Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C26EA6D2C26F11EF9EF6198D762E951A.roa
File: C26EA6D2C26F11EF9EF6198D762E951A.roa (raw, json)
Hash identifier: Iy023bFALrroWQeNDiyn+ekghsaN16eGy0RoUYHG9Qo=
Subject key identifier: 95:D9:AF:94:DC:6A:6A:14:14:E2:2C:20:4A:70:36:19:E7:2F:DB:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012456
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C26EA6D2C26F11EF9EF6198D762E951A.roa
Signing time: Wed 25 Dec 2024 03:24:33 +0000
ROA not before: Wed 25 Dec 2024 03:24:30 +0000
ROA not after: Wed 10 Dec 2025 03:24:30 +0000
asID: 984
IP address blocks: 154.211.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74838 (0x12456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:24:30 2024 GMT
Not After : Dec 10 03:24:30 2025 GMT
Subject: CN=676b7af1-15d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:00:b3:d1:58:99:ce:c1:ae:eb:d8:d9:4a:
32:ea:fb:ba:47:af:cf:c7:8c:a1:30:23:82:0d:db:
3a:03:91:3c:e8:f3:37:e6:73:23:0c:5b:1e:ec:c9:
75:c6:92:48:96:8e:34:2a:80:50:ed:89:2c:7b:4f:
f3:eb:a0:b5:28:49:5b:2d:64:d6:c2:52:19:c9:60:
a2:50:67:d6:84:84:41:1a:4a:00:2a:75:09:d0:29:
d2:29:c8:f5:bb:86:17:f9:64:b0:98:82:14:9d:4e:
bc:14:80:25:2b:87:8d:bf:cc:52:e5:c2:bf:7d:c5:
cb:1e:78:b0:0c:ae:b0:5d:87:a4:9c:87:79:6e:bc:
42:01:49:6e:da:4d:a5:4e:7f:c4:f7:d6:e2:6f:8c:
27:68:88:a5:aa:ac:a7:e7:02:8b:13:99:8d:f4:81:
1c:70:d3:60:4c:d0:2e:dc:6d:59:90:08:02:82:f6:
b5:89:8f:2b:7e:88:a3:63:2b:7e:12:ee:e3:b5:ae:
ee:4c:68:07:57:3a:21:9b:0e:4e:e6:af:92:0c:11:
56:26:e5:9a:a7:d2:44:5a:b2:69:5f:49:81:3c:5e:
34:b7:2c:5e:2b:88:3d:1e:c6:a7:af:2b:e6:76:4e:
2c:f6:5e:9a:55:8b:a2:ef:35:31:e8:cd:8e:4d:6f:
ec:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D9:AF:94:DC:6A:6A:14:14:E2:2C:20:4A:70:36:19:E7:2F:DB:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C26EA6D2C26F11EF9EF6198D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.194.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a1:e7:52:09:6e:03:5c:d7:3b:aa:0c:06:83:41:97:1a:3a:
73:e4:8a:92:f5:40:7b:f0:aa:5f:4f:0d:6a:c9:e6:07:59:a3:
34:2f:ff:14:fa:ce:53:c3:82:ae:40:13:5b:00:3b:6d:a5:4f:
0d:2a:6f:a0:50:2d:44:b7:b5:b0:33:c3:5d:af:1d:d9:8e:c3:
b5:fd:05:6c:19:6a:ce:3a:78:b3:4d:73:ba:55:44:50:94:c7:
df:8d:7b:76:c8:af:95:5e:65:e5:6f:23:76:74:5a:b6:27:e1:
0f:b4:90:e5:70:78:e1:6a:30:71:64:5c:3a:9e:14:0f:4c:d9:
37:f4:11:91:f0:60:46:b0:92:a8:57:55:43:fe:e6:8f:c5:6b:
1f:27:88:ed:36:50:63:1c:7c:0b:c5:f7:8c:54:3c:d0:4c:bf:
54:d3:30:2b:55:99:eb:a8:0d:40:21:57:8f:8e:e4:26:65:17:
e2:b5:5f:f7:a1:09:f8:16:8a:c9:68:81:b9:07:b3:a7:8d:e1:
dd:4d:b7:92:08:5d:2d:6e:9d:64:4f:91:52:6a:c4:c5:20:88:
5e:5a:98:e9:a4:bf:a2:24:69:42:ca:41:c7:36:fe:bf:4e:09:
ea:0c:56:35:fc:a1:f0:61:21:54:aa:dc:70:b9:b7:0a:d8:56:
c8:fa:14:3e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASRWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDMyNDMwWhcNMjUxMjEwMDMyNDMwWjAYMRYw
FAYDVQQDEw02NzZiN2FmMS0xNWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq5AAs9FYmc7BruvY2Uoy6vu6R6/Px4yhMCOCDds6A5E86PM35nMjDFse
7Ml1xpJIlo40KoBQ7Ykse0/z66C1KElbLWTWwlIZyWCiUGfWhIRBGkoAKnUJ0CnS
Kcj1u4YX+WSwmIIUnU68FIAlK4eNv8xS5cK/fcXLHniwDK6wXYeknId5brxCAUlu
2k2lTn/E99bib4wnaIilqqyn5wKLE5mN9IEccNNgTNAu3G1ZkAgCgva1iY8rfoij
Yyt+Eu7jta7uTGgHVzohmw5O5q+SDBFWJuWap9JEWrJpX0mBPF40tyxeK4g9Hsan
ryvmdk4s9l6aVYui7zUx6M2OTW/sOwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJXZ
r5TcamoUFOIsIEpwNhnnL9snMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMjZFQTZEMkMyNkYxMUVGOUVGNjE5OEQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtPCMA0GCSqGSIb3DQEB
CwUAA4IBAQAkoedSCW4DXNc7qgwGg0GXGjpz5IqS9UB78KpfTw1qyeYHWaM0L/8U
+s5Tw4KuQBNbADttpU8NKm+gUC1Et7WwM8Ndrx3ZjsO1/QVsGWrOOnizTXO6VURQ
lMffjXt2yK+VXmXlbyN2dFq2J+EPtJDlcHjhajBxZFw6nhQPTNk39BGR8GBGsJKo
V1VD/uaPxWsfJ4jtNlBjHHwLxfeMVDzQTL9U0zArVZnrqA1AIVePjuQmZRfitV/3
oQn4ForJaIG5B7OnjeHdTbeSCF0tbp1kT5FSasTFIIheWpjppL+iJGlCykHHNv6/
TgnqDFY1/KHwYSFUqtxwubcK2FbI+hQ+
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:01 2025 by rpki-client