f:a2:dd:7f:0a:de:05:ee:49:50:e0:17:7b:dd:
c3:9e:90:2f:55:05:a8:5d:ba:2b:3c:dd:41:61:fb:09:81:dd:
70:ba:62:2b:e7:85:f3:ad:a6:cb:c0:a1:d2:76:de:dd:f4:6a:
53:2e:40:09:e6:ec:b3:99:eb:20:d7:eb:c9:72:59:37:a8:24:
b2:62:0b:6b:67:f1:33:02:66:b6:4b:d3:46:fb:0e:6d:26:46:
b3:d1:5a:e7:6a:39:24:f5:c1:b4:ae:8e:61:72:97:a3:d5:b8:
39:72:70:2a:6f:1f:2b:b9:6c:78:78:be:5d:21:8c:4e:05:b0:
bd:d4:10:7f:8a:77:19:e7:e3:4a:49:d7:1b:5c:56:3c:93:65:
1f:bb:de:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASJXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDc0MjE1WhcNMjUxMjEwMDc0MjE1WjAYMRYw
FAYDVQQDEw02NzZhNjVkYi1mY2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoiYh5Lh5VrwRCR+RJtGVS9K52njSU8C3z9GMRd6Mp4snxiOPy1wy+ySL
ODxtS3LnV+vZq1lpKVisAamd5OVnp4xZ5gRDQMx2B57Q6K1rIWdYZCKhy3UoURY4
3S24BI6c/kleU4Fby1kg8dJblLNC6Gi+deKqP/KnCGtay9bCrN1Wm3ECH3+HbMNU
W6ExfvrYMDToM16imtyxgPVzjG4u3k1WPXNVCrrdQmKEPZMPDx8fkXhA44tzThrU
DeqIfHUBaazwXEb7F+M4q4C3UMEPvFDXa3FQ8BrfqS9ZVqktrZYAlQsegoBJUYxZ
OFWggUvu0xdO+5sPyzRldz0JcCXTpQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFyW
qWHRrU+OmHBw2DicSaebnNynMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QTMzOTUyNEMxQ0ExMUVGQjQxNUE1NjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsHLMA0GCSqGSIb3DQEB
CwUAA4IBAQDSaFJeLB+2TBqnstu9EmH24PIgJ0xkNQz5hgAlOuw9g6s6PzlUXoTC
+kUA1wMgtPqRZxFpbp9HVwXIv13GyYWUDTc/hQfsCTrPcO8NUf9CGSJ19WDFRkqN
Dvx0iCzM7Q+JtoAi1L9Lb4mWJ0LxZc1kX6LdfwreBe5JUOAXe93DnpAvVQWoXbor
PN1BYfsJgd1wumIr54XzrabLwKHSdt7d9GpTLkAJ5uyzmesg1+vJclk3qCSyYgtr
Z/EzAma2S9NG+w5tJkaz0Vrnajkk9cG0ro5hcpej1bg5cnAqbx8ruWx4eL5dIYxO
BbC91BB/incZ5+NKSdcbXFY8k2Ufu977
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:43 2025 by rpki-client