Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF414314C3D311EFA2E85F57762E951A.roa
File: CF414314C3D311EFA2E85F57762E951A.roa (raw, json)
Hash identifier: ry4+qsfpe2KLcSCbY3s68xbIks3kk0lUISFEpSQmSUM=
Subject key identifier: 1A:36:6C:F6:D7:30:E9:B2:40:F2:66:55:98:76:39:C9:76:AF:AF:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01285C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF414314C3D311EFA2E85F57762E951A.roa
Signing time: Thu 26 Dec 2024 21:53:15 +0000
ROA not before: Thu 26 Dec 2024 21:53:12 +0000
ROA not after: Fri 12 Dec 2025 21:53:12 +0000
asID: 984
IP address blocks: 154.83.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75868 (0x1285c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 21:53:12 2024 GMT
Not After : Dec 12 21:53:12 2025 GMT
Subject: CN=676dd04b-a5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fe:ce:27:ae:87:fb:fe:28:9a:b9:9e:aa:46:
20:ef:96:d3:65:85:ce:70:f0:aa:6d:88:7c:13:b0:
8e:2d:c9:17:5e:a9:d4:f7:94:ed:0a:dc:bd:b6:0b:
d3:3d:5a:11:b3:1f:24:a2:a3:68:00:e6:a8:f4:72:
6b:36:0c:fe:98:11:c5:f7:d8:c5:e5:37:f5:a3:9a:
97:0e:98:96:47:36:31:2f:4a:02:f0:37:36:7c:18:
20:a6:e0:2f:2f:6b:b1:57:24:8c:b5:3c:09:fd:ff:
2d:a5:56:34:32:03:53:4d:1b:a4:73:fd:32:34:d8:
e9:d4:17:6b:3b:13:d2:15:50:cf:e0:12:4b:c4:05:
8a:50:66:5c:fd:0a:cf:07:73:5a:cc:a7:25:dc:0b:
7d:94:f1:c2:33:6b:70:9c:b2:68:c9:73:12:93:f3:
76:0f:a6:2d:22:8e:39:63:f0:95:e3:84:99:c4:d8:
d2:3b:68:27:c3:3d:f4:00:ed:c4:18:d8:6a:d3:12:
bd:ba:71:68:03:3a:b4:a1:26:2f:46:21:68:e0:bb:
68:15:90:de:98:f8:0e:a1:69:42:78:c4:5d:e4:8b:
9d:25:be:b1:7f:11:11:67:7f:bd:9a:7d:b8:c8:40:
4e:51:84:e6:e8:0e:5b:df:7f:8b:46:07:60:51:7a:
47:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:36:6C:F6:D7:30:E9:B2:40:F2:66:55:98:76:39:C9:76:AF:AF:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF414314C3D311EFA2E85F57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.240.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:ea:e2:45:3a:0f:3f:f0:9b:7e:41:d3:cc:c9:43:73:3a:c7:
da:e4:bf:50:8a:0c:97:73:fb:96:48:8e:1c:db:18:7e:64:dd:
10:b9:33:49:44:ce:7c:5a:57:93:24:78:8d:71:86:46:aa:66:
db:c9:d1:95:9c:00:e9:0c:7b:6d:9c:24:e0:de:28:02:3d:e4:
79:75:fe:13:b3:56:86:a9:ac:19:62:a9:26:80:3e:05:a2:c1:
a9:0e:d9:d2:01:17:9d:1f:d7:f2:6f:59:94:fb:ab:4c:5a:4e:
68:22:ed:a5:0f:7f:2a:9f:eb:fa:6c:ce:b0:fa:03:6d:1c:ca:
ae:2b:2f:42:80:cb:4c:88:d5:27:2f:c8:3c:9c:6d:e4:19:67:
70:3b:5c:00:70:50:57:da:e2:2f:65:34:37:32:6a:eb:a6:bc:
d3:f7:13:04:a7:f8:ff:9d:38:5b:d9:1b:6c:e5:ab:68:48:dd:
f8:b6:de:5f:71:d1:c5:d3:1b:f8:eb:99:65:83:3a:2f:31:7a:
1d:21:74:a7:56:0d:b1:9b:97:d9:47:df:bc:22:56:95:8e:16:
cb:8d:1f:c7:f9:55:32:09:cc:4b:6c:ac:ff:1c:fe:7e:78:15:
9f:a7:41:dc:7d:14:e2:2c:e8:7d:82:0f:f3:8b:10:57:ce:19:
c0:75:20:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAShcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MjE1MzEyWhcNMjUxMjEyMjE1MzEyWjAYMRYw
FAYDVQQDEw02NzZkZDA0Yi1hNWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoP7OJ66H+/4omrmeqkYg75bTZYXOcPCqbYh8E7COLckXXqnU95TtCty9
tgvTPVoRsx8koqNoAOao9HJrNgz+mBHF99jF5Tf1o5qXDpiWRzYxL0oC8Dc2fBgg
puAvL2uxVySMtTwJ/f8tpVY0MgNTTRukc/0yNNjp1BdrOxPSFVDP4BJLxAWKUGZc
/QrPB3NazKcl3At9lPHCM2twnLJoyXMSk/N2D6YtIo45Y/CV44SZxNjSO2gnwz30
AO3EGNhq0xK9unFoAzq0oSYvRiFo4LtoFZDemPgOoWlCeMRd5IudJb6xfxERZ3+9
mn24yEBOUYTm6A5b33+LRgdgUXpH0wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBo2
bPbXMOmyQPJmVZh2Ocl2r6+qMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRjQxNDMxNEMzRDMxMUVGQTJFODVGNTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlPwMA0GCSqGSIb3DQEB
CwUAA4IBAQDR6uJFOg8/8Jt+QdPMyUNzOsfa5L9QigyXc/uWSI4c2xh+ZN0QuTNJ
RM58WleTJHiNcYZGqmbbydGVnADpDHttnCTg3igCPeR5df4Ts1aGqawZYqkmgD4F
osGpDtnSARedH9fyb1mU+6tMWk5oIu2lD38qn+v6bM6w+gNtHMquKy9CgMtMiNUn
L8g8nG3kGWdwO1wAcFBX2uIvZTQ3MmrrprzT9xMEp/j/nThb2Rts5atoSN34tt5f
cdHF0xv465llgzovMXodIXSnVg2xm5fZR9+8IlaVjhbLjR/H+VUyCcxLbKz/HP5+
eBWfp0HcfRTiLOh9gg/zixBXzhnAdSC5
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:52:08 2025 by rpki-client