Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0AD769CC63211EF80597D64762E951A.roa
File: F0AD769CC63211EF80597D64762E951A.roa (raw, json)
Hash identifier: 66wZS3yPdxuKIKXm2NQIczex9jWk5IXA17oYlAVbrdc=
Subject key identifier: DB:EE:E9:08:D9:AD:7C:F1:F2:6D:CE:60:4E:F0:51:8B:62:0B:53:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013002
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0AD769CC63211EF80597D64762E951A.roa
Signing time: Sun 29 Dec 2024 22:19:16 +0000
ROA not before: Sun 29 Dec 2024 22:19:12 +0000
ROA not after: Sun 12 Dec 2027 22:19:12 +0000
asID: 17561
IP address blocks: 154.217.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77826 (0x13002)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 22:19:12 2024 GMT
Not After : Dec 12 22:19:12 2027 GMT
Subject: CN=6771cae4-6342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e9:a8:05:a1:df:cb:39:2f:f2:8c:5e:73:13:
bf:32:fb:3d:fa:b1:ba:fd:17:fb:88:d4:39:82:d7:
88:81:86:67:90:7d:8e:70:29:9e:9e:04:58:6f:01:
4f:9d:51:af:e9:7d:2a:18:2b:6e:94:30:c6:62:bc:
c6:a7:96:44:fe:44:79:32:87:a4:03:17:31:08:61:
72:fe:e0:22:6a:ff:49:1b:1a:fe:ab:6c:ab:cf:79:
d0:b0:d1:11:b5:4c:b9:fe:01:97:47:f4:58:0d:5e:
b3:56:6f:b4:61:f6:a1:67:05:35:ce:30:fc:50:b1:
f8:0c:2f:6e:44:89:ad:53:d7:2b:fe:2a:41:ce:f5:
b3:53:29:56:89:91:35:4d:42:82:34:bb:a0:b1:50:
d7:ab:37:d2:ad:3c:a2:a7:30:9c:88:58:e1:c8:4b:
0a:57:7d:d9:18:5c:ef:6c:3c:16:bc:13:d9:35:bc:
b2:05:f4:7d:fa:2c:c9:2d:01:d1:b4:29:71:42:b6:
8e:af:77:32:ac:d0:35:61:76:6a:ad:d1:22:40:64:
9b:8d:b8:b4:a9:32:f7:7f:ff:dd:46:26:78:f5:91:
26:ba:0e:06:13:14:e6:2a:60:32:ca:81:5c:3f:93:
8e:94:3d:88:f4:bf:1a:09:42:99:e0:66:f5:35:7f:
e9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EE:E9:08:D9:AD:7C:F1:F2:6D:CE:60:4E:F0:51:8B:62:0B:53:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0AD769CC63211EF80597D64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.228.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ac:83:22:b0:8b:c1:08:9a:b6:02:d1:04:c7:28:8f:c7:99:
c2:c9:12:33:10:20:69:5c:a7:a6:bd:7b:c5:d3:7b:29:84:10:
aa:9a:8d:03:ba:4c:c7:a2:6a:96:54:88:aa:a1:14:4e:53:f4:
bc:67:5e:16:e3:0a:cc:a9:b4:1e:74:d9:ec:e0:ac:bf:8d:67:
73:a9:31:3d:33:37:f7:fa:93:26:3d:3c:af:b4:40:9a:70:e4:
3b:db:89:98:17:1a:10:71:7e:6e:bf:75:3e:10:31:1b:85:5d:
81:fa:de:56:ba:f2:b0:8a:8f:cc:1f:e5:7c:63:58:4b:50:70:
e4:ad:82:2c:1e:42:46:6e:8c:fc:37:77:f6:da:20:25:89:d5:
d7:8f:ec:d8:15:c4:de:79:cb:fa:f7:4b:cf:ba:a3:12:a5:11:
94:17:4e:d4:b3:1e:91:4c:53:1a:5e:47:63:78:56:11:f0:a0:
fc:99:53:aa:94:77:ad:c4:dd:5c:38:53:e1:80:3f:65:6f:b4:
1e:a9:1d:50:a2:28:01:4f:84:5d:e9:aa:8f:f6:31:d5:40:83:
0f:c2:39:47:9a:05:a6:aa:92:d3:4f:09:1e:00:6d:e0:cc:4e:
7a:26:7d:33:3a:5f:f8:f9:76:9b:10:5c:11:ba:1e:86:8d:56:
a7:32:3c:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATACMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MjIxOTEyWhcNMjcxMjEyMjIxOTEyWjAYMRYw
FAYDVQQDEw02NzcxY2FlNC02MzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5OmoBaHfyzkv8oxecxO/Mvs9+rG6/Rf7iNQ5gteIgYZnkH2OcCmengRY
bwFPnVGv6X0qGCtulDDGYrzGp5ZE/kR5MoekAxcxCGFy/uAiav9JGxr+q2yrz3nQ
sNERtUy5/gGXR/RYDV6zVm+0YfahZwU1zjD8ULH4DC9uRImtU9cr/ipBzvWzUylW
iZE1TUKCNLugsVDXqzfSrTyipzCciFjhyEsKV33ZGFzvbDwWvBPZNbyyBfR9+izJ
LQHRtClxQraOr3cyrNA1YXZqrdEiQGSbjbi0qTL3f//dRiZ49ZEmug4GExTmKmAy
yoFcP5OOlD2I9L8aCUKZ4Gb1NX/pSQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNvu
6QjZrXzx8m3OYE7wUYtiC1OnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMEFENzY5Q0M2MzIxMUVGODA1OTdENjQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtnkMA0GCSqGSIb3DQEB
CwUAA4IBAQCHrIMisIvBCJq2AtEExyiPx5nCyRIzECBpXKemvXvF03sphBCqmo0D
ukzHomqWVIiqoRROU/S8Z14W4wrMqbQedNns4Ky/jWdzqTE9Mzf3+pMmPTyvtECa
cOQ724mYFxoQcX5uv3U+EDEbhV2B+t5WuvKwio/MH+V8Y1hLUHDkrYIsHkJGboz8
N3f22iAlidXXj+zYFcTeecv690vPuqMSpRGUF07Usx6RTFMaXkdjeFYR8KD8mVOq
lHetxN1cOFPhgD9lb7QeqR1QoigBT4Rd6aqP9jHVQIMPwjlHmgWmqpLTTwkeAG3g
zE56Jn0zOl/4+XabEFwRuh6GjVanMjz0
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:53 2025 by rpki-client