Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BEFA47AC63911EF99664E8D762E951A.roa
File: 9BEFA47AC63911EF99664E8D762E951A.roa (raw, json)
Hash identifier: ItzJ0yC6VVsj6lsR1qyneBv1l4kviIbdNVOxkFHUV5w=
Subject key identifier: 75:37:BE:9D:EE:AF:45:79:3B:37:93:9F:28:51:2F:AD:56:88:42:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013039
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BEFA47AC63911EF99664E8D762E951A.roa
Signing time: Sun 29 Dec 2024 23:07:00 +0000
ROA not before: Sun 29 Dec 2024 23:06:57 +0000
ROA not after: Fri 12 Dec 2025 23:06:57 +0000
asID: 984
IP address blocks: 154.218.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77881 (0x13039)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 23:06:57 2024 GMT
Not After : Dec 12 23:06:57 2025 GMT
Subject: CN=6771d614-d03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4b:fc:01:80:29:e8:4c:06:f3:6f:16:5c:67:
c7:04:e8:a5:e0:d3:dd:28:16:7a:2c:e8:94:b2:9b:
ef:e0:96:be:c4:88:ec:ac:37:e6:df:21:92:4e:57:
0b:f5:ca:2e:b5:b6:21:d6:44:db:ce:14:3d:b4:a8:
93:95:ec:c6:29:b5:63:de:f2:98:1a:7c:38:0e:95:
7e:51:c2:0f:14:fa:cb:94:7e:df:7b:29:36:a2:dc:
64:f5:d8:6e:cc:3f:e5:ed:58:be:48:14:f4:10:7c:
67:9d:73:69:88:12:51:35:f8:90:b6:97:f3:94:92:
4a:e0:3c:2e:54:95:3f:57:bf:fe:bf:9d:ad:6a:96:
cd:93:69:3e:ce:93:90:93:03:38:96:49:0b:3e:d7:
42:28:62:f4:3b:de:b6:eb:90:57:df:15:56:76:a1:
c0:64:94:37:3d:4d:2b:51:fc:76:e4:9c:7d:79:5c:
a7:0f:43:37:30:73:e7:10:0e:72:9c:5a:e8:15:43:
65:53:13:9d:bb:e0:f2:f3:85:c6:f0:1e:0b:e7:14:
c5:00:d4:ec:d0:dc:41:d5:75:b3:74:9f:78:34:50:
70:2c:53:75:91:4c:d3:81:fd:f8:a2:bf:f5:4f:ea:
e7:cb:87:4f:c8:05:ae:8c:67:d3:15:a1:9f:8c:22:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:37:BE:9D:EE:AF:45:79:3B:37:93:9F:28:51:2F:AD:56:88:42:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BEFA47AC63911EF99664E8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.9.0/24
Signature Algorithm: sha256WithRSAEncryption
22:68:7b:23:d8:c7:3f:1c:c1:2e:6c:a0:7b:e0:12:fa:7b:68:
2a:a8:e1:91:0b:b0:2a:85:c7:69:dd:6b:af:23:ee:f8:69:f8:
08:67:80:bd:8d:85:f3:af:62:89:7e:22:d1:b0:77:c2:e2:78:
d3:0b:a9:08:57:6c:d0:ca:76:ba:98:04:bf:76:2f:33:df:34:
4f:a1:37:1f:24:c8:44:f0:99:48:97:e8:d1:9e:a2:33:d8:16:
20:8c:5a:ca:37:ca:7e:d3:65:1e:68:d0:fa:c4:7c:d1:c5:20:
36:65:1d:82:f3:b5:0e:64:cc:22:9a:ba:50:ce:44:90:21:98:
e7:13:21:62:ef:9d:af:35:b6:f4:ba:0a:16:3b:f3:eb:18:67:
17:01:28:4e:4a:fd:8a:74:b8:54:8f:16:6b:f3:d4:86:56:fe:
14:b1:0a:5a:e7:97:20:94:3b:1b:13:6e:07:e9:9c:84:69:b9:
c6:99:37:0f:bf:55:bc:9a:55:75:ed:6c:52:88:ca:65:02:a2:
02:2c:46:08:b7:95:54:b3:56:75:ac:b1:ee:c3:d3:20:f8:6c:
7b:08:ab:8f:18:8e:eb:b8:75:f5:4e:20:0b:f4:5e:15:e3:4a:
a8:4f:c0:ee:7b:42:86:95:ba:3c:79:09:4d:ab:b3:e9:45:4f:
76:41:1e:74
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATA5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MjMwNjU3WhcNMjUxMjEyMjMwNjU3WjAYMRYw
FAYDVQQDEw02NzcxZDYxNC1kMDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnkv8AYAp6EwG828WXGfHBOil4NPdKBZ6LOiUspvv4Ja+xIjsrDfm3yGS
TlcL9coutbYh1kTbzhQ9tKiTlezGKbVj3vKYGnw4DpV+UcIPFPrLlH7feyk2otxk
9dhuzD/l7Vi+SBT0EHxnnXNpiBJRNfiQtpfzlJJK4DwuVJU/V7/+v52tapbNk2k+
zpOQkwM4lkkLPtdCKGL0O96265BX3xVWdqHAZJQ3PU0rUfx25Jx9eVynD0M3MHPn
EA5ynFroFUNlUxOdu+Dy84XG8B4L5xTFANTs0NxB1XWzdJ94NFBwLFN1kUzTgf34
or/1T+rny4dPyAWujGfTFaGfjCKPFwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHU3
vp3ur0V5OzeTnyhRL61WiEJ+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QkVGQTQ3QUM2MzkxMUVGOTk2NjRFOEQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtoJMA0GCSqGSIb3DQEB
CwUAA4IBAQAiaHsj2Mc/HMEubKB74BL6e2gqqOGRC7Aqhcdp3WuvI+74afgIZ4C9
jYXzr2KJfiLRsHfC4njTC6kIV2zQyna6mAS/di8z3zRPoTcfJMhE8JlIl+jRnqIz
2BYgjFrKN8p+02UeaND6xHzRxSA2ZR2C87UOZMwimrpQzkSQIZjnEyFi752vNbb0
ugoWO/PrGGcXAShOSv2KdLhUjxZr89SGVv4UsQpa55cglDsbE24H6ZyEabnGmTcP
v1W8mlV17WxSiMplAqICLEYIt5VUs1Z1rLHuw9Mg+Gx7CKuPGI7ruHX1TiAL9F4V
40qoT8Due0KGlbo8eQlNq7PpRU92QR50
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:09 2025 by rpki-client