Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E3AB50AC53811EF86EBF4B4762E951A.roa
File: 9E3AB50AC53811EF86EBF4B4762E951A.roa (raw, json)
Hash identifier: MvRs/YYJyiE0pow5AgsmAO8fEmg9JH5WGEjC334+0+I=
Subject key identifier: 41:FE:EE:EC:66:A3:4E:95:B0:AD:9E:FC:AA:63:E0:4A:C0:60:7C:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C2F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E3AB50AC53811EF86EBF4B4762E951A.roa
Signing time: Sat 28 Dec 2024 16:27:24 +0000
ROA not before: Sat 28 Dec 2024 16:27:20 +0000
ROA not after: Sun 12 Dec 2027 16:27:20 +0000
asID: 17561
IP address blocks: 154.205.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76847 (0x12c2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 16:27:20 2024 GMT
Not After : Dec 12 16:27:20 2027 GMT
Subject: CN=677026eb-6f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:81:eb:0f:fa:7a:e1:61:42:65:16:56:39:
0c:74:4d:44:61:46:00:3b:71:50:e2:60:28:fa:42:
ea:f8:b8:d3:62:f0:b8:25:e6:c4:67:e6:11:b8:17:
60:6b:79:a9:41:21:ca:1f:32:3e:29:53:59:b4:a3:
33:5a:05:18:71:6e:14:49:db:98:77:48:2e:09:a1:
18:0f:38:b0:49:3c:a5:68:06:bb:f0:31:e1:70:e2:
b5:32:14:64:22:17:68:f3:51:f9:3a:29:1b:8a:d8:
e9:93:63:13:99:a5:c5:73:1b:d7:0f:62:77:29:6c:
fc:35:f8:f9:6d:06:73:fa:27:cf:ed:db:de:05:7e:
73:c9:87:e8:52:fb:05:2c:31:7a:99:24:4b:54:96:
67:da:e3:72:71:27:9c:9c:43:87:32:5e:f3:bb:3e:
f4:18:bc:6b:8c:8f:7f:f7:b7:a6:2a:37:4b:9e:72:
06:81:e9:86:5a:c9:92:29:d1:a2:e9:44:dc:ab:81:
82:3c:11:4d:f4:ed:d5:ca:0e:e0:aa:6a:d1:90:78:
7d:60:30:f2:ba:a6:26:63:13:33:4c:ff:0b:f4:be:
38:02:28:9e:56:2b:f4:56:83:ae:5a:d0:94:e1:3a:
1d:79:bd:4b:40:72:72:e3:74:4c:c8:bc:22:d5:b2:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FE:EE:EC:66:A3:4E:95:B0:AD:9E:FC:AA:63:E0:4A:C0:60:7C:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E3AB50AC53811EF86EBF4B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.32.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c1:ed:20:2e:f7:04:4f:99:6e:20:55:59:6a:a5:24:7e:a4:
16:ee:20:42:d0:f5:57:1b:2f:d3:5c:65:c8:20:73:50:67:23:
bb:84:8b:ec:49:88:a9:6c:a4:cd:99:3b:fb:2a:f7:6d:bc:53:
b1:96:8a:9a:90:09:a8:60:c0:bb:ea:c6:6b:67:b1:28:e6:e1:
1f:4e:c3:99:fe:3e:25:fe:1b:86:9e:e8:af:32:26:32:07:9a:
7a:cd:0e:62:02:31:9a:8d:86:23:08:11:bb:39:04:63:ce:0e:
99:4a:70:c7:a0:1c:ae:2a:02:af:0d:48:75:e4:b8:5c:c2:48:
9b:3d:92:09:4b:49:d3:26:f3:c9:21:75:fe:2f:05:50:74:bd:
7f:7d:97:8f:6a:54:3a:30:c9:f0:5c:c5:69:08:09:32:68:8d:
3e:a7:15:34:1f:ef:82:c0:03:07:65:5c:eb:73:2a:bc:8b:c8:
9c:3f:0b:b9:60:67:9a:e1:58:5c:54:d1:aa:bc:16:8a:c5:ef:
7f:36:97:d2:60:56:20:16:22:c6:6b:f1:41:44:7e:53:c4:e8:
e4:f2:a9:a9:13:3c:ca:bb:84:12:03:d7:6b:92:f6:fc:c9:c1:
6c:60:7c:54:82:52:60:b7:45:67:71:b7:4c:87:f0:b9:c6:91:
4f:a0:db:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASwvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTYyNzIwWhcNMjcxMjEyMTYyNzIwWjAYMRYw
FAYDVQQDEw02NzcwMjZlYi02ZjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArYmB6w/6euFhQmUWVjkMdE1EYUYAO3FQ4mAo+kLq+LjTYvC4JebEZ+YR
uBdga3mpQSHKHzI+KVNZtKMzWgUYcW4USduYd0guCaEYDziwSTylaAa78DHhcOK1
MhRkIhdo81H5Oikbitjpk2MTmaXFcxvXD2J3KWz8Nfj5bQZz+ifP7dveBX5zyYfo
UvsFLDF6mSRLVJZn2uNycSecnEOHMl7zuz70GLxrjI9/97emKjdLnnIGgemGWsmS
KdGi6UTcq4GCPBFN9O3Vyg7gqmrRkHh9YDDyuqYmYxMzTP8L9L44AiieViv0VoOu
WtCU4Todeb1LQHJy43RMyLwi1bIDdwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEH+
7uxmo06VsK2e/Kpj4ErAYHwPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RTNBQjUwQUM1MzgxMUVGODZFQkY0QjQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms0gMA0GCSqGSIb3DQEB
CwUAA4IBAQBYwe0gLvcET5luIFVZaqUkfqQW7iBC0PVXGy/TXGXIIHNQZyO7hIvs
SYipbKTNmTv7KvdtvFOxloqakAmoYMC76sZrZ7Eo5uEfTsOZ/j4l/huGnuivMiYy
B5p6zQ5iAjGajYYjCBG7OQRjzg6ZSnDHoByuKgKvDUh15LhcwkibPZIJS0nTJvPJ
IXX+LwVQdL1/fZePalQ6MMnwXMVpCAkyaI0+pxU0H++CwAMHZVzrcyq8i8icPwu5
YGea4VhcVNGqvBaKxe9/NpfSYFYgFiLGa/FBRH5TxOjk8qmpEzzKu4QSA9drkvb8
ycFsYHxUglJgt0VncbdMh/C5xpFPoNtl
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:57 2025 by rpki-client