Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FF4830AC54011EFB446F867762E951A.roa
File: 9FF4830AC54011EFB446F867762E951A.roa (raw, json)
Hash identifier: T8M8CXKcy5uUIPbMpP1qQ7psosongvnwTad43GLLvwc=
Subject key identifier: 26:9B:9B:29:98:96:BF:6B:2A:04:7F:9C:50:27:B3:60:90:02:6D:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C79
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FF4830AC54011EFB446F867762E951A.roa
Signing time: Sat 28 Dec 2024 17:24:42 +0000
ROA not before: Sat 28 Dec 2024 17:24:39 +0000
ROA not after: Sun 12 Dec 2027 17:24:39 +0000
asID: 17561
IP address blocks: 154.206.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76921 (0x12c79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:24:39 2024 GMT
Not After : Dec 12 17:24:39 2027 GMT
Subject: CN=6770345a-a99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f7:6f:38:1f:f7:3a:b2:7b:79:bd:3c:26:2c:
9b:52:87:db:48:4e:02:37:24:df:d3:39:f6:bd:28:
f2:8d:8f:3f:f1:4b:b0:c6:4d:62:c1:db:dd:10:b3:
0a:ed:95:a0:51:c5:08:cb:e4:9f:2b:e0:dd:6d:f7:
e3:6f:5f:8d:e9:ef:f8:44:1d:d8:00:4c:91:2f:bd:
38:53:16:42:da:3a:b4:dd:68:f3:02:97:ff:b0:f2:
b3:79:31:85:38:fb:dd:bc:bd:88:9c:10:4a:b9:39:
34:55:48:83:29:71:e0:86:60:a5:55:74:87:9a:6d:
27:af:b0:c2:02:b8:be:85:d9:fb:a8:e9:28:11:66:
26:d0:0f:ee:ae:c4:3e:b5:9b:ea:f9:9e:57:60:6e:
8d:74:34:3c:a0:2a:59:d6:97:3a:f0:07:8e:ae:7f:
92:0d:3e:65:5f:61:24:dc:e3:40:6d:a9:cb:1c:94:
f9:a2:a2:2e:fc:79:90:76:e7:5a:4b:fd:ae:eb:7e:
5b:39:41:d9:a0:2d:42:a0:70:ec:0b:3a:d2:f6:d8:
72:f5:e4:96:40:c2:be:73:f8:9a:cf:ff:28:01:ae:
7b:66:e1:42:bf:17:c2:de:be:34:8d:72:6b:07:2c:
f4:79:1d:2a:e8:b1:e4:18:98:3d:94:8e:f9:99:bc:
d3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9B:9B:29:98:96:BF:6B:2A:04:7F:9C:50:27:B3:60:90:02:6D:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FF4830AC54011EFB446F867762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.244.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:8b:6d:99:76:85:23:c9:be:4d:ad:aa:48:b5:5b:79:33:af:
95:2e:61:2e:83:d2:77:f1:54:3d:ca:af:f4:86:ee:1e:42:c0:
43:e9:90:9d:d8:d9:23:c6:f5:91:bd:13:d6:71:30:6d:ae:8f:
c6:34:9d:91:fd:95:71:d4:29:ef:4f:c3:97:e8:ab:f6:9e:10:
23:8c:4b:d0:98:f2:1e:59:e8:74:4f:47:44:f2:73:ed:4e:a4:
2f:b5:d9:77:08:fb:77:b3:2f:11:5b:29:dd:fe:b2:b9:50:cd:
b1:e2:82:d9:9a:da:2c:8e:5f:52:93:02:7c:94:8f:6f:6c:9f:
b1:29:64:43:30:e2:3d:ff:5d:04:0f:4c:16:ac:aa:9e:2e:4c:
c7:13:35:0d:e0:ee:13:c7:a6:f6:ee:f6:1a:fb:65:ad:2a:60:
48:b0:27:f5:9d:9b:d9:2d:c2:bf:fa:92:3c:13:62:6c:71:84:
c8:65:85:a7:b1:41:c3:9e:38:78:ca:91:96:96:3e:cf:17:39:
c8:26:ca:3c:d7:bc:f1:e5:cd:b9:62:2d:a0:4d:06:29:da:be:
d8:21:b2:72:51:3b:cb:58:bd:fd:36:7a:54:26:66:50:e8:4c:
d2:ab:4c:9b:19:22:60:44:86:6e:e2:d6:de:bf:67:5a:db:2f:
7d:90:0f:1a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASx5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTcyNDM5WhcNMjcxMjEyMTcyNDM5WjAYMRYw
FAYDVQQDEw02NzcwMzQ1YS1hOTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7fdvOB/3OrJ7eb08JiybUofbSE4CNyTf0zn2vSjyjY8/8Uuwxk1iwdvd
ELMK7ZWgUcUIy+SfK+Ddbffjb1+N6e/4RB3YAEyRL704UxZC2jq03WjzApf/sPKz
eTGFOPvdvL2InBBKuTk0VUiDKXHghmClVXSHmm0nr7DCAri+hdn7qOkoEWYm0A/u
rsQ+tZvq+Z5XYG6NdDQ8oCpZ1pc68AeOrn+SDT5lX2Ek3ONAbanLHJT5oqIu/HmQ
dudaS/2u635bOUHZoC1CoHDsCzrS9thy9eSWQMK+c/iaz/8oAa57ZuFCvxfC3r40
jXJrByz0eR0q6LHkGJg9lI75mbzTXQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCab
mymYlr9rKgR/nFAns2CQAm2pMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RkY0ODMwQUM1NDAxMUVGQjQ0NkY4Njc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms70MA0GCSqGSIb3DQEB
CwUAA4IBAQDUi22ZdoUjyb5NrapItVt5M6+VLmEug9J38VQ9yq/0hu4eQsBD6ZCd
2NkjxvWRvRPWcTBtro/GNJ2R/ZVx1CnvT8OX6Kv2nhAjjEvQmPIeWeh0T0dE8nPt
TqQvtdl3CPt3sy8RWynd/rK5UM2x4oLZmtosjl9SkwJ8lI9vbJ+xKWRDMOI9/10E
D0wWrKqeLkzHEzUN4O4Tx6b27vYa+2WtKmBIsCf1nZvZLcK/+pI8E2JscYTIZYWn
sUHDnjh4ypGWlj7PFznIJso817zx5c25Yi2gTQYp2r7YIbJyUTvLWL39NnpUJmZQ
6EzSq0ybGSJgRIZu4tbev2da2y99kA8a
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:25 2025 by rpki-client