Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7CF4812C3D611EFAB85A468762E951A.roa
File: C7CF4812C3D611EFAB85A468762E951A.roa (raw, json)
Hash identifier: VkDifhZIScdijo2AJpSXtdRBxT/TxwlH2j1YlzRwdN0=
Subject key identifier: 37:51:30:87:73:E4:22:2B:87:1B:AB:D1:E9:3F:86:3C:B5:C0:7C:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01287A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7CF4812C3D611EFAB85A468762E951A.roa
Signing time: Thu 26 Dec 2024 22:14:31 +0000
ROA not before: Thu 26 Dec 2024 22:14:28 +0000
ROA not after: Sun 12 Dec 2027 22:14:28 +0000
asID: 17561
IP address blocks: 154.84.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75898 (0x1287a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:14:28 2024 GMT
Not After : Dec 12 22:14:28 2027 GMT
Subject: CN=676dd547-fe3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:6a:e0:70:5c:06:02:32:1d:80:d0:8f:83:
44:d6:ba:f1:79:08:21:b2:58:b6:e4:af:5f:40:fb:
c3:15:9d:79:76:57:fa:0d:6a:4b:dd:b0:ee:92:c8:
69:5d:5c:c9:6a:7a:37:81:85:d9:4d:bf:53:12:15:
fd:9d:01:69:f7:70:d0:1c:b1:92:50:45:ef:32:b5:
4a:52:ce:d7:d0:3a:a1:a8:95:5c:89:f9:e7:2e:91:
a7:f8:54:0d:4f:7a:b3:d3:ce:71:fe:2f:79:bc:0c:
cb:d4:fd:3d:6f:a1:6a:08:66:77:75:9c:75:04:93:
de:9a:23:fc:25:fb:35:66:81:8d:39:9f:16:c9:14:
5a:c9:cb:c7:7b:89:40:d9:5e:70:f0:1c:4f:70:d3:
19:b3:84:b1:4a:9f:8c:af:9a:46:1c:4d:2f:fb:8b:
21:21:c9:48:ab:53:29:e7:f3:5b:52:20:fb:ac:fa:
9f:ca:a9:6d:00:b6:69:a4:01:bf:7c:e1:bb:90:93:
a2:31:80:30:47:c4:cb:63:e8:2a:15:8a:5e:64:d0:
5c:5b:5b:12:be:c4:a1:cc:63:51:46:b1:f9:0f:0f:
4a:79:0b:62:e5:00:7d:96:95:91:db:f0:0a:6d:90:
9c:47:98:e3:af:ae:91:37:6e:b0:1b:68:64:50:a1:
68:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:51:30:87:73:E4:22:2B:87:1B:AB:D1:E9:3F:86:3C:B5:C0:7C:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7CF4812C3D611EFAB85A468762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.164.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:77:86:91:6e:cd:d0:24:05:05:be:7d:e9:5c:92:6e:13:d8:
61:44:0a:3d:66:35:0f:e9:f5:0a:cc:a8:57:b1:00:c6:d9:95:
b1:14:d4:16:03:32:16:ce:24:78:1d:08:e6:dd:a2:b9:79:a3:
66:e4:12:32:fa:60:6d:bd:dd:6b:36:81:0a:73:d7:27:43:cc:
ff:78:9d:08:8a:0a:7c:2e:2e:2b:ec:54:78:2f:3f:be:b5:43:
1e:b1:a2:ca:43:ac:71:d1:80:d7:bd:ec:c2:d3:a6:6d:3b:16:
e4:bd:9a:48:3a:f2:bb:40:f4:c5:b5:ed:8a:40:34:83:f8:03:
d6:ed:4a:65:bb:f1:0b:75:f3:dd:23:0d:64:af:bf:2c:61:cc:
59:0e:8a:ca:9a:3b:6b:8b:93:5b:68:f1:dd:f6:48:60:1e:be:
71:fe:f1:48:87:f6:cc:64:3a:d9:af:97:61:6a:75:e4:ad:06:
0d:0c:7a:36:f0:df:48:04:f7:3a:cf:5b:12:5b:57:b2:87:55:
db:f7:52:bd:c4:05:ed:db:36:b6:c3:b7:e8:fd:89:42:06:4b:
7a:a7:d9:1a:64:2d:7a:ed:08:a0:db:bf:c6:9d:16:45:72:e9:
d4:47:51:6d:74:f2:a0:7f:5c:94:f1:e9:e9:1b:79:3d:60:44:
6d:24:62:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASh6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MjIxNDI4WhcNMjcxMjEyMjIxNDI4WjAYMRYw
FAYDVQQDEw02NzZkZDU0Ny1mZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxUpq4HBcBgIyHYDQj4NE1rrxeQghsli25K9fQPvDFZ15dlf6DWpL3bDu
kshpXVzJano3gYXZTb9TEhX9nQFp93DQHLGSUEXvMrVKUs7X0DqhqJVcifnnLpGn
+FQNT3qz085x/i95vAzL1P09b6FqCGZ3dZx1BJPemiP8Jfs1ZoGNOZ8WyRRaycvH
e4lA2V5w8BxPcNMZs4SxSp+Mr5pGHE0v+4shIclIq1Mp5/NbUiD7rPqfyqltALZp
pAG/fOG7kJOiMYAwR8TLY+gqFYpeZNBcW1sSvsShzGNRRrH5Dw9KeQti5QB9lpWR
2/AKbZCcR5jjr66RN26wG2hkUKFonQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDdR
MIdz5CIrhxur0ek/hjy1wHyLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DN0NGNDgxMkMzRDYxMUVGQUI4NUE0Njg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlSkMA0GCSqGSIb3DQEB
CwUAA4IBAQDKd4aRbs3QJAUFvn3pXJJuE9hhRAo9ZjUP6fUKzKhXsQDG2ZWxFNQW
AzIWziR4HQjm3aK5eaNm5BIy+mBtvd1rNoEKc9cnQ8z/eJ0Iigp8Li4r7FR4Lz++
tUMesaLKQ6xx0YDXvezC06ZtOxbkvZpIOvK7QPTFte2KQDSD+APW7Uplu/ELdfPd
Iw1kr78sYcxZDorKmjtri5NbaPHd9khgHr5x/vFIh/bMZDrZr5dhanXkrQYNDHo2
8N9IBPc6z1sSW1eyh1Xb91K9xAXt2za2w7fo/YlCBkt6p9kaZC167Qig27/GnRZF
cunUR1FtdPKgf1yU8enpG3k9YERtJGJc
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:09 2025 by rpki-client