Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C388C05EC54711EFB8E30795762E951A.roa
File: C388C05EC54711EFB8E30795762E951A.roa (raw, json)
Hash identifier: P7KjldcmppwkwYMcy+wKvNQ9pZakWm/vZstbn/dvlX0=
Subject key identifier: 6B:50:78:FA:C6:36:56:82:04:6D:97:7E:40:F4:53:15:0A:E0:C2:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CBB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C388C05EC54711EFB8E30795762E951A.roa
Signing time: Sat 28 Dec 2024 18:15:49 +0000
ROA not before: Sat 28 Dec 2024 18:15:45 +0000
ROA not after: Fri 12 Dec 2025 18:15:45 +0000
asID: 984
IP address blocks: 154.209.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76987 (0x12cbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:15:45 2024 GMT
Not After : Dec 12 18:15:45 2025 GMT
Subject: CN=67704054-5104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:c2:2e:da:b5:45:9f:b6:37:67:b1:57:fa:
a9:a3:cd:0e:da:33:34:4d:1a:33:9d:dc:ea:2e:0a:
f7:0d:9f:49:e7:28:30:79:a6:a3:77:a6:e4:f9:7f:
0c:e9:11:9e:76:5e:98:12:cb:eb:41:73:b4:9c:74:
13:95:e5:52:1c:30:d8:29:d8:db:d2:1d:3e:47:ee:
04:ea:e1:4a:a3:8a:cd:80:1f:0f:d8:60:36:d4:9a:
da:42:20:33:fb:0a:6e:fa:36:23:29:bb:96:d4:72:
5c:33:bb:a3:ca:1e:71:88:05:86:9b:8f:95:c2:dc:
c5:53:2c:fa:ee:00:5a:b1:f6:22:77:fb:85:4a:2e:
72:55:8a:ad:b4:bd:b7:fc:6d:74:d5:f3:de:39:b5:
c7:12:02:fb:85:38:40:be:3e:35:e6:15:3b:6f:61:
c1:a3:d3:55:81:45:a8:88:31:c3:aa:77:de:65:82:
47:2b:4b:39:94:a5:1f:e4:1f:d6:66:fc:0b:50:1d:
e7:eb:03:a4:89:70:c0:34:a3:ef:4e:3b:f1:03:48:
7b:21:a6:ce:4a:a5:b0:d0:5d:48:0d:73:a1:0a:8b:
9e:1a:14:ed:75:43:4b:9d:f2:72:e0:77:2f:66:32:
3f:18:42:55:3c:2d:3e:9b:2c:45:09:9f:e4:5e:33:
6d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:50:78:FA:C6:36:56:82:04:6D:97:7E:40:F4:53:15:0A:E0:C2:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C388C05EC54711EFB8E30795762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.24.0/24
Signature Algorithm: sha256WithRSAEncryption
65:53:0d:de:55:ce:2b:3c:1f:52:26:b6:d2:13:3e:b8:fa:25:
83:ba:1c:23:01:46:6a:7a:38:23:8d:1c:34:98:12:70:f0:eb:
1c:c6:51:ea:86:26:59:bf:c8:73:ea:26:9e:ab:f6:12:2e:d4:
17:7a:8e:80:6a:48:3b:b6:84:b2:c2:9a:68:ac:33:dc:8e:58:
c9:63:1a:2f:aa:80:12:03:2d:d1:36:0b:ab:96:49:ae:f5:2a:
bb:e5:55:e6:97:23:51:f6:2c:1d:f4:50:98:5d:56:ee:09:0f:
19:05:c3:68:bc:58:59:5e:72:5d:fd:8f:07:e2:9a:9b:22:e4:
66:60:97:bd:04:78:03:ae:79:20:cb:a9:e2:7b:17:20:67:51:
41:21:3d:71:ec:dd:90:4f:4a:4a:5d:fa:ea:ea:34:27:0f:6a:
37:35:f0:9c:25:7a:39:b8:c4:ab:06:11:d1:8a:12:90:70:73:
cc:44:19:13:f1:4c:2a:da:b3:7f:71:98:a8:e5:1e:6d:df:74:
13:35:e7:8e:28:36:ad:fb:d5:81:d5:17:b5:d6:b0:b2:fb:d8:
e2:78:c6:4e:ff:17:fe:cd:e9:74:68:78:f0:85:c8:35:43:d7:
36:bb:eb:c6:e9:93:08:bc:eb:30:9f:24:9c:38:de:c9:c1:2f:
81:3d:5b:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASy7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTgxNTQ1WhcNMjUxMjEyMTgxNTQ1WjAYMRYw
FAYDVQQDEw02NzcwNDA1NC01MTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAou7CLtq1RZ+2N2exV/qpo80O2jM0TRozndzqLgr3DZ9J5ygweaajd6bk
+X8M6RGedl6YEsvrQXO0nHQTleVSHDDYKdjb0h0+R+4E6uFKo4rNgB8P2GA21Jra
QiAz+wpu+jYjKbuW1HJcM7ujyh5xiAWGm4+VwtzFUyz67gBasfYid/uFSi5yVYqt
tL23/G101fPeObXHEgL7hThAvj415hU7b2HBo9NVgUWoiDHDqnfeZYJHK0s5lKUf
5B/WZvwLUB3n6wOkiXDANKPvTjvxA0h7IabOSqWw0F1IDXOhCoueGhTtdUNLnfJy
4HcvZjI/GEJVPC0+myxFCZ/kXjNtbwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGtQ
ePrGNlaCBG2XfkD0UxUK4MLkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMzg4QzA1RUM1NDcxMUVGQjhFMzA3OTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtEYMA0GCSqGSIb3DQEB
CwUAA4IBAQBlUw3eVc4rPB9SJrbSEz64+iWDuhwjAUZqejgjjRw0mBJw8OscxlHq
hiZZv8hz6iaeq/YSLtQXeo6Aakg7toSywpporDPcjljJYxovqoASAy3RNgurlkmu
9Sq75VXmlyNR9iwd9FCYXVbuCQ8ZBcNovFhZXnJd/Y8H4pqbIuRmYJe9BHgDrnkg
y6niexcgZ1FBIT1x7N2QT0pKXfrq6jQnD2o3NfCcJXo5uMSrBhHRihKQcHPMRBkT
8Uwq2rN/cZio5R5t33QTNeeOKDat+9WB1Re11rCy+9jieMZO/xf+zel0aHjwhcg1
Q9c2u+vG6ZMIvOswnyScON7JwS+BPVt9
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:28:05 2025 by rpki-client