Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB71E174C1A711EF973BF484762E951A.roa
File: AB71E174C1A711EF973BF484762E951A.roa (raw, json)
Hash identifier: wVuey7GknwQ6lajA5DHCigsyn9fVTE+dO6L5vkZ43S0=
Subject key identifier: 38:F3:93:A4:A6:EB:1C:B7:B6:74:7C:A1:C5:38:EE:73:9A:55:FD:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012103
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB71E174C1A711EF973BF484762E951A.roa
Signing time: Tue 24 Dec 2024 03:32:15 +0000
ROA not before: Tue 24 Dec 2024 03:32:11 +0000
ROA not after: Wed 10 Dec 2025 03:32:11 +0000
asID: 984
IP address blocks: 154.92.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73987 (0x12103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:32:11 2024 GMT
Not After : Dec 10 03:32:11 2025 GMT
Subject: CN=676a2b3f-895c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:ae:8a:90:56:0b:8f:a1:54:ff:a9:cd:6b:
68:2a:f6:2a:5b:a9:9e:d4:6f:1e:62:e9:91:dc:ca:
3e:bc:05:c6:ec:16:df:f3:42:a2:f2:be:60:de:08:
33:e0:c1:68:d6:6e:0c:01:70:8c:f6:67:7e:b4:29:
62:15:94:b5:a8:a4:bb:af:63:c9:33:fc:ce:c5:fb:
45:8d:a3:83:05:cd:d1:3b:d1:62:b1:fa:1d:9c:49:
a2:93:0a:10:af:57:76:0c:0d:93:6f:8f:2d:a4:dd:
06:92:ed:56:c1:3f:8d:19:a7:f3:0a:a4:72:25:d1:
11:19:8c:d8:4e:43:ef:93:e3:03:09:e4:47:ab:26:
2a:16:72:7a:26:c6:ac:6f:16:08:a3:b5:89:5c:9b:
71:30:f4:08:11:5f:d6:64:de:fc:f4:da:95:f9:0a:
a7:44:36:05:36:7f:cb:9b:78:49:57:21:66:ae:85:
02:0f:cd:94:df:93:76:a1:1d:6f:1c:52:df:f8:00:
35:4d:d9:7c:cf:e2:c0:ce:5e:27:84:a9:f7:a9:5c:
fe:49:12:bf:a1:57:15:23:32:30:61:9d:01:29:27:
42:2a:48:76:d8:23:61:35:df:ea:96:ec:37:ae:b4:
11:82:e5:04:51:2c:36:c8:0a:16:aa:b9:9b:59:3f:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F3:93:A4:A6:EB:1C:B7:B6:74:7C:A1:C5:38:EE:73:9A:55:FD:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB71E174C1A711EF973BF484762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.201.0/24
Signature Algorithm: sha256WithRSAEncryption
03:51:94:80:8d:c1:9e:36:0c:84:a1:6d:37:aa:19:16:75:c2:
ca:c9:fa:86:85:97:6b:83:00:55:a7:99:15:ee:ef:d6:50:6d:
8b:d3:ba:6a:d1:a4:07:15:73:2f:0b:aa:ec:0a:23:da:ac:15:
82:28:07:75:0f:36:b0:38:fa:47:f6:85:7e:5b:70:72:e7:6c:
ec:2c:90:47:d8:db:2e:78:f0:16:cc:fa:27:22:4b:d5:79:9f:
16:8c:9b:c9:f6:66:4b:67:14:eb:29:9d:7c:80:dd:fc:34:90:
26:46:8c:17:12:01:cc:7d:b5:b5:6a:4f:c8:01:d4:51:fa:71:
de:be:38:fe:04:e0:18:49:e8:c8:5d:1f:15:c0:05:4c:fb:35:
71:4f:2d:5b:cd:16:05:07:ea:00:b3:b6:5e:16:f7:2c:e0:1c:
ac:66:56:3f:df:bd:72:63:bd:59:cd:e0:68:d0:1c:40:a2:03:
d6:36:72:ce:bb:4e:62:60:b3:16:14:79:a5:fc:8c:c7:44:49:
6c:e3:9d:37:3b:65:ae:e0:1b:be:05:e6:37:6c:03:f0:59:46:
8a:43:1d:b7:f8:28:8f:60:25:5c:f4:b1:15:75:43:d9:2e:9f:
56:5f:e5:14:2c:af:c4:7a:02:7c:bc:f7:5c:56:b6:86:6b:d6:
12:7d:90:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASEDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDMzMjExWhcNMjUxMjEwMDMzMjExWjAYMRYw
FAYDVQQDEw02NzZhMmIzZi04OTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0XOuipBWC4+hVP+pzWtoKvYqW6me1G8eYumR3Mo+vAXG7Bbf80Ki8r5g
3ggz4MFo1m4MAXCM9md+tCliFZS1qKS7r2PJM/zOxftFjaODBc3RO9FisfodnEmi
kwoQr1d2DA2Tb48tpN0Gku1WwT+NGafzCqRyJdERGYzYTkPvk+MDCeRHqyYqFnJ6
JsasbxYIo7WJXJtxMPQIEV/WZN789NqV+QqnRDYFNn/Lm3hJVyFmroUCD82U35N2
oR1vHFLf+AA1Tdl8z+LAzl4nhKn3qVz+SRK/oVcVIzIwYZ0BKSdCKkh22CNhNd/q
luw3rrQRguUEUSw2yAoWqrmbWT/eCQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDjz
k6Sm6xy3tnR8ocU47nOaVf0jMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQjcxRTE3NEMxQTcxMUVGOTczQkY0ODQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlzJMA0GCSqGSIb3DQEB
CwUAA4IBAQADUZSAjcGeNgyEoW03qhkWdcLKyfqGhZdrgwBVp5kV7u/WUG2L07pq
0aQHFXMvC6rsCiParBWCKAd1DzawOPpH9oV+W3By52zsLJBH2NsuePAWzPonIkvV
eZ8WjJvJ9mZLZxTrKZ18gN38NJAmRowXEgHMfbW1ak/IAdRR+nHevjj+BOAYSejI
XR8VwAVM+zVxTy1bzRYFB+oAs7ZeFvcs4BysZlY/371yY71ZzeBo0BxAogPWNnLO
u05iYLMWFHml/IzHREls4503O2Wu4Bu+BeY3bAPwWUaKQx23+CiPYCVc9LEVdUPZ
Lp9WX+UULK/EegJ8vPdcVraGa9YSfZB/
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:38 2025 by rpki-client