Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A95C4BAC1B111EFBD498345762E951A.roa
File: 9A95C4BAC1B111EFBD498345762E951A.roa (raw, json)
Hash identifier: uV5h3fh0XerpDfN+JvNpyuoz49QvC7Mz1IqQUbmpu8c=
Subject key identifier: 21:D9:4A:A8:DF:9F:9F:21:3D:FE:7C:37:7F:BC:E0:39:F1:C8:02:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01217B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A95C4BAC1B111EFBD498345762E951A.roa
Signing time: Tue 24 Dec 2024 04:43:22 +0000
ROA not before: Tue 24 Dec 2024 04:43:18 +0000
ROA not after: Wed 10 Dec 2025 04:43:18 +0000
asID: 984
IP address blocks: 154.193.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74107 (0x1217b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:43:18 2024 GMT
Not After : Dec 10 04:43:18 2025 GMT
Subject: CN=676a3bea-2bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:a7:c9:80:31:0f:da:c6:73:1b:74:b0:ce:
08:0a:38:a4:ed:be:a2:d8:11:cd:61:35:75:48:3b:
7c:02:4f:ed:a1:c7:a5:56:47:a4:be:9d:5a:40:29:
2f:7f:28:02:56:87:ae:96:53:7a:df:5a:eb:ef:8d:
88:9a:4c:9a:3b:56:21:52:f3:e5:78:ec:df:c1:c3:
a4:f6:9f:db:3f:64:41:c3:b4:69:06:24:23:bd:cb:
0b:00:fa:74:0e:34:62:4f:84:bf:e5:5b:f8:d8:04:
2e:3a:e3:fc:4a:94:cf:f3:68:b2:f2:02:52:4f:86:
a3:7b:18:60:b9:14:2f:6a:02:95:19:b6:17:9e:f2:
5a:1a:55:be:17:9f:6f:47:b7:ce:1d:7f:5f:df:0f:
6c:d0:75:4b:2f:79:62:07:84:9d:0a:e4:13:57:4c:
7b:bc:55:bb:7c:8d:5d:01:4e:29:84:f1:dc:20:8d:
11:29:a3:f6:24:0f:59:aa:36:4e:40:4e:f3:42:ae:
7b:b9:38:47:10:e8:27:b8:37:ab:73:1c:96:de:71:
0d:fb:2b:17:32:1f:7a:e1:4a:28:d6:c6:97:da:a6:
38:4e:bc:2f:7c:ce:cc:8e:bb:43:12:74:89:23:8b:
56:12:c4:b5:b0:6b:f4:b8:6a:a1:ab:c3:82:66:1c:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D9:4A:A8:DF:9F:9F:21:3D:FE:7C:37:7F:BC:E0:39:F1:C8:02:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A95C4BAC1B111EFBD498345762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.103.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:9e:64:7e:0b:b7:20:c9:a5:74:8e:85:c5:ab:7e:17:e6:59:
0c:fb:c8:29:68:d0:8c:0e:c4:42:d8:1b:2a:39:db:32:5b:1f:
db:74:c0:86:36:b0:34:2e:ec:81:28:51:e0:d9:0d:e8:42:37:
d5:a0:12:53:bf:71:04:c0:fd:a6:73:45:8d:a4:fc:fb:50:2b:
bb:3a:2e:61:60:55:a4:40:a0:13:16:ab:1f:1e:68:5a:9e:b1:
5e:36:89:a3:ab:9a:7b:01:fb:28:4b:ec:ad:2e:61:10:e5:88:
1f:41:ba:fe:24:e1:50:1d:e4:94:24:dc:01:f5:e5:bb:15:41:
94:e5:f0:60:ef:87:92:a3:80:22:41:3f:99:62:1d:b4:f9:2b:
ab:b3:4c:ce:8e:b8:eb:49:5f:7d:fb:c1:c4:15:86:9a:d4:b6:
4f:44:a7:32:d8:9a:93:b5:b7:62:cb:59:f1:fe:cb:a8:b0:8a:
d2:48:f3:fb:4d:9a:04:9a:62:c0:57:17:28:d8:35:4b:c6:31:
45:b7:18:84:35:a6:bd:ec:5e:54:c2:f3:93:59:15:7e:ae:86:
30:8f:7e:92:9f:ac:bf:19:a8:e9:2f:4c:f2:97:1d:da:3f:a7:
d1:89:3b:fc:b6:e9:88:45:88:46:fc:4d:bc:d9:3e:49:ea:4f:
39:2f:78:3a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASF7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDQ0MzE4WhcNMjUxMjEwMDQ0MzE4WjAYMRYw
FAYDVQQDEw02NzZhM2JlYS0yYmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsNGnyYAxD9rGcxt0sM4ICjik7b6i2BHNYTV1SDt8Ak/tocelVkekvp1a
QCkvfygCVoeullN631rr742ImkyaO1YhUvPleOzfwcOk9p/bP2RBw7RpBiQjvcsL
APp0DjRiT4S/5Vv42AQuOuP8SpTP82iy8gJST4ajexhguRQvagKVGbYXnvJaGlW+
F59vR7fOHX9f3w9s0HVLL3liB4SdCuQTV0x7vFW7fI1dAU4phPHcII0RKaP2JA9Z
qjZOQE7zQq57uThHEOgnuDercxyW3nEN+ysXMh964Uoo1saX2qY4TrwvfM7MjrtD
EnSJI4tWEsS1sGv0uGqhq8OCZhxwAwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCHZ
Sqjfn58hPf58N3+84DnxyALuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QTk1QzRCQUMxQjExMUVGQkQ0OTgzNDU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsFnMA0GCSqGSIb3DQEB
CwUAA4IBAQC8nmR+C7cgyaV0joXFq34X5lkM+8gpaNCMDsRC2BsqOdsyWx/bdMCG
NrA0LuyBKFHg2Q3oQjfVoBJTv3EEwP2mc0WNpPz7UCu7Oi5hYFWkQKATFqsfHmha
nrFeNomjq5p7AfsoS+ytLmEQ5YgfQbr+JOFQHeSUJNwB9eW7FUGU5fBg74eSo4Ai
QT+ZYh20+Surs0zOjrjrSV99+8HEFYaa1LZPRKcy2JqTtbdiy1nx/suosIrSSPP7
TZoEmmLAVxco2DVLxjFFtxiENaa97F5UwvOTWRV+roYwj36Sn6y/GajpL0zylx3a
P6fRiTv8tumIRYhG/E282T5J6k85L3g6
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:52:57 2025 by rpki-client