Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA39AA32C63911EF82662C8F762E951A.roa
File: DA39AA32C63911EF82662C8F762E951A.roa (raw, json)
Hash identifier: b9t1kgvXcuKNeLk4b9LO8DsqAVOmauQQPBkRN1OxnVQ=
Subject key identifier: 31:08:C8:1E:0A:A3:C5:54:A4:DF:48:C2:70:F8:A2:AC:16:68:E9:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01303B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA39AA32C63911EF82662C8F762E951A.roa
Signing time: Sun 29 Dec 2024 23:08:45 +0000
ROA not before: Sun 29 Dec 2024 23:08:41 +0000
ROA not after: Fri 12 Dec 2025 23:08:41 +0000
asID: 984
IP address blocks: 154.218.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77883 (0x1303b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 23:08:41 2024 GMT
Not After : Dec 12 23:08:41 2025 GMT
Subject: CN=6771d67d-143e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:f5:c3:d6:7b:71:16:77:bb:4e:0b:ca:df:
5c:60:e1:13:c7:8a:09:a2:9a:6a:d9:bc:d7:52:e2:
fd:9a:18:20:eb:df:1d:4d:1b:b4:9c:49:35:1b:6f:
76:e0:22:96:81:14:01:cb:c8:58:0d:98:b1:79:96:
e6:47:d5:a3:ef:3f:1a:fc:ae:8b:89:14:67:00:e7:
e5:77:ce:86:1b:37:04:6c:10:ce:76:75:a2:cf:c9:
ce:46:b7:7f:4b:99:70:99:91:22:70:b5:ba:61:1f:
89:a0:51:e1:5a:c8:cd:4a:de:32:09:08:94:e3:7e:
7f:1c:95:f4:30:be:b5:f1:6f:8b:49:0f:8f:50:a7:
e5:4d:57:c3:5e:78:f4:a3:ad:32:99:ef:0b:1e:f6:
44:56:b6:1a:16:f1:e8:9d:e8:90:a5:61:0e:9c:66:
56:72:bd:01:86:b5:0d:96:8f:09:a2:3c:af:02:0f:
ea:36:fe:0e:d1:a3:93:dd:6a:5c:74:3b:a8:17:3d:
64:e5:ac:42:31:52:91:75:de:cf:43:f0:4e:60:08:
18:0b:62:ed:16:72:37:20:3b:3a:2b:81:5b:55:68:
ff:d8:57:ba:79:35:81:0d:43:49:63:de:67:9a:56:
14:e5:92:f5:79:e7:6a:c6:25:19:29:1f:51:2d:03:
4c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:08:C8:1E:0A:A3:C5:54:A4:DF:48:C2:70:F8:A2:AC:16:68:E9:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA39AA32C63911EF82662C8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.10.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:8b:60:61:7f:79:e2:b8:70:94:70:28:d1:ff:11:82:48:21:
af:f9:69:e3:ad:ee:db:3e:3e:b6:e9:b0:21:d1:9c:90:9a:ef:
04:90:56:0f:24:8f:9a:1c:f3:d9:a7:ce:5a:36:8e:d1:ad:f1:
67:97:e0:ca:80:39:2e:c5:d7:db:f8:b2:7a:fd:b9:8a:01:74:
84:83:ad:56:48:1b:37:1d:73:25:f0:35:e9:52:20:07:56:b1:
d6:cb:8b:2b:66:9f:42:9f:88:8c:59:af:0a:fc:08:8e:63:77:
da:50:83:b3:59:d1:ae:ca:d7:f9:31:a2:2a:4b:c9:ec:90:8f:
0e:7b:3b:88:26:0e:75:ee:d8:23:60:f7:04:e6:03:5f:5a:f7:
3d:ea:1c:29:d2:d0:f9:a3:cd:81:98:47:28:f2:80:08:3f:70:
03:a9:78:8d:85:97:27:aa:21:1d:6b:2f:b7:42:d0:ae:2e:32:
97:6a:8a:70:f5:0b:06:57:ec:57:2c:48:42:44:a6:ff:45:61:
53:ba:66:93:cf:4a:1d:79:0a:fe:3b:71:f4:57:0d:cc:b8:09:
d5:43:21:59:43:e6:06:87:8f:75:03:de:a8:20:47:76:94:2f:
32:2a:25:24:ed:40:24:94:42:32:8a:af:01:52:d4:70:3f:02:
d1:99:13:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATA7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MjMwODQxWhcNMjUxMjEyMjMwODQxWjAYMRYw
FAYDVQQDEw02NzcxZDY3ZC0xNDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuxD1w9Z7cRZ3u04Lyt9cYOETx4oJoppq2bzXUuL9mhgg698dTRu0nEk1
G2924CKWgRQBy8hYDZixeZbmR9Wj7z8a/K6LiRRnAOfld86GGzcEbBDOdnWiz8nO
Rrd/S5lwmZEicLW6YR+JoFHhWsjNSt4yCQiU435/HJX0ML618W+LSQ+PUKflTVfD
Xnj0o60yme8LHvZEVrYaFvHoneiQpWEOnGZWcr0BhrUNlo8JojyvAg/qNv4O0aOT
3WpcdDuoFz1k5axCMVKRdd7PQ/BOYAgYC2LtFnI3IDs6K4FbVWj/2Fe6eTWBDUNJ
Y95nmlYU5ZL1eedqxiUZKR9RLQNMGwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDEI
yB4Ko8VUpN9IwnD4oqwWaOm8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQTM5QUEzMkM2MzkxMUVGODI2NjJDOEY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtoKMA0GCSqGSIb3DQEB
CwUAA4IBAQA8i2Bhf3niuHCUcCjR/xGCSCGv+Wnjre7bPj626bAh0ZyQmu8EkFYP
JI+aHPPZp85aNo7RrfFnl+DKgDkuxdfb+LJ6/bmKAXSEg61WSBs3HXMl8DXpUiAH
VrHWy4srZp9Cn4iMWa8K/AiOY3faUIOzWdGuytf5MaIqS8nskI8OezuIJg517tgj
YPcE5gNfWvc96hwp0tD5o82BmEco8oAIP3ADqXiNhZcnqiEday+3QtCuLjKXaopw
9QsGV+xXLEhCRKb/RWFTumaTz0odeQr+O3H0Vw3MuAnVQyFZQ+YGh491A96oIEd2
lC8yKiUk7UAklEIyiq8BUtRwPwLRmRMz
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:45:26 2025 by rpki-client