Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED8510CEC62D11EFB4445446762E951A.roa
File: ED8510CEC62D11EFB4445446762E951A.roa (raw, json)
Hash identifier: GD06FHO1CwTgmMG/A2kukxQCTdXD8FgHSLwSmTT4Ijk=
Subject key identifier: 58:43:25:90:11:01:F9:85:49:EB:CD:7E:B6:D8:F9:A7:E4:3F:0F:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012FD8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED8510CEC62D11EFB4445446762E951A.roa
Signing time: Sun 29 Dec 2024 21:43:23 +0000
ROA not before: Sun 29 Dec 2024 21:43:19 +0000
ROA not after: Sun 12 Dec 2027 21:43:19 +0000
asID: 17561
IP address blocks: 154.217.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77784 (0x12fd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 21:43:19 2024 GMT
Not After : Dec 12 21:43:19 2027 GMT
Subject: CN=6771c27b-9c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:50:7c:f8:bf:ba:2a:a1:52:b4:c3:88:e7:d6:
23:bc:50:c6:d8:c1:e3:16:18:12:64:d9:25:fe:72:
63:fb:c1:37:3e:b6:59:a5:00:dd:4c:f1:45:00:97:
bc:f9:ae:85:9d:fd:59:5b:5e:3a:e8:74:83:40:d6:
fe:ed:7c:c2:e5:79:60:92:9e:e7:60:6e:44:53:c7:
5e:54:90:54:46:58:e3:a6:a1:ec:89:bb:79:c5:ba:
6c:22:ca:5c:3f:60:ea:5a:f6:f9:2a:b6:3f:e9:d6:
c7:6f:5d:aa:ce:99:68:10:ce:95:64:63:17:24:6b:
c5:f5:9c:2d:c2:f2:57:cc:b8:cc:98:80:2c:86:ba:
db:47:94:19:6e:be:f7:1e:1f:65:ca:ad:63:95:5f:
ab:1c:ad:e4:2d:a9:eb:2c:10:93:04:5c:8e:44:c3:
a2:8d:2a:f1:e0:60:ba:30:8e:6d:05:63:d1:e3:79:
33:f7:77:e4:9c:f2:46:bb:8b:55:6e:b4:1a:08:f1:
2d:e4:e9:fa:8b:fb:04:56:f4:27:7c:71:96:eb:a0:
e3:1d:fc:e1:a2:9d:bc:c3:f5:5f:d5:15:ee:b2:6e:
59:80:36:b9:c1:42:02:f4:ed:e8:50:9b:99:c6:b2:
50:ed:ab:ae:1a:d9:ca:8c:b4:c0:da:60:99:a0:04:
8e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:43:25:90:11:01:F9:85:49:EB:CD:7E:B6:D8:F9:A7:E4:3F:0F:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED8510CEC62D11EFB4445446762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.207.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:8b:65:e7:9a:04:21:d0:71:77:bd:da:d6:7e:2c:dd:ae:b5:
ba:08:c2:e5:cc:f7:34:8f:3d:0a:4d:45:83:18:2b:47:06:76:
3e:00:0f:f0:06:6b:7f:ce:81:d6:8b:ce:a0:b9:46:96:64:e0:
1a:34:cb:37:2f:a1:b3:24:97:b6:ff:e6:f6:83:30:46:88:04:
a7:9d:4f:2f:07:51:91:b3:df:65:8b:40:a0:ed:08:1f:12:d0:
d2:78:ee:bf:88:d0:41:02:3f:82:cb:8e:a9:98:48:bf:71:2e:
5c:d4:26:6f:fc:5a:3a:5a:c6:a6:ed:e8:b3:1c:6e:35:80:b6:
71:1c:19:8a:bc:77:5a:86:f1:2c:84:9f:68:28:64:8c:5f:f9:
0c:d6:99:4e:e9:fd:a8:13:dd:7e:19:bc:8c:df:1a:03:ba:1e:
94:09:15:a1:eb:6a:1c:12:ba:1e:de:24:60:de:a8:c5:d0:96:
fe:45:a2:5f:73:f1:99:cd:6c:92:7d:c6:90:e7:0d:8b:5d:38:
6d:ee:dd:54:d2:3e:d5:d4:9e:17:a7:c5:f5:f4:74:72:c5:73:
1c:1f:16:3b:b4:91:f1:ec:73:c5:5c:c3:9d:70:f7:8a:28:3c:
45:a6:7e:4a:32:fb:77:6a:69:8e:69:c6:4f:ef:e1:e7:48:ee:
fa:95:cb:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS/YMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MjE0MzE5WhcNMjcxMjEyMjE0MzE5WjAYMRYw
FAYDVQQDEw02NzcxYzI3Yi05YzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzFB8+L+6KqFStMOI59YjvFDG2MHjFhgSZNkl/nJj+8E3PrZZpQDdTPFF
AJe8+a6Fnf1ZW1466HSDQNb+7XzC5Xlgkp7nYG5EU8deVJBURljjpqHsibt5xbps
IspcP2DqWvb5KrY/6dbHb12qzploEM6VZGMXJGvF9ZwtwvJXzLjMmIAshrrbR5QZ
br73Hh9lyq1jlV+rHK3kLanrLBCTBFyORMOijSrx4GC6MI5tBWPR43kz93fknPJG
u4tVbrQaCPEt5On6i/sEVvQnfHGW66DjHfzhop28w/Vf1RXusm5ZgDa5wUIC9O3o
UJuZxrJQ7auuGtnKjLTA2mCZoASOuwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFhD
JZARAfmFSevNfrbY+afkPw/pMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRDg1MTBDRUM2MkQxMUVGQjQ0NDU0NDY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtnPMA0GCSqGSIb3DQEB
CwUAA4IBAQDTi2XnmgQh0HF3vdrWfizdrrW6CMLlzPc0jz0KTUWDGCtHBnY+AA/w
Bmt/zoHWi86guUaWZOAaNMs3L6GzJJe2/+b2gzBGiASnnU8vB1GRs99li0Cg7Qgf
EtDSeO6/iNBBAj+Cy46pmEi/cS5c1CZv/Fo6Wsam7eizHG41gLZxHBmKvHdahvEs
hJ9oKGSMX/kM1plO6f2oE91+GbyM3xoDuh6UCRWh62ocEroe3iRg3qjF0Jb+RaJf
c/GZzWySfcaQ5w2LXTht7t1U0j7V1J4Xp8X19HRyxXMcHxY7tJHx7HPFXMOdcPeK
KDxFpn5KMvt3ammOacZP7+HnSO76lcuG
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:45 2025 by rpki-client