Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C727B24C25C11EF9395F67F762E951A.roa
File: 9C727B24C25C11EF9395F67F762E951A.roa (raw, json)
Hash identifier: IPvuPqpT2UhtwWwC5PmrWK/4w1pfjlQRza07+ISiswo=
Subject key identifier: 3F:98:B0:D4:86:BA:D4:77:97:DA:E2:7C:90:95:AD:B8:36:F2:04:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01237E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C727B24C25C11EF9395F67F762E951A.roa
Signing time: Wed 25 Dec 2024 01:07:29 +0000
ROA not before: Wed 25 Dec 2024 01:07:25 +0000
ROA not after: Wed 10 Dec 2025 01:07:25 +0000
asID: 984
IP address blocks: 154.199.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74622 (0x1237e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 01:07:25 2024 GMT
Not After : Dec 10 01:07:25 2025 GMT
Subject: CN=676b5ad1-3e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ea:68:fb:f1:49:83:c2:c6:74:9b:47:11:9e:
bc:7f:e7:97:71:c9:63:92:84:07:cd:2e:6a:3c:d4:
ab:31:3d:a3:da:5f:db:36:f9:e3:e9:0b:59:58:57:
75:bf:da:ce:04:45:af:27:6a:1d:9a:98:ad:32:bd:
35:41:6b:95:54:25:1c:e8:02:14:05:90:6f:15:53:
29:9a:f0:af:fa:30:3b:cd:42:83:ff:f3:3f:1c:0f:
c2:43:8e:78:20:87:81:1f:1f:2a:f3:67:43:d6:bd:
36:7a:b9:1b:54:0f:a0:ec:32:31:81:e1:23:1a:23:
71:53:62:10:cc:c5:70:0c:1b:f8:1f:09:d9:02:c6:
99:2b:a5:92:b6:04:39:ce:b1:43:f8:f2:d7:9a:3b:
10:e7:09:8b:dc:de:7f:b8:f5:b2:c1:6b:99:ba:ca:
94:d0:90:d7:f6:05:b4:20:d7:f6:be:27:16:ba:7e:
49:8d:cb:33:9a:7c:fb:33:de:e6:48:dd:f0:91:5c:
74:3c:51:76:0f:37:b9:af:9b:bc:3c:02:32:ef:d5:
2e:38:6c:b2:89:c2:53:d6:6e:f0:e6:58:94:6d:92:
9d:80:4c:2c:c9:08:4d:9d:23:ba:3c:27:ed:e9:6e:
60:90:71:f4:2d:ab:ff:e7:af:4f:a8:aa:b0:c9:cc:
fa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:98:B0:D4:86:BA:D4:77:97:DA:E2:7C:90:95:AD:B8:36:F2:04:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C727B24C25C11EF9395F67F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.76.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f9:e9:09:12:c1:9e:61:5d:69:07:77:84:ad:52:cd:dd:36:
6a:55:46:e6:aa:18:43:3e:4a:94:08:b2:79:e9:19:1a:e0:4d:
99:34:76:16:f0:fc:1f:c0:9d:95:dc:4a:0b:74:bd:dd:96:f1:
55:11:82:41:6e:80:7a:c1:83:40:df:18:c9:20:49:1a:55:d2:
c8:0d:49:bf:6a:ac:3c:34:4e:1d:70:60:cb:56:27:5d:32:f4:
3c:e2:4a:46:b9:25:67:63:cc:98:9c:3b:f4:d3:80:df:46:6d:
3a:54:14:0e:6b:5e:d3:a8:b3:bf:ea:30:5b:0a:26:ed:e9:75:
20:b7:35:a3:6d:72:ac:bf:f1:99:ab:7d:0f:ad:66:61:4c:e4:
6a:75:51:72:99:4a:4e:40:97:49:79:06:60:5e:70:05:f7:6b:
f3:ef:e8:3e:ec:22:c9:c6:39:a7:78:c1:98:04:38:2b:a5:f9:
23:1d:37:42:a7:a9:e6:b5:7d:ba:ec:c0:26:21:2a:83:1e:6a:
fd:a6:2d:b7:26:aa:49:3f:6b:3d:ad:76:3e:e2:7b:e4:4a:f0:
7e:0a:c3:cb:0c:bf:86:be:58:dc:d6:58:85:30:ce:c4:4e:c3:
15:87:94:60:16:e5:3b:7a:c1:f5:4d:71:ce:e6:cb:12:84:b2:
bb:28:9b:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASN+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDEwNzI1WhcNMjUxMjEwMDEwNzI1WjAYMRYw
FAYDVQQDEw02NzZiNWFkMS0zZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0Opo+/FJg8LGdJtHEZ68f+eXccljkoQHzS5qPNSrMT2j2l/bNvnj6QtZ
WFd1v9rOBEWvJ2odmpitMr01QWuVVCUc6AIUBZBvFVMpmvCv+jA7zUKD//M/HA/C
Q454IIeBHx8q82dD1r02erkbVA+g7DIxgeEjGiNxU2IQzMVwDBv4HwnZAsaZK6WS
tgQ5zrFD+PLXmjsQ5wmL3N5/uPWywWuZusqU0JDX9gW0INf2vicWun5Jjcszmnz7
M97mSN3wkVx0PFF2Dze5r5u8PAIy79UuOGyyicJT1m7w5liUbZKdgEwsyQhNnSO6
PCft6W5gkHH0Lav/569PqKqwycz6LQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFD+Y
sNSGutR3l9rifJCVrbg28gTmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QzcyN0IyNEMyNUMxMUVGOTM5NUY2N0Y3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsdMMA0GCSqGSIb3DQEB
CwUAA4IBAQCJ+ekJEsGeYV1pB3eErVLN3TZqVUbmqhhDPkqUCLJ56Rka4E2ZNHYW
8PwfwJ2V3EoLdL3dlvFVEYJBboB6wYNA3xjJIEkaVdLIDUm/aqw8NE4dcGDLVidd
MvQ84kpGuSVnY8yYnDv004DfRm06VBQOa17TqLO/6jBbCibt6XUgtzWjbXKsv/GZ
q30PrWZhTORqdVFymUpOQJdJeQZgXnAF92vz7+g+7CLJxjmneMGYBDgrpfkjHTdC
p6nmtX267MAmISqDHmr9pi23JqpJP2s9rXY+4nvkSvB+CsPLDL+Gvljc1liFMM7E
TsMVh5RgFuU7esH1TXHO5ssShLK7KJuM
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:03 2025 by rpki-client