Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B540F59EC38411EF86C57A65762E951A.roa
File: B540F59EC38411EF86C57A65762E951A.roa (raw, json)
Hash identifier: b7A9nHzEQ0yPwAWvm0FvKiro3VcqQ3tDuq3l04+R6DI=
Subject key identifier: 51:D1:F1:BD:AD:48:85:45:64:26:82:28:F7:8D:E1:AE:09:65:4E:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012784
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B540F59EC38411EF86C57A65762E951A.roa
Signing time: Thu 26 Dec 2024 12:27:02 +0000
ROA not before: Thu 26 Dec 2024 12:26:58 +0000
ROA not after: Sun 12 Dec 2027 12:26:58 +0000
asID: 17561
IP address blocks: 154.94.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75652 (0x12784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 12:26:58 2024 GMT
Not After : Dec 12 12:26:58 2027 GMT
Subject: CN=676d4b95-4a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:28:a5:db:5b:19:b8:34:75:22:1e:78:68:
a4:03:39:76:35:a1:3e:2b:e8:e1:f0:80:d6:e4:cc:
4f:fd:97:88:cc:fc:77:b5:b1:7e:1c:fc:7f:4c:b7:
1e:5c:6e:0b:af:fa:98:07:fa:25:56:40:c1:33:70:
b3:51:ac:3d:5f:b0:c3:78:63:93:98:78:28:eb:45:
75:1d:53:a2:f0:11:48:06:04:49:96:35:7e:1a:08:
c3:11:97:c4:21:8c:34:87:b1:8d:e8:00:52:68:7c:
bb:3b:6b:54:21:33:be:fa:7e:68:46:7a:c3:7b:fa:
90:1c:e7:a6:be:e1:68:cc:12:da:92:50:10:31:93:
f9:51:cd:af:d4:99:71:d6:b7:fa:e7:92:07:bf:ff:
75:ae:2c:ed:5e:4c:6a:25:9a:c7:8a:12:7b:64:43:
bc:96:44:77:d9:59:d1:40:50:8b:41:08:cc:bb:7b:
b7:80:b8:58:02:16:0b:7a:10:75:49:88:6e:ca:a2:
a8:21:d6:9c:58:75:6e:b0:77:10:69:dd:d3:87:a2:
63:b7:17:6f:ee:21:58:b2:97:31:98:9f:58:c7:4c:
a8:3b:67:c8:15:56:18:55:77:cd:8b:d4:2d:5a:bb:
b1:41:c3:52:b0:45:6a:03:fb:c6:24:0b:60:03:44:
03:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D1:F1:BD:AD:48:85:45:64:26:82:28:F7:8D:E1:AE:09:65:4E:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B540F59EC38411EF86C57A65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.217.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:69:1c:6d:64:91:0a:93:9d:9e:88:33:53:c9:a4:59:ee:6a:
b6:db:16:79:42:bb:18:62:6f:e8:f2:f4:c1:f2:d8:39:6e:57:
45:fc:26:5a:9c:7f:8c:ab:19:ce:20:5e:f9:c2:f5:54:34:3d:
24:33:f0:fd:a4:41:35:de:d5:69:81:1a:a3:75:9b:1f:1e:11:
5e:de:07:19:d2:af:d5:6a:59:8f:75:08:35:15:50:71:77:d8:
e0:89:e9:44:7a:40:12:1b:09:13:25:bb:31:20:79:49:4d:b7:
35:00:c5:8a:19:91:a7:ec:f9:33:d5:4a:8a:01:85:db:8d:d4:
d6:c2:d8:78:10:0b:6f:cd:a8:cf:89:04:57:6c:20:db:dd:f2:
07:e8:d2:6a:11:c1:ea:fc:dc:a9:b4:d5:41:c7:36:1f:4f:bd:
4b:41:72:0c:52:9c:c1:4d:db:bc:83:81:e0:24:70:3a:01:67:
94:10:4b:c6:0b:97:a7:5b:c7:0a:6d:aa:ca:f1:3d:b5:b2:c5:
91:43:c9:0a:56:88:73:d9:75:12:06:f7:8e:15:9c:1a:49:07:
aa:bb:57:e3:1b:83:db:28:5b:a5:c0:bb:7b:02:8e:b1:89:97:
d9:81:92:71:1b:d5:61:da:6b:90:18:77:a6:39:9b:12:fa:47:
c8:7c:e5:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASeEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MTIyNjU4WhcNMjcxMjEyMTIyNjU4WjAYMRYw
FAYDVQQDEw02NzZkNGI5NS00YTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt74opdtbGbg0dSIeeGikAzl2NaE+K+jh8IDW5MxP/ZeIzPx3tbF+HPx/
TLceXG4Lr/qYB/olVkDBM3CzUaw9X7DDeGOTmHgo60V1HVOi8BFIBgRJljV+GgjD
EZfEIYw0h7GN6ABSaHy7O2tUITO++n5oRnrDe/qQHOemvuFozBLaklAQMZP5Uc2v
1Jlx1rf655IHv/91riztXkxqJZrHihJ7ZEO8lkR32VnRQFCLQQjMu3u3gLhYAhYL
ehB1SYhuyqKoIdacWHVusHcQad3Th6Jjtxdv7iFYspcxmJ9Yx0yoO2fIFVYYVXfN
i9QtWruxQcNSsEVqA/vGJAtgA0QDIQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFHR
8b2tSIVFZCaCKPeN4a4JZU64MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNTQwRjU5RUMzODQxMUVGODZDNTdBNjU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml7ZMA0GCSqGSIb3DQEB
CwUAA4IBAQA8aRxtZJEKk52eiDNTyaRZ7mq22xZ5QrsYYm/o8vTB8tg5bldF/CZa
nH+MqxnOIF75wvVUND0kM/D9pEE13tVpgRqjdZsfHhFe3gcZ0q/ValmPdQg1FVBx
d9jgielEekASGwkTJbsxIHlJTbc1AMWKGZGn7Pkz1UqKAYXbjdTWwth4EAtvzajP
iQRXbCDb3fIH6NJqEcHq/NyptNVBxzYfT71LQXIMUpzBTdu8g4HgJHA6AWeUEEvG
C5enW8cKbarK8T21ssWRQ8kKVohz2XUSBveOFZwaSQequ1fjG4PbKFulwLt7Ao6x
iZfZgZJxG9Vh2muQGHemOZsS+kfIfOUd
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:14:42 2025 by rpki-client