Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB89480EC38111EF84582B54762E951A.roa
File: CB89480EC38111EF84582B54762E951A.roa (raw, json)
Hash identifier: R1gm2baPR6JR3jszuB21dqkI8JwklSzjzZTL7YLnr7A=
Subject key identifier: 0C:F8:93:75:BA:D7:1D:CA:AE:A9:F2:A3:5B:D0:4E:5D:FC:32:7E:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012766
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB89480EC38111EF84582B54762E951A.roa
Signing time: Thu 26 Dec 2024 12:06:10 +0000
ROA not before: Thu 26 Dec 2024 12:06:07 +0000
ROA not after: Sun 12 Dec 2027 12:06:07 +0000
asID: 17561
IP address blocks: 154.94.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75622 (0x12766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 12:06:07 2024 GMT
Not After : Dec 12 12:06:07 2027 GMT
Subject: CN=676d46b2-1b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:65:b2:0e:02:e3:4f:1a:21:2d:aa:b2:5a:
93:8c:aa:8b:6e:e4:08:c5:ea:5e:36:65:77:06:53:
df:9c:48:bb:f2:79:89:1a:92:88:96:55:e2:a9:14:
36:c4:ba:8a:1c:9e:af:a3:b8:3e:8e:86:a8:ab:69:
c7:f9:26:03:38:1b:f7:86:93:8f:3a:eb:22:ea:61:
44:2c:f6:45:17:92:33:cb:9c:ee:a8:3a:10:5e:84:
15:96:76:ba:84:65:d9:ba:a5:c8:e3:e9:74:ac:27:
b8:b9:11:e6:d6:83:74:19:69:33:c5:dc:30:1d:3d:
a9:bf:bd:1a:66:89:e6:6e:26:8b:76:c3:3e:69:fc:
93:df:ac:be:06:c6:88:69:ce:21:fb:c9:e5:77:02:
9b:0e:66:47:e1:c4:15:c5:cd:f4:59:46:31:15:98:
69:5b:24:f8:11:bf:5c:63:57:99:b9:57:08:61:83:
65:3e:71:32:e8:e7:70:bc:e1:6a:e2:fe:d3:2e:d0:
72:b3:d8:06:9e:1f:2c:ba:8d:53:81:44:89:7a:f0:
2a:a8:cb:e6:c2:04:cc:8a:f8:09:b7:bb:47:4f:f3:
b7:db:dc:0e:66:43:13:26:d3:29:b1:75:9e:19:d9:
d0:da:7f:db:4d:79:a1:6b:e2:ff:ac:07:9a:2e:11:
e7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F8:93:75:BA:D7:1D:CA:AE:A9:F2:A3:5B:D0:4E:5D:FC:32:7E:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB89480EC38111EF84582B54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.202.0/24
Signature Algorithm: sha256WithRSAEncryption
45:65:7c:8f:b4:6a:3a:c3:f4:7c:11:b8:8b:db:8d:df:4c:fc:
bd:96:0d:2b:76:86:64:d6:a5:82:82:bf:ca:d9:d6:13:4a:4d:
6f:51:8d:91:b4:2c:33:4a:d0:3b:b9:15:6d:c4:60:43:bc:48:
8d:19:3f:bb:7e:3c:d0:bb:90:92:cb:d4:52:b2:3c:32:17:b7:
63:f3:0a:77:31:69:fd:33:4d:9f:74:37:1e:d5:de:a5:82:03:
03:dc:3e:49:0a:03:b7:ed:dd:b9:53:51:ff:a4:31:d7:13:c0:
11:a4:27:be:9f:a6:f6:7b:df:c4:f0:04:32:7a:e2:91:32:ba:
02:0f:4a:82:d7:b1:86:7d:58:4b:54:c7:8f:2b:53:af:8f:6c:
65:02:0e:1e:0b:87:0e:29:2c:43:74:b5:bb:15:5b:4b:b1:fa:
06:74:e4:d9:8b:14:06:d0:07:94:15:95:2a:a8:b7:0a:2e:ee:
f4:e8:2d:26:16:c1:b3:0a:81:26:08:7c:2a:fc:61:de:f9:b7:
95:b3:4e:fe:fe:b6:49:cb:9f:30:5c:e0:32:4b:51:39:62:ee:
b3:fe:e3:f5:51:2c:25:1e:79:b8:66:61:a2:93:55:11:46:6b:
61:d7:b4:04:13:09:2c:67:1a:94:07:4b:61:bd:d0:14:54:86:
81:a3:9b:ad
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASdmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MTIwNjA3WhcNMjcxMjEyMTIwNjA3WjAYMRYw
FAYDVQQDEw02NzZkNDZiMi0xYjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArMNlsg4C408aIS2qslqTjKqLbuQIxepeNmV3BlPfnEi78nmJGpKIllXi
qRQ2xLqKHJ6vo7g+joaoq2nH+SYDOBv3hpOPOusi6mFELPZFF5Izy5zuqDoQXoQV
lna6hGXZuqXI4+l0rCe4uRHm1oN0GWkzxdwwHT2pv70aZonmbiaLdsM+afyT36y+
BsaIac4h+8nldwKbDmZH4cQVxc30WUYxFZhpWyT4Eb9cY1eZuVcIYYNlPnEy6Odw
vOFq4v7TLtBys9gGnh8suo1TgUSJevAqqMvmwgTMivgJt7tHT/O329wOZkMTJtMp
sXWeGdnQ2n/bTXmha+L/rAeaLhHnGwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAz4
k3W61x3Krqnyo1vQTl38Mn7fMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQjg5NDgwRUMzODExMUVGODQ1ODJCNTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml7KMA0GCSqGSIb3DQEB
CwUAA4IBAQBFZXyPtGo6w/R8EbiL243fTPy9lg0rdoZk1qWCgr/K2dYTSk1vUY2R
tCwzStA7uRVtxGBDvEiNGT+7fjzQu5CSy9RSsjwyF7dj8wp3MWn9M02fdDce1d6l
ggMD3D5JCgO37d25U1H/pDHXE8ARpCe+n6b2e9/E8AQyeuKRMroCD0qC17GGfVhL
VMePK1Ovj2xlAg4eC4cOKSxDdLW7FVtLsfoGdOTZixQG0AeUFZUqqLcKLu706C0m
FsGzCoEmCHwq/GHe+beVs07+/rZJy58wXOAyS1E5Yu6z/uP1USwlHnm4ZmGik1UR
Rmth17QEEwksZxqUB0thvdAUVIaBo5ut
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:53 2025 by rpki-client