Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC12C8D4C63511EF84229575762E951A.roa
File: CC12C8D4C63511EF84229575762E951A.roa (raw, json)
Hash identifier: QtC/Ghp62cib+ImE5fnsME1R+xMd3YsN7vdsL/McC/g=
Subject key identifier: 8F:1B:B1:B7:17:FC:0E:17:4B:50:B6:B0:22:E1:7E:83:D2:44:BA:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013019
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC12C8D4C63511EF84229575762E951A.roa
Signing time: Sun 29 Dec 2024 22:39:43 +0000
ROA not before: Sun 29 Dec 2024 22:39:39 +0000
ROA not after: Sun 12 Dec 2027 22:39:39 +0000
asID: 17561
IP address blocks: 154.217.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77849 (0x13019)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 22:39:39 2024 GMT
Not After : Dec 12 22:39:39 2027 GMT
Subject: CN=6771cfaf-9325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:02:74:1e:63:ab:b3:5a:f4:f2:f4:38:10:
a3:3b:12:5d:ac:b3:b5:ec:4b:46:65:d8:68:6e:0f:
ad:fe:eb:14:25:cf:0a:c8:ed:0d:bc:8a:f8:f9:1b:
d0:4e:a0:6d:a4:93:df:f1:f0:6f:a7:d8:be:fe:78:
9a:54:10:74:8f:1b:07:c0:01:20:24:ff:b5:46:55:
e3:20:cf:07:47:63:f4:dc:92:90:01:e5:31:f8:96:
37:8a:8b:e4:c0:5d:fc:cd:9e:e3:48:c6:53:0b:b3:
7d:db:dd:a5:41:63:31:02:25:81:3f:92:31:e7:5a:
75:bc:12:47:d1:e0:9c:a7:a3:6a:c2:b6:94:99:0f:
f1:54:ac:1c:41:af:5d:00:2e:2b:3a:d3:12:5a:5f:
50:71:bd:70:60:95:48:1f:d7:bc:07:30:85:b1:de:
e9:62:63:93:42:57:21:47:45:2a:c3:ae:54:eb:11:
cb:ae:27:a1:37:5a:5c:f2:12:e4:2c:0e:2f:70:72:
14:2a:96:7e:af:a4:a0:b8:03:4c:6f:eb:52:38:f3:
0c:ea:3e:3d:96:e0:17:49:9c:74:b3:7e:ed:0b:6e:
a6:8d:31:9a:8b:31:61:65:71:77:c2:ee:d2:9b:0d:
fe:8a:b5:51:92:23:ad:de:1a:70:0a:ec:7b:78:f0:
f4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1B:B1:B7:17:FC:0E:17:4B:50:B6:B0:22:E1:7E:83:D2:44:BA:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC12C8D4C63511EF84229575762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.240.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:1e:e9:96:04:ac:28:45:ef:02:e6:b1:1e:cc:78:95:f0:d0:
95:68:8f:ac:35:74:9c:fe:53:7f:45:ec:49:ce:10:73:81:b3:
3f:60:c0:c7:25:76:d4:1c:84:a0:f3:a1:a8:fc:78:6a:5c:a9:
19:23:d3:f1:4b:6a:96:69:45:e9:ad:78:35:ca:d5:b5:22:46:
c2:5c:95:32:a1:3c:f5:74:0f:5d:f8:1d:ee:5c:e0:c5:2f:cb:
75:99:81:37:c9:1a:57:97:4f:37:9f:57:a7:ac:be:20:2a:84:
37:cb:79:ba:f1:34:fa:87:4a:75:b1:d0:cd:90:e3:8c:e3:e9:
2f:32:f9:26:4a:80:7f:ea:e4:a8:e1:e9:0b:f0:ce:6b:fe:c1:
cf:6e:97:60:c3:82:66:2c:72:b7:9a:51:dc:33:04:d2:d9:6e:
4d:c6:5a:e0:29:19:2b:76:bf:7e:9c:41:7b:74:6f:cb:3b:6b:
74:fd:66:31:bd:a7:da:61:2e:a5:1d:52:2b:42:04:33:ff:3c:
45:99:cc:a8:7d:c3:ba:a8:19:be:20:b5:bc:e4:c6:61:d1:f1:
ec:8e:2d:71:43:82:6a:70:e7:d9:f9:4d:71:0e:ae:f7:30:f6:
0e:c2:48:c1:9e:f9:47:62:5c:8a:f7:f0:67:08:4b:72:a5:8e:
79:e1:ad:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATAZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MjIzOTM5WhcNMjcxMjEyMjIzOTM5WjAYMRYw
FAYDVQQDEw02NzcxY2ZhZi05MzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtcECdB5jq7Na9PL0OBCjOxJdrLO17EtGZdhobg+t/usUJc8KyO0NvIr4
+RvQTqBtpJPf8fBvp9i+/niaVBB0jxsHwAEgJP+1RlXjIM8HR2P03JKQAeUx+JY3
iovkwF38zZ7jSMZTC7N9292lQWMxAiWBP5Ix51p1vBJH0eCcp6NqwraUmQ/xVKwc
Qa9dAC4rOtMSWl9Qcb1wYJVIH9e8BzCFsd7pYmOTQlchR0Uqw65U6xHLriehN1pc
8hLkLA4vcHIUKpZ+r6SguANMb+tSOPMM6j49luAXSZx0s37tC26mjTGaizFhZXF3
wu7Smw3+irVRkiOt3hpwCux7ePD0aQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFI8b
sbcX/A4XS1C2sCLhfoPSRLpyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQzEyQzhENEM2MzUxMUVGODQyMjk1NzU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtnwMA0GCSqGSIb3DQEB
CwUAA4IBAQC8HumWBKwoRe8C5rEezHiV8NCVaI+sNXSc/lN/RexJzhBzgbM/YMDH
JXbUHISg86Go/HhqXKkZI9PxS2qWaUXprXg1ytW1IkbCXJUyoTz1dA9d+B3uXODF
L8t1mYE3yRpXl083n1enrL4gKoQ3y3m68TT6h0p1sdDNkOOM4+kvMvkmSoB/6uSo
4ekL8M5r/sHPbpdgw4JmLHK3mlHcMwTS2W5NxlrgKRkrdr9+nEF7dG/LO2t0/WYx
vafaYS6lHVIrQgQz/zxFmcyofcO6qBm+ILW85MZh0fHsji1xQ4JqcOfZ+U1xDq73
MPYOwkjBnvlHYlyK9/BnCEtypY554a00
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:44 2025 by rpki-client