Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D946093CC52011EF8D493C9F762E951A.roa
File: D946093CC52011EF8D493C9F762E951A.roa (raw, json)
Hash identifier: Uw6fEyCLPkFNfcygdmBHCkQIHToM4AUKXmxrv+sN65c=
Subject key identifier: 8B:EB:9B:58:12:CB:86:19:E0:19:BD:3D:83:18:33:D3:B9:48:54:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B55
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D946093CC52011EF8D493C9F762E951A.roa
Signing time: Sat 28 Dec 2024 13:37:15 +0000
ROA not before: Sat 28 Dec 2024 13:37:11 +0000
ROA not after: Fri 12 Dec 2025 13:37:11 +0000
asID: 984
IP address blocks: 154.203.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76629 (0x12b55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 13:37:11 2024 GMT
Not After : Dec 12 13:37:11 2025 GMT
Subject: CN=676fff0b-5d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0d:e6:b5:12:42:58:b7:01:05:51:f4:d8:73:
d3:a5:95:ea:42:7a:43:28:75:73:f6:22:de:03:02:
a1:fd:a0:29:42:00:81:75:68:b7:ef:ec:fb:7a:ed:
3b:ba:36:2d:ab:3a:97:9a:6a:4e:d9:99:bf:07:2e:
e6:78:c6:ed:68:f7:20:df:ce:c8:66:3b:68:63:8c:
f8:3d:15:ef:42:a5:ce:4b:84:e0:94:5b:e6:83:c5:
ae:5f:df:89:1f:c0:de:ad:ea:69:57:7f:61:4e:33:
94:68:1d:05:d0:ca:23:95:3b:03:21:b9:3a:1d:c9:
d6:d7:2e:70:37:f6:5e:e1:2c:29:00:fe:0a:37:41:
93:1d:a8:8b:f6:c7:38:60:02:88:5d:d7:0b:ca:ce:
e9:b7:43:d4:4e:47:a2:3d:37:f6:ec:ec:de:4f:15:
58:f4:1d:8c:ec:e3:e7:3c:19:7e:19:26:79:43:8e:
cf:a0:6d:41:12:39:bf:c2:96:23:01:cf:86:2e:b8:
90:a3:a0:4c:7c:05:e4:79:ee:34:ea:2a:03:d1:4f:
99:32:9a:f3:f5:10:97:85:bb:91:de:f8:cd:ff:ff:
b5:fc:ef:df:d2:40:62:dd:aa:67:27:53:af:61:01:
2a:52:75:34:6c:6c:62:32:57:f8:fc:e5:0a:64:c5:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EB:9B:58:12:CB:86:19:E0:19:BD:3D:83:18:33:D3:B9:48:54:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D946093CC52011EF8D493C9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.192.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:55:b1:81:7b:a3:90:45:ab:d0:4d:6f:0f:9b:d3:c9:90:b8:
41:52:53:c5:5b:6b:20:33:43:09:ca:94:aa:19:c9:fe:3b:b0:
e7:f9:49:86:9a:15:d8:59:25:1b:a1:f5:63:e9:fc:fc:47:1c:
d7:1c:0d:94:91:bb:b0:a2:ec:04:85:96:79:24:13:95:51:ed:
aa:e9:f0:7a:cf:7e:6f:a6:d4:aa:04:2d:44:c4:dc:5d:1d:af:
42:bf:44:ab:5a:35:ea:c0:bc:42:02:84:7d:fe:40:44:79:d3:
d0:0a:f6:66:8f:0e:8a:44:ec:9c:be:94:5f:ab:7f:9c:39:57:
bc:e1:01:bb:33:05:60:88:63:9e:09:ca:5f:9e:dd:7b:f6:73:
c2:21:cd:4b:30:95:04:de:a8:bd:b5:fa:b5:8a:c2:ca:d5:03:
fd:ef:40:ff:3a:f4:13:18:18:53:72:80:66:1d:65:14:8b:c5:
44:6e:7c:a0:c3:34:8d:ef:1f:37:df:69:08:25:1d:08:5f:c3:
d8:65:bd:43:2d:73:3a:93:96:fa:5b:70:1f:94:41:5b:40:66:
f4:71:20:a5:44:48:09:7a:60:4e:1d:1b:83:cd:31:ef:cb:dc:
95:b2:e4:50:b1:c5:3e:f1:c8:10:75:fa:d8:82:98:1b:6b:af:
df:87:05:79
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAStVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTMzNzExWhcNMjUxMjEyMTMzNzExWjAYMRYw
FAYDVQQDEw02NzZmZmYwYi01ZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxA3mtRJCWLcBBVH02HPTpZXqQnpDKHVz9iLeAwKh/aApQgCBdWi37+z7
eu07ujYtqzqXmmpO2Zm/By7meMbtaPcg387IZjtoY4z4PRXvQqXOS4TglFvmg8Wu
X9+JH8DereppV39hTjOUaB0F0MojlTsDIbk6HcnW1y5wN/Ze4SwpAP4KN0GTHaiL
9sc4YAKIXdcLys7pt0PUTkeiPTf27OzeTxVY9B2M7OPnPBl+GSZ5Q47PoG1BEjm/
wpYjAc+GLriQo6BMfAXkee406ioD0U+ZMprz9RCXhbuR3vjN//+1/O/f0kBi3apn
J1OvYQEqUnU0bGxiMlf4/OUKZMULmQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIvr
m1gSy4YZ4Bm9PYMYM9O5SFQKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EOTQ2MDkzQ0M1MjAxMUVGOEQ0OTNDOUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsvAMA0GCSqGSIb3DQEB
CwUAA4IBAQDUVbGBe6OQRavQTW8Pm9PJkLhBUlPFW2sgM0MJypSqGcn+O7Dn+UmG
mhXYWSUbofVj6fz8RxzXHA2UkbuwouwEhZZ5JBOVUe2q6fB6z35vptSqBC1ExNxd
Ha9Cv0SrWjXqwLxCAoR9/kBEedPQCvZmjw6KROycvpRfq3+cOVe84QG7MwVgiGOe
Ccpfnt179nPCIc1LMJUE3qi9tfq1isLK1QP970D/OvQTGBhTcoBmHWUUi8VEbnyg
wzSN7x8332kIJR0IX8PYZb1DLXM6k5b6W3AflEFbQGb0cSClREgJemBOHRuDzTHv
y9yVsuRQscU+8cgQdfrYgpgba6/fhwV5
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:49 2025 by rpki-client