Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EE11CC6C61C11EF875AB258762E951A.roa
File: 9EE11CC6C61C11EF875AB258762E951A.roa (raw, json)
Hash identifier: X91rnQU1Uw/taGeWt8+U0yYxL4tiACgaxdNI3yiaBkk=
Subject key identifier: 04:05:2B:E4:71:02:3A:B8:2F:81:71:53:C6:EC:EC:35:48:C4:08:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EE11CC6C61C11EF875AB258762E951A.roa
Signing time: Sun 29 Dec 2024 19:39:30 +0000
ROA not before: Sun 29 Dec 2024 19:39:26 +0000
ROA not after: Sun 12 Dec 2027 19:39:26 +0000
asID: 17561
IP address blocks: 154.217.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77640 (0x12f48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 19:39:26 2024 GMT
Not After : Dec 12 19:39:26 2027 GMT
Subject: CN=6771a572-9c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:7a:38:9f:50:ad:41:ed:5e:82:a6:6b:b2:
9c:c1:1d:f7:42:73:29:f3:0a:81:d3:82:20:8f:9a:
9d:4c:82:e3:62:99:bc:15:f9:e8:42:e5:7d:79:9c:
cb:ff:23:58:43:1a:f6:b6:84:d8:ba:d1:05:f6:93:
51:0b:32:e9:4f:41:30:be:1f:0c:46:17:d6:5c:85:
0f:24:27:6f:4e:72:ca:b2:95:7d:37:f3:1b:86:d8:
91:c8:66:b3:08:fc:65:a3:43:d2:4a:03:48:aa:b6:
43:6a:47:13:01:3c:48:6e:0f:99:87:46:5e:39:ff:
31:bc:1e:1c:86:99:f6:4f:ad:1f:06:7b:86:d3:49:
2c:4e:3b:04:b8:3f:d3:07:8c:3e:e8:11:32:f1:b2:
29:5d:28:dd:0e:ac:71:f2:68:50:8f:e2:e8:99:e7:
4f:ea:95:ec:72:64:76:79:4a:05:80:7b:50:a5:5a:
bd:71:e9:41:84:7e:6f:cb:86:5d:01:b5:4b:c0:11:
5c:b0:e2:6d:28:af:e2:39:09:5a:4e:6c:17:36:e5:
b0:98:3c:19:bb:91:22:1c:d4:bd:ff:40:71:e4:fb:
97:29:01:54:67:fd:85:52:14:4f:64:f5:f6:0f:16:
5e:57:22:32:1d:97:b8:98:5a:91:2d:56:5e:13:3c:
7c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:05:2B:E4:71:02:3A:B8:2F:81:71:53:C6:EC:EC:35:48:C4:08:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EE11CC6C61C11EF875AB258762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.135.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:3c:60:40:f7:7a:aa:48:e1:9a:1f:a1:e6:e1:93:66:83:ab:
2e:f0:60:d0:39:f5:57:63:9d:50:c6:e3:4a:34:62:f3:87:36:
3a:44:00:a3:36:4b:88:d2:79:6b:66:49:76:ea:91:26:52:7f:
2d:09:ad:19:43:04:96:93:0a:69:f7:d1:c1:32:22:f9:1d:9e:
20:c1:dc:82:46:f0:4c:4b:a2:32:d7:8e:ce:08:e7:64:cc:af:
12:50:a3:75:f7:32:41:db:2d:37:2f:52:8c:7d:7e:6b:0b:35:
ee:83:c7:bc:d5:53:7b:07:60:f1:af:60:99:1d:02:47:9c:51:
16:84:ef:31:b2:a1:7e:ba:b7:d2:4b:6f:90:df:87:8a:b8:dd:
ed:d1:26:12:00:0e:93:42:f1:2c:a3:48:0f:a9:20:da:81:63:
dc:33:d7:19:71:23:1d:f8:d4:bb:2a:f9:0c:96:5a:84:69:84:
94:cf:fa:a1:39:6d:05:15:75:b4:8e:86:d5:b3:a0:8c:10:f6:
72:5e:48:66:a4:b1:d3:ce:73:8d:a0:27:bc:0a:17:b7:00:fb:
88:db:1d:1e:bb:56:cd:c5:0b:51:75:c4:ba:d9:28:ea:2c:07:
b9:ff:b7:d5:23:a3:e8:8a:4d:bd:38:70:60:ed:a5:52:6b:bf:
e1:7a:3f:f1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS9IMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTkzOTI2WhcNMjcxMjEyMTkzOTI2WjAYMRYw
FAYDVQQDEw02NzcxYTU3Mi05YzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyJR6OJ9QrUHtXoKma7KcwR33QnMp8wqB04Igj5qdTILjYpm8FfnoQuV9
eZzL/yNYQxr2toTYutEF9pNRCzLpT0Ewvh8MRhfWXIUPJCdvTnLKspV9N/MbhtiR
yGazCPxlo0PSSgNIqrZDakcTATxIbg+Zh0ZeOf8xvB4chpn2T60fBnuG00ksTjsE
uD/TB4w+6BEy8bIpXSjdDqxx8mhQj+LomedP6pXscmR2eUoFgHtQpVq9celBhH5v
y4ZdAbVLwBFcsOJtKK/iOQlaTmwXNuWwmDwZu5EiHNS9/0Bx5PuXKQFUZ/2FUhRP
ZPX2DxZeVyIyHZe4mFqRLVZeEzx8JQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAQF
K+RxAjq4L4FxU8bs7DVIxAhgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RUUxMUNDNkM2MUMxMUVGODc1QUIyNTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtmHMA0GCSqGSIb3DQEB
CwUAA4IBAQDDPGBA93qqSOGaH6Hm4ZNmg6su8GDQOfVXY51QxuNKNGLzhzY6RACj
NkuI0nlrZkl26pEmUn8tCa0ZQwSWkwpp99HBMiL5HZ4gwdyCRvBMS6Iy147OCOdk
zK8SUKN19zJB2y03L1KMfX5rCzXug8e81VN7B2Dxr2CZHQJHnFEWhO8xsqF+urfS
S2+Q34eKuN3t0SYSAA6TQvEso0gPqSDagWPcM9cZcSMd+NS7KvkMllqEaYSUz/qh
OW0FFXW0jobVs6CMEPZyXkhmpLHTznONoCe8Che3APuI2x0eu1bNxQtRdcS62Sjq
LAe5/7fVI6Poik29OHBg7aVSa7/hej/x
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:41 2025 by rpki-client