Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0717F04C1CB11EF84C0D166762E951A.roa
File: A0717F04C1CB11EF84C0D166762E951A.roa (raw, json)
Hash identifier: lB2y2xvqtXXp+EATpbXYoqnMA6nxq9FZ3mdv1TTxB/U=
Subject key identifier: 05:C2:3A:19:4A:46:DE:9B:A9:66:6D:E6:DC:2D:49:28:25:83:5B:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012263
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0717F04C1CB11EF84C0D166762E951A.roa
Signing time: Tue 24 Dec 2024 07:49:39 +0000
ROA not before: Tue 24 Dec 2024 07:49:35 +0000
ROA not after: Wed 10 Dec 2025 07:49:35 +0000
asID: 984
IP address blocks: 154.193.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74339 (0x12263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 07:49:35 2024 GMT
Not After : Dec 10 07:49:35 2025 GMT
Subject: CN=676a6792-aa0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:b1:7d:00:72:62:8a:eb:18:d9:48:89:38:
80:5b:8c:8d:44:43:ea:a1:53:9a:2e:80:0b:bd:50:
64:f4:ab:c7:e7:20:59:82:9a:44:40:5e:44:63:11:
36:0b:ae:0f:62:dd:de:d8:a8:8a:2b:5f:7d:2a:17:
08:5e:9b:9c:a4:ad:fc:b2:5f:48:1b:37:43:37:33:
ca:2f:a9:0c:9b:a3:78:5f:dc:5d:05:65:92:c2:c9:
89:88:ab:04:4d:e1:b9:8a:a8:46:8b:42:ca:aa:d3:
01:c8:f0:b3:21:8e:36:51:57:76:af:1e:ac:c0:cf:
ec:0b:7f:6d:af:f2:ed:66:b5:9b:e1:b4:6f:98:b4:
ee:8e:60:6d:70:13:ac:9f:4f:04:fd:0c:e4:06:6b:
e8:1f:4c:1e:10:16:fb:ae:2c:10:a9:db:5e:f3:f5:
f6:3c:e3:ed:89:8a:5c:dc:24:f1:7f:2b:45:54:94:
b5:08:13:41:98:92:58:4d:70:85:5f:a2:f6:11:bf:
5c:1a:0f:5c:ee:1b:d0:dc:32:ad:64:14:c6:4f:34:
cd:ad:f3:07:f0:d9:3b:82:a7:48:19:e8:03:f9:4e:
37:1e:49:2e:f8:9e:19:23:d0:85:cd:81:66:2c:dc:
cf:c7:31:72:c2:11:f3:d9:3c:51:42:d4:48:bd:61:
b9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C2:3A:19:4A:46:DE:9B:A9:66:6D:E6:DC:2D:49:28:25:83:5B:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0717F04C1CB11EF84C0D166762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.209.0/24
Signature Algorithm: sha256WithRSAEncryption
90:7b:75:6d:8e:b0:76:26:3c:62:e0:f8:c5:37:84:ce:41:49:
b6:20:77:75:88:9d:4a:ea:1e:d2:26:ae:c9:ac:8b:97:d5:99:
7d:55:1c:cc:2a:06:8e:1a:dd:bf:e2:9c:dd:d9:70:95:c6:fa:
fa:44:21:47:86:8d:a8:83:b0:61:c7:57:f1:c4:35:e4:2b:19:
6b:63:f6:96:07:6d:e9:22:12:8a:3d:52:e6:f9:14:bc:d7:53:
08:39:89:bc:7d:91:46:2b:35:47:62:dc:7d:fb:3c:d2:4d:04:
db:c2:aa:bb:93:fc:2f:60:8e:8d:fb:e5:dc:e5:5b:18:1e:be:
11:be:32:b6:47:5a:40:98:f1:c3:57:74:2e:c1:39:22:0f:40:
9a:e2:3f:8c:bc:38:75:85:fc:0b:7c:70:06:21:03:20:25:d0:
d4:de:fd:1a:56:5b:88:46:f6:09:20:1d:3c:50:c0:59:55:b6:
9d:35:97:d3:fe:fa:31:cf:4f:e4:57:a7:15:68:93:1b:12:a9:
10:48:a0:dc:fd:cf:12:42:eb:ea:01:75:e2:15:8a:17:ce:40:
fa:4a:35:0e:d7:fc:ae:77:82:39:05:09:4c:09:50:e5:84:fe:
98:bf:11:ed:18:79:76:77:68:8c:a9:c2:c3:e0:b6:3e:54:cd:
b3:a5:30:45
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASJjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDc0OTM1WhcNMjUxMjEwMDc0OTM1WjAYMRYw
FAYDVQQDEw02NzZhNjc5Mi1hYTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx3yxfQByYorrGNlIiTiAW4yNREPqoVOaLoALvVBk9KvH5yBZgppEQF5E
YxE2C64PYt3e2KiKK199KhcIXpucpK38sl9IGzdDNzPKL6kMm6N4X9xdBWWSwsmJ
iKsETeG5iqhGi0LKqtMByPCzIY42UVd2rx6swM/sC39tr/LtZrWb4bRvmLTujmBt
cBOsn08E/QzkBmvoH0weEBb7riwQqdte8/X2POPtiYpc3CTxfytFVJS1CBNBmJJY
TXCFX6L2Eb9cGg9c7hvQ3DKtZBTGTzTNrfMH8Nk7gqdIGegD+U43Hkku+J4ZI9CF
zYFmLNzPxzFywhHz2TxRQtRIvWG5DwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAXC
OhlKRt6bqWZt5twtSSglg1sfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMDcxN0YwNEMxQ0IxMUVGODRDMEQxNjY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsHRMA0GCSqGSIb3DQEB
CwUAA4IBAQCQe3VtjrB2Jjxi4PjFN4TOQUm2IHd1iJ1K6h7SJq7JrIuX1Zl9VRzM
KgaOGt2/4pzd2XCVxvr6RCFHho2og7Bhx1fxxDXkKxlrY/aWB23pIhKKPVLm+RS8
11MIOYm8fZFGKzVHYtx9+zzSTQTbwqq7k/wvYI6N++Xc5VsYHr4RvjK2R1pAmPHD
V3QuwTkiD0Ca4j+MvDh1hfwLfHAGIQMgJdDU3v0aVluIRvYJIB08UMBZVbadNZfT
/voxz0/kV6cVaJMbEqkQSKDc/c8SQuvqAXXiFYoXzkD6SjUO1/yud4I5BQlMCVDl
hP6YvxHtGHl2d2iMqcLD4LY+VM2zpTBF
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:45:18 2025 by rpki-client