Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF30F9C6C26711EFB77DB655762E951A.roa
File: DF30F9C6C26711EFB77DB655762E951A.roa (raw, json)
Hash identifier: kLz8k8ZiM6V20yX06FPoqJK9UZHCRj3JF2GUsvb2yEY=
Subject key identifier: AA:A6:77:13:FA:21:5A:2C:C4:98:4F:86:90:84:6F:FB:FC:7F:B9:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0123FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF30F9C6C26711EFB77DB655762E951A.roa
Signing time: Wed 25 Dec 2024 02:28:05 +0000
ROA not before: Wed 25 Dec 2024 02:28:02 +0000
ROA not after: Wed 10 Dec 2025 02:28:02 +0000
asID: 984
IP address blocks: 154.211.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74750 (0x123fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:28:02 2024 GMT
Not After : Dec 10 02:28:02 2025 GMT
Subject: CN=676b6db5-d4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:41:e3:35:d0:02:a9:ab:7e:cf:90:fc:f6:
72:53:60:f2:25:f8:73:80:4a:69:be:f6:e4:6d:e5:
95:6d:cc:ea:ad:4d:81:72:16:3a:2e:a1:bb:33:18:
f0:21:48:91:29:47:ca:2f:1b:1b:67:8a:84:62:44:
09:02:ba:a3:16:e5:1c:c5:cb:ee:7e:ad:58:98:4a:
93:31:48:bb:70:3d:25:9f:1d:f9:80:22:70:7e:71:
d3:33:0e:43:f5:b0:ad:20:f4:e9:fe:b2:a4:d8:30:
74:22:0b:ef:4a:a8:80:ca:97:36:c1:0c:0f:8d:90:
e3:83:7f:72:bc:3a:3f:5a:09:a7:15:d4:1c:21:26:
fb:0c:6c:1e:c5:db:c9:6c:4b:0e:a8:7c:76:c1:3a:
f8:d5:60:8e:0d:23:e3:77:ec:ee:6c:a9:1a:9c:e6:
06:2d:9b:78:45:b2:be:f0:db:60:f6:b7:cc:f1:aa:
7c:01:e0:62:05:14:46:b8:16:99:f5:23:f7:32:38:
94:a4:5d:6e:c3:02:cc:1c:89:1a:9e:1a:ad:9f:41:
cf:85:fc:5d:65:9b:5e:79:d6:51:54:ff:9f:51:7c:
3d:a2:b0:0a:ec:b6:08:a6:33:fb:90:ae:0f:99:af:
bb:6f:95:36:7b:85:4b:62:30:37:15:8b:f6:b4:f4:
40:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A6:77:13:FA:21:5A:2C:C4:98:4F:86:90:84:6F:FB:FC:7F:B9:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF30F9C6C26711EFB77DB655762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:c4:1f:53:30:43:27:75:c7:40:97:bf:a6:d0:d8:d5:77:9f:
34:86:cf:bb:95:1b:e0:0f:be:c3:7b:aa:96:4e:10:fa:5b:96:
2f:11:56:72:97:3c:94:b3:90:51:66:91:f2:3c:3c:03:05:57:
30:42:f2:d7:9f:a7:c3:34:e7:0d:09:bd:48:aa:3c:c5:84:ea:
25:d8:4e:40:f0:85:cc:97:ed:2c:67:f4:f3:58:76:45:48:89:
8f:a0:ea:67:91:6e:32:5d:cd:a5:23:f9:bf:13:89:16:92:c9:
25:f0:75:7c:6e:8c:c3:e1:d3:df:7f:5a:7f:a3:87:90:b9:3a:
99:6e:20:36:5d:b9:95:32:5c:d5:ab:c5:94:7d:34:fe:f7:31:
6d:f7:17:91:77:ba:72:99:d1:2c:d9:92:41:6c:cb:7c:47:e6:
0c:4d:c1:24:33:ee:4a:fd:53:30:a8:d3:d7:11:68:51:09:59:
2a:b6:3b:5f:97:ed:19:75:ae:f8:b2:8b:8a:72:ab:1c:d5:d6:
96:30:19:75:0a:16:2f:33:56:98:34:59:77:ec:2d:0c:a2:80:
65:c5:b9:06:17:f7:dc:e4:c0:84:32:72:b1:2a:cb:29:35:f1:
7b:1e:00:89:ee:77:08:d8:da:14:64:f7:a4:a2:5c:a1:39:e0:
6c:4d:49:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASP+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDIyODAyWhcNMjUxMjEwMDIyODAyWjAYMRYw
FAYDVQQDEw02NzZiNmRiNS1kNGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvqtB4zXQAqmrfs+Q/PZyU2DyJfhzgEppvvbkbeWVbczqrU2BchY6LqG7
MxjwIUiRKUfKLxsbZ4qEYkQJArqjFuUcxcvufq1YmEqTMUi7cD0lnx35gCJwfnHT
Mw5D9bCtIPTp/rKk2DB0IgvvSqiAypc2wQwPjZDjg39yvDo/WgmnFdQcISb7DGwe
xdvJbEsOqHx2wTr41WCODSPjd+zubKkanOYGLZt4RbK+8Ntg9rfM8ap8AeBiBRRG
uBaZ9SP3MjiUpF1uwwLMHIkanhqtn0HPhfxdZZteedZRVP+fUXw9orAK7LYIpjP7
kK4Pma+7b5U2e4VLYjA3FYv2tPRAHQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKqm
dxP6IVosxJhPhpCEb/v8f7k3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERjMwRjlDNkMyNjcxMUVGQjc3REI2NTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtOBMA0GCSqGSIb3DQEB
CwUAA4IBAQChxB9TMEMndcdAl7+m0NjVd580hs+7lRvgD77De6qWThD6W5YvEVZy
lzyUs5BRZpHyPDwDBVcwQvLXn6fDNOcNCb1IqjzFhOol2E5A8IXMl+0sZ/TzWHZF
SImPoOpnkW4yXc2lI/m/E4kWkskl8HV8bozD4dPff1p/o4eQuTqZbiA2XbmVMlzV
q8WUfTT+9zFt9xeRd7pymdEs2ZJBbMt8R+YMTcEkM+5K/VMwqNPXEWhRCVkqtjtf
l+0Zda74souKcqsc1daWMBl1ChYvM1aYNFl37C0MooBlxbkGF/fc5MCEMnKxKssp
NfF7HgCJ7ncI2NoUZPekolyhOeBsTUmy
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:55 2025 by rpki-client