Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1161042C3D211EFAE2BA850762E951A.roa
File: A1161042C3D211EFAE2BA850762E951A.roa (raw, json)
Hash identifier: 5GiiHkzncBoM5VnkbKxsc0MpOAY20pxYxmvHdbqvhRw=
Subject key identifier: B5:CF:1E:4F:3A:6E:44:2A:A1:1A:15:BB:4B:F4:BB:44:65:79:AB:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012850
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1161042C3D211EFAE2BA850762E951A.roa
Signing time: Thu 26 Dec 2024 21:44:49 +0000
ROA not before: Thu 26 Dec 2024 21:44:45 +0000
ROA not after: Sun 12 Dec 2027 21:44:45 +0000
asID: 17561
IP address blocks: 154.83.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75856 (0x12850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:44:45 2024 GMT
Not After : Dec 12 21:44:45 2027 GMT
Subject: CN=676dce50-e99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:c5:6f:b2:82:87:bf:5b:6c:64:60:38:e8:
9a:2b:bc:9c:95:29:10:0e:43:8f:b9:12:9b:21:bd:
46:e6:55:ec:61:c2:27:d8:d2:dc:79:f4:af:13:c9:
c8:18:8e:f9:2f:bd:19:0f:2f:95:ac:4a:e4:23:8a:
fd:fc:da:11:33:05:13:60:eb:6d:d0:df:3b:19:af:
ab:fd:0a:9f:ab:86:89:bf:50:7d:47:00:cf:da:ba:
a4:1d:88:85:9c:d3:1c:2b:5d:b0:e1:82:d7:b8:c7:
16:8b:a1:47:b0:df:5e:79:60:07:ac:7c:bc:cb:be:
08:6e:5e:94:7e:49:b8:1a:57:51:03:14:21:c7:84:
f8:3d:25:bf:a9:4b:34:3d:a4:53:03:bd:4c:88:72:
56:60:65:4c:09:d7:3d:99:2e:86:ab:06:b5:8f:f6:
6b:29:ad:a0:b6:73:0d:13:2b:23:d1:09:71:17:9a:
1d:31:c6:2b:97:08:15:a2:d3:b8:7b:45:63:70:21:
2a:11:bb:f4:4d:d7:f7:72:41:ef:f5:fc:1d:37:2f:
7b:98:01:35:89:c3:db:36:e8:91:fd:28:8e:01:16:
9f:8d:13:12:06:da:f9:be:9d:35:5a:f6:0f:cc:11:
86:c9:c2:52:24:62:ee:77:fc:ca:53:36:fa:21:05:
c0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CF:1E:4F:3A:6E:44:2A:A1:1A:15:BB:4B:F4:BB:44:65:79:AB:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1161042C3D211EFAE2BA850762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.190.0/24
Signature Algorithm: sha256WithRSAEncryption
59:41:cd:ff:11:76:2f:94:96:9d:fe:69:6c:73:fa:c8:3d:fd:
3b:94:60:89:71:d3:78:2b:69:38:10:0c:8a:d3:ea:33:b8:37:
b1:b9:67:a6:e6:b6:60:4d:82:1c:5e:00:6f:b3:be:db:fe:06:
a3:db:39:30:ed:ef:95:2e:a8:03:61:2e:10:d2:0d:ed:8d:3f:
60:10:b2:86:a9:86:8e:c7:4d:0d:ad:a1:1c:b2:45:39:a5:45:
03:66:93:21:05:88:c6:cb:fe:5c:7c:f9:82:ec:fd:8a:e0:90:
bb:e3:4a:ee:8e:be:49:b2:7f:5a:bd:d8:5c:51:1f:0b:8c:c2:
bc:48:0b:e4:d3:6e:a5:49:de:ba:be:1b:ad:ea:9a:f0:4a:fd:
ee:46:03:a2:54:8e:ad:83:f6:39:69:27:aa:1a:7a:fa:f9:77:
7e:4a:6d:6c:c2:92:50:53:b1:17:42:ba:1b:a8:5d:3c:33:04:
61:a8:38:3d:31:50:d1:df:cd:e2:f6:28:b4:a1:b6:92:69:3f:
7c:8f:f1:8e:c9:13:c4:75:40:43:c8:bb:76:35:a1:24:d9:1a:
5a:dc:f9:0f:f5:3e:f1:43:d4:22:dc:9a:20:7b:7a:cb:c6:8f:
13:ea:cd:88:2f:ba:27:d5:df:35:96:7d:5f:f6:7e:97:00:69:
65:f5:23:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAShQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MjE0NDQ1WhcNMjcxMjEyMjE0NDQ1WjAYMRYw
FAYDVQQDEw02NzZkY2U1MC1lOTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzMDFb7KCh79bbGRgOOiaK7yclSkQDkOPuRKbIb1G5lXsYcIn2NLcefSv
E8nIGI75L70ZDy+VrErkI4r9/NoRMwUTYOtt0N87Ga+r/Qqfq4aJv1B9RwDP2rqk
HYiFnNMcK12w4YLXuMcWi6FHsN9eeWAHrHy8y74Ibl6Ufkm4GldRAxQhx4T4PSW/
qUs0PaRTA71MiHJWYGVMCdc9mS6Gqwa1j/ZrKa2gtnMNEysj0QlxF5odMcYrlwgV
otO4e0VjcCEqEbv0Tdf3ckHv9fwdNy97mAE1icPbNuiR/SiOARafjRMSBtr5vp01
WvYPzBGGycJSJGLud/zKUzb6IQXAcwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLXP
Hk86bkQqoRoVu0v0u0RleatMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMTE2MTA0MkMzRDIxMUVGQUUyQkE4NTA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlO+MA0GCSqGSIb3DQEB
CwUAA4IBAQBZQc3/EXYvlJad/mlsc/rIPf07lGCJcdN4K2k4EAyK0+ozuDexuWem
5rZgTYIcXgBvs77b/gaj2zkw7e+VLqgDYS4Q0g3tjT9gELKGqYaOx00NraEcskU5
pUUDZpMhBYjGy/5cfPmC7P2K4JC740rujr5Jsn9avdhcUR8LjMK8SAvk026lSd66
vhut6prwSv3uRgOiVI6tg/Y5aSeqGnr6+Xd+Sm1swpJQU7EXQrobqF08MwRhqDg9
MVDR383i9ii0obaSaT98j/GOyRPEdUBDyLt2NaEk2Rpa3PkP9T7xQ9Qi3Joge3rL
xo8T6s2IL7on1d81ln1f9n6XAGll9SM1
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:35:39 2025 by rpki-client