Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B741EC12C5E711EFAC14278D762E951A.roa
File: B741EC12C5E711EFAC14278D762E951A.roa (raw, json)
Hash identifier: lsxRl87aBdfL/q3zUc07O3zCcn6pgNvYUo5WQhxzLHQ=
Subject key identifier: 0F:00:7C:DC:8E:27:26:8B:D1:A3:20:C6:CA:2A:EB:ED:56:4E:01:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012D88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B741EC12C5E711EFAC14278D762E951A.roa
Signing time: Sun 29 Dec 2024 13:20:47 +0000
ROA not before: Sun 29 Dec 2024 13:20:44 +0000
ROA not after: Fri 12 Dec 2025 13:20:44 +0000
asID: 984
IP address blocks: 154.210.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77192 (0x12d88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 13:20:44 2024 GMT
Not After : Dec 12 13:20:44 2025 GMT
Subject: CN=67714caf-14a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b2:18:ad:fe:a1:a2:7f:e0:c8:07:21:c7:4d:
97:7d:1d:4b:16:4d:73:76:09:fe:04:1c:70:6c:fe:
50:d6:9a:6b:e5:33:63:63:6f:9a:2d:4b:80:83:f6:
08:d1:53:c0:82:4c:90:ea:de:f4:07:a9:16:e0:6c:
47:a9:53:a8:6a:4d:1a:75:48:68:77:45:b0:82:1a:
d3:ea:7a:4b:ad:b6:27:5d:79:85:13:74:8f:ff:5c:
b5:98:f1:75:d7:98:ec:06:d9:c1:ff:47:14:7f:d5:
55:85:bf:70:6b:ef:55:7d:a4:c0:e4:5a:dd:5b:8c:
7a:e6:12:5d:06:4f:34:0d:b2:00:29:83:ad:57:96:
ad:b2:36:e3:d8:4b:f8:5c:f3:60:bd:7d:f9:c5:7e:
47:b5:5d:e6:fc:b2:72:52:05:c9:be:e5:cf:70:77:
65:ab:88:1c:07:63:13:ac:24:1a:c4:8c:f8:ad:47:
5d:f4:43:4b:a0:ff:08:ad:cb:b2:0a:81:63:9c:f0:
14:7e:ce:0b:12:73:97:d3:a5:dc:b2:c6:ef:07:d1:
ad:d7:6a:29:a4:74:52:3f:1d:95:6d:3c:62:57:f1:
02:ef:37:5e:7d:a9:44:41:9f:68:2a:a2:9b:ea:9f:
81:1e:d6:e4:ca:cf:01:87:0d:2e:3b:f2:13:66:89:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:00:7C:DC:8E:27:26:8B:D1:A3:20:C6:CA:2A:EB:ED:56:4E:01:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B741EC12C5E711EFAC14278D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:74:b3:b2:7e:c1:a8:ba:b5:2e:4a:28:06:b1:4b:fb:1f:60:
36:68:aa:75:52:51:67:fd:41:5d:88:3b:9f:82:2c:a8:a3:04:
e5:56:93:93:0f:26:e2:18:8f:5d:4d:46:4a:17:6d:bc:ab:73:
3b:1a:a8:2c:74:46:b3:39:b0:ac:4b:b9:d0:9f:f5:b1:7b:b4:
c8:fb:04:d6:b2:51:4e:8c:9f:2e:a8:0e:47:a2:20:39:15:e0:
7f:48:13:f5:3d:fb:c1:fc:9e:27:34:24:62:4e:a5:59:a7:01:
91:cc:c2:3a:d2:ac:31:27:c8:e2:52:bc:4f:df:12:e5:70:ef:
cd:32:d7:33:bc:2e:51:6e:2f:17:9e:0d:8f:d4:dd:d7:d0:3f:
4b:77:c8:56:9d:af:bb:87:e3:27:d2:87:6e:43:8e:3c:a1:7e:
c4:f6:0c:9b:d5:76:c6:27:0f:37:b9:67:35:d6:1f:f4:8e:c3:
27:82:07:6c:eb:eb:fb:e3:0c:b8:eb:79:ad:71:65:33:e6:c5:
a0:d3:bf:8a:ce:8f:a9:42:89:b2:f6:88:7b:87:e3:01:04:89:
ed:eb:77:f8:13:f2:ca:3e:f5:a7:5f:a9:99:9f:f8:eb:0f:29:
11:ce:92:0a:52:4d:c8:e6:35:fe:1e:db:20:d9:05:7a:65:fc:
74:d5:e0:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS2IMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTMyMDQ0WhcNMjUxMjEyMTMyMDQ0WjAYMRYw
FAYDVQQDEw02NzcxNGNhZi0xNGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0LIYrf6hon/gyAchx02XfR1LFk1zdgn+BBxwbP5Q1ppr5TNjY2+aLUuA
g/YI0VPAgkyQ6t70B6kW4GxHqVOoak0adUhod0WwghrT6npLrbYnXXmFE3SP/1y1
mPF115jsBtnB/0cUf9VVhb9wa+9VfaTA5FrdW4x65hJdBk80DbIAKYOtV5atsjbj
2Ev4XPNgvX35xX5HtV3m/LJyUgXJvuXPcHdlq4gcB2MTrCQaxIz4rUdd9ENLoP8I
rcuyCoFjnPAUfs4LEnOX06XcssbvB9Gt12oppHRSPx2VbTxiV/EC7zdefalEQZ9o
KqKb6p+BHtbkys8Bhw0uO/ITZonfEwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFA8A
fNyOJyaL0aMgxsoq6+1WTgGBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNzQxRUMxMkM1RTcxMUVGQUMxNDI3OEQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtLzMA0GCSqGSIb3DQEB
CwUAA4IBAQCgdLOyfsGourUuSigGsUv7H2A2aKp1UlFn/UFdiDufgiyoowTlVpOT
DybiGI9dTUZKF228q3M7GqgsdEazObCsS7nQn/Wxe7TI+wTWslFOjJ8uqA5HoiA5
FeB/SBP1PfvB/J4nNCRiTqVZpwGRzMI60qwxJ8jiUrxP3xLlcO/NMtczvC5Rbi8X
ng2P1N3X0D9Ld8hWna+7h+Mn0oduQ448oX7E9gyb1XbGJw83uWc11h/0jsMnggds
6+v74wy463mtcWUz5sWg07+Kzo+pQomy9oh7h+MBBInt63f4E/LKPvWnX6mZn/jr
DykRzpIKUk3I5jX+Htsg2QV6Zfx01eB3
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:28:29 2025 by rpki-client