Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9660ED6C41711EF97294298762E951A.roa
File: C9660ED6C41711EF97294298762E951A.roa (raw, json)
Hash identifier: eBJ2EQI2o9pZEDzZxNtDVgx09dL1NNPzK36I6tElHy8=
Subject key identifier: C0:5B:FF:CE:CB:E1:06:22:81:7D:36:10:F1:6E:4D:6B:0B:E0:CA:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01296D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9660ED6C41711EF97294298762E951A.roa
Signing time: Fri 27 Dec 2024 05:59:51 +0000
ROA not before: Fri 27 Dec 2024 05:59:48 +0000
ROA not after: Fri 12 Dec 2025 05:59:48 +0000
asID: 984
IP address blocks: 154.197.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76141 (0x1296d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 05:59:48 2024 GMT
Not After : Dec 12 05:59:48 2025 GMT
Subject: CN=676e4257-9ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:f0:df:10:33:09:29:d7:38:5b:9f:ab:71:
cc:63:de:c8:3f:03:9a:93:7e:3c:4b:9f:86:af:96:
a0:33:e6:f9:8b:53:b3:82:59:c5:1e:43:22:f9:c7:
36:2a:d7:60:c8:58:f0:f3:93:1e:c6:67:af:9c:78:
ab:35:c2:3c:44:f1:ee:3f:8c:a2:48:7f:f0:dc:3c:
be:53:50:23:a9:b4:a3:09:a1:96:82:63:8c:a2:3b:
6b:53:ea:51:e9:40:e3:82:74:08:8d:c1:75:12:74:
67:55:bd:e7:c1:90:49:c0:60:83:63:c4:a7:d3:c3:
16:b9:f6:cb:08:4d:c9:46:8a:70:2e:f2:90:cc:69:
59:e4:a5:a4:ee:70:2d:59:32:b8:26:d5:e9:5d:37:
dc:59:98:ce:10:f7:81:a6:b5:e2:00:b5:f1:26:f7:
49:4c:4b:33:ef:a0:10:94:bf:c8:ef:91:15:b6:57:
54:ca:2e:f9:de:be:07:dc:45:98:fd:4b:36:97:4a:
7d:fc:3b:e6:0f:c6:ef:d1:4d:7f:aa:55:d2:3f:fc:
f1:e0:75:a3:ff:f3:24:8e:15:69:0d:fe:74:5a:43:
10:60:85:64:33:c5:cb:93:f7:a8:e8:8c:75:92:06:
5c:70:2e:a7:01:4e:ba:d6:75:ba:54:88:dd:d0:66:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5B:FF:CE:CB:E1:06:22:81:7D:36:10:F1:6E:4D:6B:0B:E0:CA:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9660ED6C41711EF97294298762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.99.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:04:48:c4:f6:69:da:f9:31:d6:1a:18:a3:4c:ae:41:93:16:
ce:d0:e6:ca:21:01:3a:f7:a4:0e:68:10:40:c9:79:6d:d5:2d:
bb:8c:8b:e8:3d:12:5e:25:aa:2b:64:18:97:c9:32:79:b5:ea:
28:02:07:f0:98:01:3b:7e:3b:41:6b:85:7f:59:9e:2e:8e:c0:
30:c5:0a:54:9b:a8:1a:b3:13:b5:5f:85:5e:4a:5f:4d:b3:e1:
fa:25:68:e2:cb:0a:f5:4d:6a:12:2f:c0:36:63:25:c1:ee:0d:
b8:96:7a:b4:5a:9e:32:a7:82:ce:f1:f4:af:c7:12:78:4a:52:
18:1b:71:9d:0b:4d:b3:08:8b:4c:b9:90:8d:96:ac:e5:d6:3c:
de:5c:6e:1a:91:63:12:b0:f9:1e:fe:b3:e0:af:eb:08:04:f2:
0a:3a:53:39:06:13:70:70:eb:78:fa:08:dd:05:44:5e:fb:5c:
dd:1a:9c:ef:81:06:c5:31:87:f3:bb:34:e1:bb:23:1c:91:71:
48:a3:a0:87:1c:d9:fa:79:5b:c8:23:12:b5:6b:57:b0:1e:2e:
17:cc:00:3f:5c:a5:5c:de:03:e6:31:04:84:c2:79:81:ab:3d:
58:a6:25:07:45:a7:b5:5a:36:c5:16:57:9f:c3:27:84:3b:c4:
1c:13:50:1a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASltMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDU1OTQ4WhcNMjUxMjEyMDU1OTQ4WjAYMRYw
FAYDVQQDEw02NzZlNDI1Ny05ZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtRfw3xAzCSnXOFufq3HMY97IPwOak348S5+Gr5agM+b5i1OzglnFHkMi
+cc2KtdgyFjw85MexmevnHirNcI8RPHuP4yiSH/w3Dy+U1AjqbSjCaGWgmOMojtr
U+pR6UDjgnQIjcF1EnRnVb3nwZBJwGCDY8Sn08MWufbLCE3JRopwLvKQzGlZ5KWk
7nAtWTK4JtXpXTfcWZjOEPeBprXiALXxJvdJTEsz76AQlL/I75EVtldUyi753r4H
3EWY/Us2l0p9/DvmD8bv0U1/qlXSP/zx4HWj//MkjhVpDf50WkMQYIVkM8XLk/eo
6Ix1kgZccC6nAU661nW6VIjd0GYMUwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMBb
/87L4QYigX02EPFuTWsL4MrjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DOTY2MEVENkM0MTcxMUVGOTcyOTQyOTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVjMA0GCSqGSIb3DQEB
CwUAA4IBAQBtBEjE9mna+THWGhijTK5BkxbO0ObKIQE696QOaBBAyXlt1S27jIvo
PRJeJaorZBiXyTJ5teooAgfwmAE7fjtBa4V/WZ4ujsAwxQpUm6gasxO1X4VeSl9N
s+H6JWjiywr1TWoSL8A2YyXB7g24lnq0Wp4yp4LO8fSvxxJ4SlIYG3GdC02zCItM
uZCNlqzl1jzeXG4akWMSsPke/rPgr+sIBPIKOlM5BhNwcOt4+gjdBURe+1zdGpzv
gQbFMYfzuzThuyMckXFIo6CHHNn6eVvIIxK1a1ewHi4XzAA/XKVc3gPmMQSEwnmB
qz1YpiUHRae1WjbFFlefwyeEO8QcE1Aa
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:38 2025 by rpki-client