Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD334ACAC52511EFBF5B50BE762E951A.roa
File: BD334ACAC52511EFBF5B50BE762E951A.roa (raw, json)
Hash identifier: FURDWSs+qhLdemwYFfGZPuYncM8UszE/vkLkvRaLOwA=
Subject key identifier: D3:EF:05:8D:2D:38:AC:70:6E:08:D7:D3:0A:0C:E6:86:73:9F:AF:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B83
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD334ACAC52511EFBF5B50BE762E951A.roa
Signing time: Sat 28 Dec 2024 14:12:15 +0000
ROA not before: Sat 28 Dec 2024 14:12:11 +0000
ROA not after: Fri 12 Dec 2025 14:12:11 +0000
asID: 984
IP address blocks: 154.203.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76675 (0x12b83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 14:12:11 2024 GMT
Not After : Dec 12 14:12:11 2025 GMT
Subject: CN=6770073f-138a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:79:be:51:57:a4:d8:61:af:5b:3d:07:c7:02:
8b:de:5a:08:0c:05:28:62:a7:9e:0c:b0:05:d1:4a:
67:d5:03:1b:85:79:62:c5:99:e0:d5:fd:9b:3d:41:
a2:0e:5b:d3:c5:e2:c3:11:98:b6:e6:57:5c:2e:3d:
d7:23:63:46:68:60:b8:f6:c7:62:d8:9e:d3:28:75:
50:cb:9a:0d:f9:06:82:aa:88:f8:cd:c5:47:46:d8:
1a:14:99:c6:38:f7:05:95:57:7c:09:7d:91:1a:af:
bf:9e:ac:22:88:2f:90:bf:62:86:c2:94:22:f3:28:
6d:9e:a8:c2:be:bd:b7:ac:53:c2:da:5e:08:e4:1f:
4e:b9:3f:73:59:b1:94:d9:00:1c:43:23:79:fe:f7:
c7:7d:9e:1e:3a:6c:9b:14:01:9c:5a:26:31:ba:98:
e0:dc:2a:63:9a:2b:4a:9d:32:ab:81:f7:fd:eb:00:
37:d8:6b:56:8e:17:34:ce:94:23:ba:0b:6c:86:34:
b3:86:9e:78:59:bf:09:7d:c4:05:0b:20:7f:d3:d2:
5c:2e:f2:9a:a7:8e:5a:ab:6a:b2:45:e2:d7:92:e5:
97:f1:51:a6:b9:52:af:d8:11:0e:12:8d:fb:bc:31:
07:89:b4:93:c8:54:58:54:de:c7:77:cd:2a:bc:63:
e5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EF:05:8D:2D:38:AC:70:6E:08:D7:D3:0A:0C:E6:86:73:9F:AF:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD334ACAC52511EFBF5B50BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.246.0/24
Signature Algorithm: sha256WithRSAEncryption
00:4d:cb:ea:87:f5:97:64:f0:20:ad:ba:ad:3f:c9:27:20:a7:
f4:d5:a6:d1:49:17:02:d0:54:07:82:c0:75:45:5e:21:2f:22:
0f:ac:21:b9:47:40:ae:91:57:07:55:f1:93:5e:5d:06:94:f0:
b8:3a:eb:8e:c2:82:b4:35:13:c4:ad:2b:a5:39:66:45:5c:0d:
f5:e9:9d:8f:ee:a7:d6:12:3e:7c:4d:e3:d2:82:26:c4:21:3b:
78:62:50:25:9d:e7:dd:0c:ea:aa:37:e5:12:fc:f5:8f:fb:76:
53:27:5e:66:bf:74:98:9d:1f:ab:45:55:16:08:d1:85:e0:8a:
f5:9d:3e:e6:a3:fa:2a:33:6a:26:2e:85:d9:3e:d5:75:e4:42:
7e:ad:8f:11:be:47:9d:f6:0b:c3:d8:53:af:1b:da:6f:d7:88:
de:d0:9c:9e:65:9b:a2:d6:b5:d9:80:c5:6c:31:90:aa:95:98:
c9:84:b9:05:6b:26:d8:68:52:04:58:94:4b:f3:67:e0:79:e8:
bc:ab:4c:37:ab:24:a4:20:dc:5d:d3:95:ae:b2:4f:6c:6c:cc:
cd:d4:a3:17:42:71:f2:83:14:dd:3a:8a:73:ba:84:74:a9:a9:
40:8c:0f:a4:29:e4:e2:26:cb:98:1c:e7:9a:09:cf:d2:85:d3:
40:c9:c9:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASuDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTQxMjExWhcNMjUxMjEyMTQxMjExWjAYMRYw
FAYDVQQDEw02NzcwMDczZi0xMzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA03m+UVek2GGvWz0HxwKL3loIDAUoYqeeDLAF0Upn1QMbhXlixZng1f2b
PUGiDlvTxeLDEZi25ldcLj3XI2NGaGC49sdi2J7TKHVQy5oN+QaCqoj4zcVHRtga
FJnGOPcFlVd8CX2RGq+/nqwiiC+Qv2KGwpQi8yhtnqjCvr23rFPC2l4I5B9OuT9z
WbGU2QAcQyN5/vfHfZ4eOmybFAGcWiYxupjg3CpjmitKnTKrgff96wA32GtWjhc0
zpQjugtshjSzhp54Wb8JfcQFCyB/09JcLvKap45aq2qyReLXkuWX8VGmuVKv2BEO
Eo37vDEHibSTyFRYVN7Hd80qvGPlGQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNPv
BY0tOKxwbgjX0woM5oZzn68gMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRDMzNEFDQUM1MjUxMUVGQkY1QjUwQkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsv2MA0GCSqGSIb3DQEB
CwUAA4IBAQAATcvqh/WXZPAgrbqtP8knIKf01abRSRcC0FQHgsB1RV4hLyIPrCG5
R0CukVcHVfGTXl0GlPC4OuuOwoK0NRPErSulOWZFXA316Z2P7qfWEj58TePSgibE
ITt4YlAlnefdDOqqN+US/PWP+3ZTJ15mv3SYnR+rRVUWCNGF4Ir1nT7mo/oqM2om
LoXZPtV15EJ+rY8Rvked9gvD2FOvG9pv14je0JyeZZui1rXZgMVsMZCqlZjJhLkF
aybYaFIEWJRL82fgeei8q0w3qySkINxd05Wusk9sbMzN1KMXQnHygxTdOopzuoR0
qalAjA+kKeTiJsuYHOeaCc/ShdNAycnw
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:57 2025 by rpki-client