Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBC369BAC1AB11EF9CA6B79E762E951A.roa
File: EBC369BAC1AB11EF9CA6B79E762E951A.roa (raw, json)
Hash identifier: 9qgFhjr8PX8ZUC6CuvcYH21ZICX4Qiw/DBcPsxgqeD4=
Subject key identifier: 0B:A8:39:C1:F8:94:EF:E4:25:79:F8:B4:2B:2E:29:B0:1C:50:D1:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012137
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBC369BAC1AB11EF9CA6B79E762E951A.roa
Signing time: Tue 24 Dec 2024 04:02:41 +0000
ROA not before: Tue 24 Dec 2024 04:02:38 +0000
ROA not after: Wed 10 Dec 2025 04:02:38 +0000
asID: 984
IP address blocks: 154.92.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74039 (0x12137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:02:38 2024 GMT
Not After : Dec 10 04:02:38 2025 GMT
Subject: CN=676a3261-0c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b0:ca:1f:bc:48:90:f8:29:72:20:f8:fb:3b:
f2:a1:46:07:b1:fd:f5:67:01:3c:20:8a:05:e0:8a:
84:69:58:db:f8:c0:6a:4d:3b:4e:5a:27:29:4b:1d:
48:76:b9:5e:b4:50:ac:fe:db:f1:3c:50:f4:44:85:
37:28:c0:92:90:35:af:b5:d5:85:5a:0f:65:2a:1a:
39:82:69:86:b1:1f:8f:9c:20:80:ae:46:2d:c4:b0:
90:e2:9d:c6:0f:21:36:04:76:e2:a2:6c:c5:72:a2:
75:da:7a:2c:46:46:f8:79:a5:60:ac:5c:17:9d:d7:
ab:bf:3b:39:7d:ab:38:93:91:4b:90:5b:3a:ce:c8:
2b:71:59:0e:81:d4:74:84:d2:dd:02:13:6d:a6:b0:
e3:e4:c9:2f:bf:b8:1b:fb:52:3a:8f:3b:fa:ea:b1:
b5:1c:3b:24:ed:5a:06:d5:0f:04:4d:82:21:61:bb:
70:85:5c:60:cb:7f:21:bb:33:33:68:48:ea:9d:11:
f3:2a:c1:aa:0b:73:55:a2:00:ad:a2:c4:81:a7:2d:
72:c7:27:a9:89:71:c6:fd:73:7b:fb:b2:d7:52:e6:
8d:c7:58:f1:20:4d:fe:ae:29:17:cf:90:8a:12:64:
94:a0:59:ad:bf:92:b3:eb:28:cc:f8:77:14:4a:c1:
0e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A8:39:C1:F8:94:EF:E4:25:79:F8:B4:2B:2E:29:B0:1C:50:D1:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBC369BAC1AB11EF9CA6B79E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.249.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:25:12:cf:0a:5f:82:ee:5a:50:9f:2f:59:6f:9a:cd:fe:96:
72:da:07:4c:e2:73:d4:36:e5:01:75:2d:ce:ca:aa:19:ee:14:
b5:38:56:31:9f:9c:db:c6:6f:ea:67:96:fd:6f:c1:87:eb:5d:
d0:b3:98:a1:3b:17:3c:d6:07:df:53:62:5f:58:10:3f:fe:94:
12:8b:21:e4:2c:33:f5:a3:43:fe:a7:b6:86:5d:30:d7:21:74:
5f:ec:ed:ca:f3:bc:d4:f0:24:51:ed:5c:63:c9:a3:f5:d0:bf:
a4:10:4f:c1:96:4c:41:b0:15:20:85:4f:52:93:be:c6:2e:eb:
29:ee:5f:24:6e:e4:47:3f:1a:d3:5e:a6:ec:28:f3:79:fc:20:
d2:51:c0:7e:9b:da:47:f3:45:b3:3d:57:98:17:b5:c2:93:b8:
8f:b5:0e:3b:0b:e5:d7:2f:6e:cf:7a:03:55:5a:5e:43:8a:14:
d4:0b:fd:a7:4c:f5:90:a7:2b:76:a4:d4:a8:6b:f1:a6:0c:67:
32:57:56:9a:53:11:71:26:39:9e:59:79:5d:fb:05:73:3b:9e:
31:91:73:61:6a:05:8e:17:11:ec:b6:22:62:45:a3:83:35:8f:
90:0a:03:10:17:a9:46:94:6f:60:b1:3b:7f:0d:67:d6:c1:b7:
24:85:45:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASE3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDQwMjM4WhcNMjUxMjEwMDQwMjM4WjAYMRYw
FAYDVQQDEw02NzZhMzI2MS0wYzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7bDKH7xIkPgpciD4+zvyoUYHsf31ZwE8IIoF4IqEaVjb+MBqTTtOWicp
Sx1IdrletFCs/tvxPFD0RIU3KMCSkDWvtdWFWg9lKho5gmmGsR+PnCCArkYtxLCQ
4p3GDyE2BHbiomzFcqJ12nosRkb4eaVgrFwXndervzs5fas4k5FLkFs6zsgrcVkO
gdR0hNLdAhNtprDj5Mkvv7gb+1I6jzv66rG1HDsk7VoG1Q8ETYIhYbtwhVxgy38h
uzMzaEjqnRHzKsGqC3NVogCtosSBpy1yxyepiXHG/XN7+7LXUuaNx1jxIE3+rikX
z5CKEmSUoFmtv5Kz6yjM+HcUSsEO0QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAuo
OcH4lO/kJXn4tCsuKbAcUNFOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQkMzNjlCQUMxQUIxMUVGOUNBNkI3OUU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlz5MA0GCSqGSIb3DQEB
CwUAA4IBAQCmJRLPCl+C7lpQny9Zb5rN/pZy2gdM4nPUNuUBdS3OyqoZ7hS1OFYx
n5zbxm/qZ5b9b8GH613Qs5ihOxc81gffU2JfWBA//pQSiyHkLDP1o0P+p7aGXTDX
IXRf7O3K87zU8CRR7VxjyaP10L+kEE/BlkxBsBUghU9Sk77GLusp7l8kbuRHPxrT
XqbsKPN5/CDSUcB+m9pH80WzPVeYF7XCk7iPtQ47C+XXL27PegNVWl5DihTUC/2n
TPWQpyt2pNSoa/GmDGcyV1aaUxFxJjmeWXld+wVzO54xkXNhagWOFxHstiJiRaOD
NY+QCgMQF6lGlG9gsTt/DWfWwbckhUXh
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:30 2025 by rpki-client