Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC84F370C5EB11EFBB2DDAA7762E951A.roa
File: EC84F370C5EB11EFBB2DDAA7762E951A.roa (raw, json)
Hash identifier: +4XkO6Q6e6JkG7PQuWI5Vo2nhu53j5crqQ2Xaa0L8Uo=
Subject key identifier: DB:9C:F1:75:CC:1B:2B:04:0B:D1:CC:FD:50:A4:27:9E:57:26:2C:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DAC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC84F370C5EB11EFBB2DDAA7762E951A.roa
Signing time: Sun 29 Dec 2024 13:50:55 +0000
ROA not before: Sun 29 Dec 2024 13:50:51 +0000
ROA not after: Sun 12 Dec 2027 13:50:51 +0000
asID: 17561
IP address blocks: 154.211.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77228 (0x12dac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 13:50:51 2024 GMT
Not After : Dec 12 13:50:51 2027 GMT
Subject: CN=677153bf-8de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:1f:5e:d6:3f:32:fb:7c:95:dc:71:52:5f:
11:31:e5:6f:df:f1:d6:96:19:52:99:ce:4a:bc:7e:
33:2b:f3:18:2e:89:39:1a:e2:63:4b:a7:9a:dd:da:
80:91:76:39:c1:31:5d:23:8c:fa:f0:a6:d8:bd:ca:
53:ab:69:47:89:ee:70:c0:a5:76:f3:35:17:c0:41:
f0:f8:43:0e:7b:1e:23:88:e8:80:ad:a3:67:ec:bb:
31:54:8d:d9:e5:aa:3f:40:bd:13:42:3c:34:83:04:
b1:26:38:c9:12:9c:df:24:03:33:c8:58:f1:45:54:
64:27:44:5b:49:34:c6:e8:b2:cb:90:70:65:63:a4:
2c:2a:46:9c:3e:a3:c7:a8:5f:8f:f8:09:39:c8:9d:
f6:cf:eb:9a:d6:7b:6f:74:1f:ca:c6:f8:68:36:ac:
f2:17:e4:64:69:df:64:92:fc:e8:15:92:7e:43:bf:
fe:93:31:68:65:31:c2:ee:b0:17:3e:2e:72:9d:5e:
5a:ae:f2:ec:9f:47:76:35:44:bf:f3:ed:2b:6f:13:
fb:85:6b:4c:cb:c1:0f:d7:57:86:d3:ee:c8:81:aa:
1a:42:0e:db:e0:46:fe:6b:04:a8:27:b8:e7:2a:a3:
4f:9a:0e:a8:a5:b5:78:65:3b:6a:ec:fb:34:5d:f3:
98:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9C:F1:75:CC:1B:2B:04:0B:D1:CC:FD:50:A4:27:9E:57:26:2C:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC84F370C5EB11EFBB2DDAA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.29.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:8e:9d:19:ec:dc:2d:21:19:63:3f:55:ce:e9:2b:90:94:cd:
62:59:72:d2:05:f8:c4:94:ef:49:cd:f9:ec:21:27:4a:86:fc:
4d:19:20:50:88:5c:b6:44:4e:4c:8b:d7:2f:b0:3e:ef:e4:80:
ce:81:1b:8a:ed:19:be:a1:c5:59:21:0e:f9:98:07:3c:34:5b:
ff:b1:bc:24:02:9e:97:5a:c1:02:5b:a6:b4:b4:bf:1d:e4:2a:
ad:58:fd:67:80:a4:6b:f4:8d:5a:07:1f:df:61:3a:e7:9b:bd:
33:e6:74:72:73:57:d0:8c:ca:1e:39:7f:ee:33:b7:76:f6:13:
37:55:83:2b:59:55:32:d4:f5:82:fb:ce:01:ae:d2:78:af:c3:
6a:57:e4:cf:d0:14:99:3c:29:a0:23:f3:e5:d1:4b:b8:81:a4:
5b:e4:31:45:ad:a2:85:c5:82:e8:82:96:40:0f:fa:3d:ad:a3:
eb:64:a8:55:fe:87:fc:c4:78:77:c4:50:ec:75:23:20:69:1d:
7a:d3:c6:10:ab:67:88:b9:f4:b9:4a:c0:2c:14:2a:37:a4:52:
59:c2:52:5d:ef:78:51:50:9d:30:3d:55:7c:69:90:5d:6f:f2:
e1:54:bb:20:1e:6a:58:75:a4:44:16:20:be:94:c7:04:0f:74:
c9:5b:2c:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS2sMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTM1MDUxWhcNMjcxMjEyMTM1MDUxWjAYMRYw
FAYDVQQDEw02NzcxNTNiZi04ZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwYwfXtY/Mvt8ldxxUl8RMeVv3/HWlhlSmc5KvH4zK/MYLok5GuJjS6ea
3dqAkXY5wTFdI4z68KbYvcpTq2lHie5wwKV28zUXwEHw+EMOex4jiOiAraNn7Lsx
VI3Z5ao/QL0TQjw0gwSxJjjJEpzfJAMzyFjxRVRkJ0RbSTTG6LLLkHBlY6QsKkac
PqPHqF+P+Ak5yJ32z+ua1ntvdB/KxvhoNqzyF+Rkad9kkvzoFZJ+Q7/+kzFoZTHC
7rAXPi5ynV5arvLsn0d2NUS/8+0rbxP7hWtMy8EP11eG0+7IgaoaQg7b4Eb+awSo
J7jnKqNPmg6opbV4ZTtq7Ps0XfOYjwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNuc
8XXMGysEC9HM/VCkJ55XJiyLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQzg0RjM3MEM1RUIxMUVGQkIyRERBQTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtMdMA0GCSqGSIb3DQEB
CwUAA4IBAQDQjp0Z7NwtIRljP1XO6SuQlM1iWXLSBfjElO9JzfnsISdKhvxNGSBQ
iFy2RE5Mi9cvsD7v5IDOgRuK7Rm+ocVZIQ75mAc8NFv/sbwkAp6XWsECW6a0tL8d
5CqtWP1ngKRr9I1aBx/fYTrnm70z5nRyc1fQjMoeOX/uM7d29hM3VYMrWVUy1PWC
+84BrtJ4r8NqV+TP0BSZPCmgI/Pl0Uu4gaRb5DFFraKFxYLogpZAD/o9raPrZKhV
/of8xHh3xFDsdSMgaR1608YQq2eIufS5SsAsFCo3pFJZwlJd73hRUJ0wPVV8aZBd
b/LhVLsgHmpYdaREFiC+lMcED3TJWywB
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:52:57 2025 by rpki-client