Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD297ADEC19A11EF92DBACA5762E951A.roa
File: AD297ADEC19A11EF92DBACA5762E951A.roa (raw, json)
Hash identifier: sDyFve+BdJp4VjuUIvcgvarA2izx9DcvnqpvvHd8oc4=
Subject key identifier: BA:90:D3:86:01:DE:9E:36:36:EB:F6:4F:AE:66:95:9E:5E:1C:A5:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012065
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD297ADEC19A11EF92DBACA5762E951A.roa
Signing time: Tue 24 Dec 2024 01:59:15 +0000
ROA not before: Tue 24 Dec 2024 01:59:11 +0000
ROA not after: Wed 10 Dec 2025 01:59:11 +0000
asID: 984
IP address blocks: 154.90.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73829 (0x12065)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:59:11 2024 GMT
Not After : Dec 10 01:59:11 2025 GMT
Subject: CN=676a1572-60aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:d9:4b:92:c7:05:b8:df:cb:5f:ce:56:a9:
fd:fc:97:88:28:7d:73:de:26:12:10:73:81:29:66:
72:62:b5:e0:57:49:32:ae:62:c6:f4:cb:35:08:5a:
b8:70:ae:3c:ba:ce:00:d8:09:ff:d0:83:4b:f0:ee:
db:4f:30:1f:49:c6:b9:da:af:84:29:05:70:c6:50:
e3:20:14:79:b1:70:8a:b5:b9:72:c1:43:a8:61:32:
c2:2c:18:7e:da:2e:bd:5f:4a:78:23:e3:9b:db:c5:
a4:ef:1a:1f:cd:d8:3a:33:c3:f9:58:7e:c7:d5:11:
51:37:cf:59:7e:0e:fe:65:d0:a7:7a:5c:02:57:26:
19:87:ca:e1:31:08:29:d2:60:91:6d:3a:74:c8:70:
7c:2b:35:87:38:02:ab:0e:5b:0a:56:3a:8f:03:5d:
97:ec:dc:d2:76:df:51:46:f6:0c:cc:d4:50:b3:ff:
43:bd:6e:d2:0d:42:0b:2a:c5:7e:ff:df:76:bf:7f:
de:56:0f:95:78:ab:f5:b4:6b:de:af:7d:73:cd:30:
78:4a:42:f0:56:37:f4:88:dc:87:f0:4f:a6:75:97:
0f:e6:fb:e6:8a:de:60:34:75:de:e7:f4:63:c9:b0:
de:a9:f9:ef:b3:48:0e:bf:dd:e2:db:1a:be:67:f5:
2a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:90:D3:86:01:DE:9E:36:36:EB:F6:4F:AE:66:95:9E:5E:1C:A5:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD297ADEC19A11EF92DBACA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.206.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c0:7f:53:8e:85:70:e8:9b:45:93:e5:fb:ae:90:f9:12:99:
ea:50:92:45:29:ee:16:04:9e:6c:09:d3:e2:a3:e2:8b:fa:93:
ea:83:34:af:f6:de:88:f4:71:33:7a:a9:b2:43:42:8d:65:fd:
e1:1b:2c:af:78:20:e1:b8:2c:4e:b4:13:c7:bf:71:b1:ec:57:
dd:9d:0c:11:04:c1:25:62:59:7b:38:ab:f2:ce:83:56:21:93:
d1:ef:6f:74:15:c7:bf:81:b4:dd:51:bf:7c:09:92:0b:0c:17:
e7:c7:ec:68:9e:91:12:20:d9:22:e8:60:23:56:71:2a:48:a5:
51:59:be:2a:eb:e9:60:16:94:82:5a:ed:ff:8d:f3:8e:9b:47:
a5:3f:d5:82:d7:65:ea:c4:2b:3e:9f:08:3a:b7:ab:08:17:06:
26:77:8e:fb:d9:1b:19:18:05:77:38:2b:e1:cb:1e:51:8a:26:
d1:ba:ce:3e:3a:1e:b5:4d:4d:1c:cf:5d:45:77:7c:53:cb:04:
31:86:9e:a2:f0:9a:e4:05:89:40:12:6f:27:c3:50:9b:cb:e5:
2a:1c:fc:c1:af:3c:fe:5a:5c:aa:bb:16:bc:46:4e:09:b0:e5:
41:9e:0b:69:d3:e7:8d:0a:22:07:82:e1:a7:dd:15:07:e5:e1:
4a:c6:51:d2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASBlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDE1OTExWhcNMjUxMjEwMDE1OTExWjAYMRYw
FAYDVQQDEw02NzZhMTU3Mi02MGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqEzZS5LHBbjfy1/OVqn9/JeIKH1z3iYSEHOBKWZyYrXgV0kyrmLG9Ms1
CFq4cK48us4A2An/0INL8O7bTzAfSca52q+EKQVwxlDjIBR5sXCKtblywUOoYTLC
LBh+2i69X0p4I+Ob28Wk7xofzdg6M8P5WH7H1RFRN89Zfg7+ZdCnelwCVyYZh8rh
MQgp0mCRbTp0yHB8KzWHOAKrDlsKVjqPA12X7NzSdt9RRvYMzNRQs/9DvW7SDUIL
KsV+/992v3/eVg+VeKv1tGver31zzTB4SkLwVjf0iNyH8E+mdZcP5vvmit5gNHXe
5/RjybDeqfnvs0gOv93i2xq+Z/UqEwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLqQ
04YB3p42Nuv2T65mlZ5eHKXyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRDI5N0FERUMxOUExMUVGOTJEQkFDQTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlrOMA0GCSqGSIb3DQEB
CwUAA4IBAQAvwH9TjoVw6JtFk+X7rpD5EpnqUJJFKe4WBJ5sCdPio+KL+pPqgzSv
9t6I9HEzeqmyQ0KNZf3hGyyveCDhuCxOtBPHv3Gx7FfdnQwRBMElYll7OKvyzoNW
IZPR7290Fce/gbTdUb98CZILDBfnx+xonpESINki6GAjVnEqSKVRWb4q6+lgFpSC
Wu3/jfOOm0elP9WC12XqxCs+nwg6t6sIFwYmd4772RsZGAV3OCvhyx5RiibRus4+
Oh61TU0cz11Fd3xTywQxhp6i8JrkBYlAEm8nw1Cby+UqHPzBrzz+Wlyquxa8Rk4J
sOVBngtp0+eNCiIHguGn3RUH5eFKxlHS
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:38:33 2025 by rpki-client