Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8193D92C51C11EF9722A085762E951A.roa
File: A8193D92C51C11EF9722A085762E951A.roa (raw, json)
Hash identifier: wMUZvIDJ1rvxdJPW/euCPlscorbc/2E33uaQLr8Ser0=
Subject key identifier: 9E:A9:3C:9A:9B:63:41:40:24:6C:3F:41:53:B8:04:73:4B:F0:4E:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B2F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8193D92C51C11EF9722A085762E951A.roa
Signing time: Sat 28 Dec 2024 13:07:14 +0000
ROA not before: Sat 28 Dec 2024 13:07:10 +0000
ROA not after: Sun 12 Dec 2027 13:07:10 +0000
asID: 17561
IP address blocks: 154.203.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76591 (0x12b2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:07:10 2024 GMT
Not After : Dec 12 13:07:10 2027 GMT
Subject: CN=676ff802-32c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:72:9e:47:7a:90:6f:fa:7d:b5:e1:38:e4:
d3:12:ad:a9:02:02:76:65:b3:af:3f:42:73:1f:ef:
42:56:57:7e:3b:e9:9d:c2:cb:7e:54:52:c8:b7:ca:
8f:99:06:6e:e0:3e:3e:ef:8a:6b:dd:ff:b0:71:d8:
8c:00:a7:d8:36:90:74:ee:90:1d:0d:d5:58:23:64:
a5:9a:9c:42:f1:57:35:db:2e:53:b7:3b:e6:7f:a9:
65:00:6a:f8:d6:2b:17:12:7e:e1:fa:1a:13:d5:bc:
e6:48:d5:5b:54:ae:41:89:34:d8:c0:29:78:98:dd:
d1:ce:2d:c0:71:7a:27:05:62:8b:8d:02:ca:93:e6:
ee:45:55:8d:dc:e4:e6:4d:43:da:6b:d3:a1:9a:7f:
5f:a6:f2:3b:87:ac:79:ae:8f:29:55:1e:fb:b4:ab:
de:f1:d5:62:d7:15:5b:ec:dd:2f:01:11:32:8b:4a:
c8:b8:16:1d:8f:36:15:7e:cc:f4:08:77:96:b5:b3:
b5:0f:1b:6f:4b:22:14:0a:50:55:39:1a:ba:69:9c:
48:33:e9:99:48:0d:16:8f:5f:4e:6b:8f:01:4e:10:
25:6f:a1:f5:e3:8f:04:4d:1c:18:07:0e:ea:54:90:
59:1a:0f:8e:f3:4c:bc:35:e7:fc:30:b7:db:12:a5:
14:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A9:3C:9A:9B:63:41:40:24:6C:3F:41:53:B8:04:73:4B:F0:4E:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8193D92C51C11EF9722A085762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.35.0/24
Signature Algorithm: sha256WithRSAEncryption
83:4c:6e:74:a6:9f:73:ac:9f:5f:27:ae:79:ab:b8:59:74:66:
32:24:e3:de:ae:89:e3:9a:20:88:ef:60:4f:a3:4e:e8:48:de:
3e:8e:a2:64:dc:bb:22:f2:cc:66:9c:46:3c:e4:eb:b4:54:b5:
41:46:0b:4f:af:89:9a:28:f7:e5:cd:e3:c1:43:a8:cd:f1:8d:
29:0d:73:bc:76:41:f2:55:5d:b6:af:3b:0b:f4:73:7d:4d:8f:
40:05:83:a5:73:49:b1:8e:49:1e:d6:10:bb:3a:fb:db:bc:c1:
66:e0:74:41:ba:5f:eb:7f:ec:be:d4:4f:82:c4:8b:43:23:d9:
3e:73:ad:3e:02:3a:9e:51:82:12:86:b7:25:8f:c0:31:4f:ae:
fd:30:72:1b:18:95:0c:13:2e:f8:b9:39:b8:78:e2:20:b7:9a:
32:08:9b:4d:44:4e:0b:c2:73:8d:6a:36:94:70:db:84:7c:dd:
00:39:b7:6a:cf:09:ee:ca:6c:46:e9:b2:73:9d:d6:dd:f0:4a:
83:ff:31:52:d2:55:5c:b5:e4:ec:97:47:46:87:34:56:d0:c2:
06:1e:e4:0d:a2:d9:73:bd:34:23:ce:4e:b6:b3:97:a3:44:92:
54:f0:71:1f:f0:79:e1:81:2f:40:3b:0a:b4:29:aa:6c:83:23:
95:8b:99:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASsvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTMwNzEwWhcNMjcxMjEyMTMwNzEwWjAYMRYw
FAYDVQQDEw02NzZmZjgwMi0zMmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmgFynkd6kG/6fbXhOOTTEq2pAgJ2ZbOvP0JzH+9CVld+O+mdwst+VFLI
t8qPmQZu4D4+74pr3f+wcdiMAKfYNpB07pAdDdVYI2SlmpxC8Vc12y5Ttzvmf6ll
AGr41isXEn7h+hoT1bzmSNVbVK5BiTTYwCl4mN3Rzi3AcXonBWKLjQLKk+buRVWN
3OTmTUPaa9Ohmn9fpvI7h6x5ro8pVR77tKve8dVi1xVb7N0vAREyi0rIuBYdjzYV
fsz0CHeWtbO1DxtvSyIUClBVORq6aZxIM+mZSA0Wj19Oa48BThAlb6H1448ETRwY
Bw7qVJBZGg+O80y8Nef8MLfbEqUUVwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJ6p
PJqbY0FAJGw/QVO4BHNL8E5VMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BODE5M0Q5MkM1MUMxMUVGOTcyMkEwODU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmssjMA0GCSqGSIb3DQEB
CwUAA4IBAQCDTG50pp9zrJ9fJ655q7hZdGYyJOPeronjmiCI72BPo07oSN4+jqJk
3Lsi8sxmnEY85Ou0VLVBRgtPr4maKPflzePBQ6jN8Y0pDXO8dkHyVV22rzsL9HN9
TY9ABYOlc0mxjkke1hC7OvvbvMFm4HRBul/rf+y+1E+CxItDI9k+c60+AjqeUYIS
hrclj8AxT679MHIbGJUMEy74uTm4eOIgt5oyCJtNRE4LwnONajaUcNuEfN0AObdq
zwnuymxG6bJzndbd8EqD/zFS0lVcteTsl0dGhzRW0MIGHuQNotlzvTQjzk62s5ej
RJJU8HEf8HnhgS9AOwq0KapsgyOVi5nK
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:46:42 2025 by rpki-client