Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9808E74C1A411EF86C55371762E951A.roa
File: D9808E74C1A411EF86C55371762E951A.roa (raw, json)
Hash identifier: YkR/sW2PKtVokec4cWsGLuL8R9815JQcrtCTzygQstE=
Subject key identifier: 03:BD:EC:4E:EB:75:22:5E:00:7A:92:22:D4:32:CA:8C:B4:17:B9:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9808E74C1A411EF86C55371762E951A.roa
Signing time: Tue 24 Dec 2024 03:12:04 +0000
ROA not before: Tue 24 Dec 2024 03:12:00 +0000
ROA not after: Wed 10 Dec 2025 03:12:00 +0000
asID: 984
IP address blocks: 154.92.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73953 (0x120e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 03:12:00 2024 GMT
Not After : Dec 10 03:12:00 2025 GMT
Subject: CN=676a2684-190d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2c:86:69:71:23:33:5f:cc:58:bb:bb:7d:4f:
e2:e0:51:6c:c3:9f:2b:f6:2c:3f:61:37:e0:d7:51:
bf:a9:71:18:cd:e8:d6:ae:7b:6c:fa:46:5b:b7:cb:
eb:a7:43:51:f1:46:15:fb:0a:66:70:95:f2:01:c7:
81:f7:fa:b7:af:6a:13:ac:ae:d1:7e:d7:3d:9d:a5:
b9:0b:e2:40:17:b4:7c:64:db:1d:ec:58:a5:c5:ab:
74:bd:17:1a:b6:f0:6e:e5:78:24:ce:3d:4f:21:ef:
36:d3:31:ac:56:e0:70:85:50:4d:5f:74:af:31:f1:
b7:3f:ec:30:79:ea:c8:eb:ca:c1:4c:31:68:69:02:
46:c6:78:b1:07:8f:fc:c4:45:70:6d:53:08:01:61:
19:d9:24:1b:b5:d1:9e:62:b0:0d:00:e8:ff:70:ed:
7b:73:48:98:97:fb:4d:79:1b:32:49:f7:e6:37:00:
e0:0a:a5:71:54:56:12:32:90:1e:e1:3c:f5:e3:25:
6f:bf:07:f3:8e:44:9c:69:20:f8:01:b0:19:21:e9:
f3:4f:d4:c9:59:90:01:ed:cb:b8:d6:93:c1:3c:cf:
cf:10:91:5d:00:e8:15:bb:dc:79:f7:2a:d9:07:81:
7f:71:cf:36:24:e2:2f:8b:d2:99:f3:9f:ad:b0:05:
c7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BD:EC:4E:EB:75:22:5E:00:7A:92:22:D4:32:CA:8C:B4:17:B9:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9808E74C1A411EF86C55371762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.152.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f0:d3:dd:a0:90:ab:d4:da:7d:e0:cb:86:8e:22:02:c2:5b:
08:e0:79:1a:30:e3:c1:ed:a6:ba:01:01:0c:51:6d:3f:9e:a4:
43:fe:e0:40:9f:0e:3a:bd:04:7d:b2:8f:dd:58:10:66:70:2a:
af:eb:fd:6d:7c:c0:ad:6e:af:26:8b:b2:0b:15:97:29:f2:52:
b9:7e:b2:82:dc:39:5c:8d:4a:6c:3e:ea:4d:1b:60:72:46:95:
ee:d5:d5:30:57:77:68:3c:d6:c1:b2:ae:01:a2:8d:a7:a9:29:
d6:c9:f9:55:02:ac:97:95:c8:b5:9d:d3:a0:e3:6e:77:04:ce:
ff:05:d4:30:f4:0c:3e:74:3d:42:b7:7d:9a:3a:97:07:80:4b:
ed:b3:64:01:2d:f0:0c:43:3f:23:4d:4f:fc:f2:b5:b5:d9:05:
e1:85:3a:e9:ee:ee:15:81:52:2d:37:4c:f0:de:41:77:22:86:
cd:2d:3c:38:76:42:cc:7a:6c:29:7a:33:a6:4b:15:46:1e:b9:
62:a9:b0:d5:5b:6a:a3:6f:1a:8d:e8:f4:78:af:e6:90:cf:3d:
49:62:e5:15:5d:fc:a3:05:33:3e:40:fb:ae:6a:c8:6a:91:c1:
94:04:86:fb:ec:67:6b:78:0b:27:3f:7b:2e:df:89:01:83:80:
13:f4:a6:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASDhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDMxMjAwWhcNMjUxMjEwMDMxMjAwWjAYMRYw
FAYDVQQDEw02NzZhMjY4NC0xOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6CyGaXEjM1/MWLu7fU/i4FFsw58r9iw/YTfg11G/qXEYzejWrnts+kZb
t8vrp0NR8UYV+wpmcJXyAceB9/q3r2oTrK7Rftc9naW5C+JAF7R8ZNsd7Filxat0
vRcatvBu5Xgkzj1PIe820zGsVuBwhVBNX3SvMfG3P+wweerI68rBTDFoaQJGxnix
B4/8xEVwbVMIAWEZ2SQbtdGeYrANAOj/cO17c0iYl/tNeRsySffmNwDgCqVxVFYS
MpAe4Tz14yVvvwfzjkScaSD4AbAZIenzT9TJWZAB7cu41pPBPM/PEJFdAOgVu9x5
9yrZB4F/cc82JOIvi9KZ85+tsAXH6QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAO9
7E7rdSJeAHqSItQyyoy0F7lgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EOTgwOEU3NEMxQTQxMUVGODZDNTUzNzE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlyYMA0GCSqGSIb3DQEB
CwUAA4IBAQAz8NPdoJCr1Np94MuGjiICwlsI4HkaMOPB7aa6AQEMUW0/nqRD/uBA
nw46vQR9so/dWBBmcCqv6/1tfMCtbq8mi7ILFZcp8lK5frKC3DlcjUpsPupNG2By
RpXu1dUwV3doPNbBsq4Boo2nqSnWyflVAqyXlci1ndOg4253BM7/BdQw9Aw+dD1C
t32aOpcHgEvts2QBLfAMQz8jTU/88rW12QXhhTrp7u4VgVItN0zw3kF3IobNLTw4
dkLMemwpejOmSxVGHrliqbDVW2qjbxqN6PR4r+aQzz1JYuUVXfyjBTM+QPuuashq
kcGUBIb77GdreAsnP3su34kBg4AT9KZt
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:37 2025 by rpki-client