Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6B3A1A6C1B911EFA20DF376762E951A.roa
File: A6B3A1A6C1B911EFA20DF376762E951A.roa (raw, json)
Hash identifier: XeqcHIbX6sFIIWg5j4cNJB6KS5PthtLyiLDULtg2F7Q=
Subject key identifier: 42:57:1E:90:17:5A:B1:B8:28:C2:67:8A:77:1C:60:5D:89:59:FF:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0121DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6B3A1A6C1B911EFA20DF376762E951A.roa
Signing time: Tue 24 Dec 2024 05:40:58 +0000
ROA not before: Tue 24 Dec 2024 05:40:55 +0000
ROA not after: Wed 10 Dec 2025 05:40:55 +0000
asID: 984
IP address blocks: 154.193.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74203 (0x121db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:40:55 2024 GMT
Not After : Dec 10 05:40:55 2025 GMT
Subject: CN=676a496a-4183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:71:0b:6f:07:dd:8d:11:75:53:5c:0a:27:53:
da:3e:dd:c6:cd:a5:95:e8:73:2c:d2:2d:e3:62:c9:
e9:7f:01:4d:86:fe:5e:48:7d:19:5d:71:a6:55:8d:
60:fd:9f:b5:92:fe:9c:53:50:f1:af:2d:33:72:c1:
1e:5c:b1:24:de:d7:68:45:e9:bf:2f:46:bf:09:71:
81:15:7f:72:14:e7:b7:11:7c:00:85:09:30:f6:a1:
6e:33:a1:b9:56:10:46:fc:18:4a:43:81:e9:43:0d:
2d:0e:09:d0:4f:f0:bb:17:64:31:19:03:6c:2e:ec:
6c:2b:31:40:53:78:1f:84:dc:66:23:18:f3:ae:8a:
73:68:7c:cf:00:d7:30:1a:bc:1c:5b:66:24:3e:00:
64:79:78:5e:4f:68:04:8c:d9:b5:05:2f:b5:ee:ae:
54:5e:b2:31:d4:58:56:28:08:c4:20:c4:88:31:5a:
1a:35:ef:a9:3c:6d:0b:a1:43:d2:9d:4d:2d:e2:3d:
d8:97:17:44:3c:1d:83:8e:07:12:c0:8b:cc:a4:3e:
28:d7:5c:a8:94:40:03:0e:38:de:e9:21:3f:6a:7b:
e3:89:b2:e2:e3:51:03:01:f2:c3:6e:b9:29:0d:a8:
d1:18:ed:59:e7:09:41:05:99:b7:d0:91:b9:26:c7:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:57:1E:90:17:5A:B1:B8:28:C2:67:8A:77:1C:60:5D:89:59:FF:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6B3A1A6C1B911EFA20DF376762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.167.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:43:5c:0e:2c:bd:96:8f:89:b1:ba:8d:11:d0:bd:c4:d6:d5:
37:f4:2c:a9:ac:c0:5a:8d:ab:f6:eb:41:dc:cb:2e:06:5a:99:
fe:c7:ee:bb:8f:88:d3:d3:51:ae:18:a1:ef:51:e8:0f:1d:39:
3d:39:d9:bc:c1:f3:f0:b9:b5:3f:1c:9d:b2:59:b9:34:9e:fc:
98:51:2e:e2:77:37:2c:fc:2f:21:b5:83:19:03:d6:a6:43:56:
bb:3a:76:04:ed:7e:05:5b:f3:da:d9:80:0b:ad:cd:6e:46:aa:
dd:bd:57:81:a3:89:54:b9:3e:27:a9:80:df:15:4a:42:f8:b4:
65:60:ae:dd:89:08:7c:e3:f2:a5:31:7c:ed:e7:ae:03:1e:3a:
18:8f:14:b0:29:47:d7:27:d7:68:30:0a:d4:d3:55:f0:67:41:
41:ef:86:d7:89:d3:dd:91:03:1f:c7:7d:9e:c1:17:ee:7b:5e:
fc:b4:47:36:1c:bf:f5:0a:0b:5f:dc:b1:ec:9b:5c:4b:e5:9b:
3f:d3:94:f1:ec:e8:0f:7e:f1:b4:b1:ea:82:e4:be:49:88:1f:
3c:88:05:97:a7:72:61:68:2b:b1:33:88:4d:fc:5f:3a:21:6d:
52:e3:39:b8:8e:f4:ee:cc:fb:59:a0:f4:52:c1:26:92:76:78:
74:b5:01:0a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASHbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDU0MDU1WhcNMjUxMjEwMDU0MDU1WjAYMRYw
FAYDVQQDEw02NzZhNDk2YS00MTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5HELbwfdjRF1U1wKJ1PaPt3GzaWV6HMs0i3jYsnpfwFNhv5eSH0ZXXGm
VY1g/Z+1kv6cU1Dxry0zcsEeXLEk3tdoRem/L0a/CXGBFX9yFOe3EXwAhQkw9qFu
M6G5VhBG/BhKQ4HpQw0tDgnQT/C7F2QxGQNsLuxsKzFAU3gfhNxmIxjzropzaHzP
ANcwGrwcW2YkPgBkeXheT2gEjNm1BS+17q5UXrIx1FhWKAjEIMSIMVoaNe+pPG0L
oUPSnU0t4j3YlxdEPB2DjgcSwIvMpD4o11yolEADDjje6SE/anvjibLi41EDAfLD
brkpDajRGO1Z5wlBBZm30JG5JsdSMwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEJX
HpAXWrG4KMJninccYF2JWf/6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNkIzQTFBNkMxQjkxMUVGQTIwREYzNzY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsGnMA0GCSqGSIb3DQEB
CwUAA4IBAQC2Q1wOLL2Wj4mxuo0R0L3E1tU39CyprMBajav260Hcyy4GWpn+x+67
j4jT01GuGKHvUegPHTk9Odm8wfPwubU/HJ2yWbk0nvyYUS7idzcs/C8htYMZA9am
Q1a7OnYE7X4FW/Pa2YALrc1uRqrdvVeBo4lUuT4nqYDfFUpC+LRlYK7diQh84/Kl
MXzt564DHjoYjxSwKUfXJ9doMArU01XwZ0FB74bXidPdkQMfx32ewRfue178tEc2
HL/1Cgtf3LHsm1xL5Zs/05Tx7OgPfvG0seqC5L5JiB88iAWXp3JhaCuxM4hN/F86
IW1S4zm4jvTuzPtZoPRSwSaSdnh0tQEK
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:50 2025 by rpki-client