Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1F9C7EEC54311EF9AA14A7D762E951A.roa
File: E1F9C7EEC54311EF9AA14A7D762E951A.roa (raw, json)
Hash identifier: gsTUs0pgCqkaFZsedXIRnE/u/8Ml2eankTujbSJmaYE=
Subject key identifier: 94:FE:90:BB:C0:01:C5:83:5E:FB:D1:83:F4:2A:60:D3:2C:97:D2:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C97
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1F9C7EEC54311EF9AA14A7D762E951A.roa
Signing time: Sat 28 Dec 2024 17:48:02 +0000
ROA not before: Sat 28 Dec 2024 17:47:58 +0000
ROA not after: Sun 12 Dec 2027 17:47:58 +0000
asID: 17561
IP address blocks: 154.208.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76951 (0x12c97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:47:58 2024 GMT
Not After : Dec 12 17:47:58 2027 GMT
Subject: CN=677039d2-5237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:90:0f:dd:15:bc:c3:35:9c:58:b8:df:2e:
43:ea:56:ad:08:8a:75:18:7d:47:e4:09:ad:f8:ac:
25:c1:91:e0:14:88:ee:77:c4:66:63:f6:6e:59:07:
bf:c2:6a:23:3f:12:af:04:2c:78:89:35:1e:00:ba:
08:af:8b:04:7b:1a:54:de:d1:f4:2f:4d:fe:45:18:
66:66:9f:38:68:d7:3b:c8:0c:00:50:31:03:33:c0:
ed:5e:ef:85:26:89:f2:9c:1f:23:25:db:43:bf:78:
36:c7:c0:3a:4a:b5:da:96:20:f1:09:7b:94:66:3e:
84:c9:68:aa:d3:23:fe:e2:13:54:5a:c0:0d:dc:14:
eb:bd:7a:85:9b:44:fd:60:e1:3c:b7:68:c8:85:a3:
d4:16:16:89:82:42:bf:e5:cb:12:0e:1b:51:c7:70:
55:30:4c:e2:bf:88:2c:0d:c2:cc:21:43:e5:84:16:
46:8a:a2:7f:c1:4d:2c:ab:3d:78:65:f0:62:89:19:
1b:b1:65:65:62:6d:58:84:c6:96:19:ba:52:f0:79:
23:53:3f:a3:f9:46:de:5e:c1:e7:ce:22:41:a6:f1:
d4:2e:9d:30:ed:c8:f0:fa:bd:36:6c:dd:39:0d:62:
9d:55:e9:f4:0b:42:f8:0f:55:fa:d7:31:e5:c7:37:
37:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FE:90:BB:C0:01:C5:83:5E:FB:D1:83:F4:2A:60:D3:2C:97:D2:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1F9C7EEC54311EF9AA14A7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.176.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c7:90:c0:1b:08:dd:45:43:7c:11:4c:c0:b0:d7:60:f1:07:
58:1e:b1:28:e6:ba:ef:96:ae:78:7b:96:dc:0a:15:4b:af:70:
2d:9e:07:7f:0a:43:0e:a1:27:a1:03:90:a2:ed:d7:7a:18:e4:
bb:32:4a:37:08:ed:8d:17:31:1d:02:11:19:9b:68:31:18:3e:
8c:32:39:e0:58:ce:b8:ad:ad:2f:9f:44:4a:ed:6d:ed:f2:86:
81:46:98:0c:51:0e:0c:a4:f9:fe:ee:92:01:d0:f0:0a:df:f5:
e6:03:7c:d8:81:af:08:4b:4a:f1:25:4c:3c:47:7f:29:93:98:
10:db:17:15:ac:84:8d:25:71:88:0a:f7:0a:da:5a:b4:cb:24:
2f:9d:9a:e3:13:a5:93:1d:09:a3:56:09:c0:f9:00:23:9a:dd:
08:a6:31:4a:75:1a:ef:d8:6a:47:48:85:62:48:ad:70:c8:ad:
45:42:27:a8:e0:28:7c:bd:63:d5:c3:c7:90:e5:d0:6d:dc:18:
89:40:59:90:c7:fd:af:fa:0d:fa:cb:22:88:80:86:f3:f6:d9:
24:8c:c0:f4:d0:b6:fa:13:63:dc:de:be:25:9c:a2:30:31:46:
c0:5e:fc:c2:5e:8d:da:b1:a6:6e:0e:75:66:a6:7e:85:a0:ad:
b1:89:04:99
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASyXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTc0NzU4WhcNMjcxMjEyMTc0NzU4WjAYMRYw
FAYDVQQDEw02NzcwMzlkMi01MjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv7KQD90VvMM1nFi43y5D6latCIp1GH1H5Amt+KwlwZHgFIjud8RmY/Zu
WQe/wmojPxKvBCx4iTUeALoIr4sEexpU3tH0L03+RRhmZp84aNc7yAwAUDEDM8Dt
Xu+FJonynB8jJdtDv3g2x8A6SrXaliDxCXuUZj6EyWiq0yP+4hNUWsAN3BTrvXqF
m0T9YOE8t2jIhaPUFhaJgkK/5csSDhtRx3BVMEziv4gsDcLMIUPlhBZGiqJ/wU0s
qz14ZfBiiRkbsWVlYm1YhMaWGbpS8HkjUz+j+UbeXsHnziJBpvHULp0w7cjw+r02
bN05DWKdVen0C0L4D1X61zHlxzc3OwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJT+
kLvAAcWDXvvRg/QqYNMsl9IvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMUY5QzdFRUM1NDMxMUVGOUFBMTRBN0Q3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtCwMA0GCSqGSIb3DQEB
CwUAA4IBAQBUx5DAGwjdRUN8EUzAsNdg8QdYHrEo5rrvlq54e5bcChVLr3Atngd/
CkMOoSehA5Ci7dd6GOS7Mko3CO2NFzEdAhEZm2gxGD6MMjngWM64ra0vn0RK7W3t
8oaBRpgMUQ4MpPn+7pIB0PAK3/XmA3zYga8IS0rxJUw8R38pk5gQ2xcVrISNJXGI
CvcK2lq0yyQvnZrjE6WTHQmjVgnA+QAjmt0IpjFKdRrv2GpHSIViSK1wyK1FQieo
4Ch8vWPVw8eQ5dBt3BiJQFmQx/2v+g36yyKIgIbz9tkkjMD00Lb6E2Pc3r4lnKIw
MUbAXvzCXo3asaZuDnVmpn6FoK2xiQSZ
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:26:11 2025 by rpki-client