Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3264EF2C1B011EFAE737CBF762E951A.roa
File: F3264EF2C1B011EFAE737CBF762E951A.roa (raw, json)
Hash identifier: P7FMufUA3NWnR75QHlj9vocIE1p8RSXqHsdTIEiZ0Ks=
Subject key identifier: D2:8E:F7:CA:DF:FA:03:95:B5:D8:59:B0:8D:2C:37:0F:76:49:1B:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012173
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3264EF2C1B011EFAE737CBF762E951A.roa
Signing time: Tue 24 Dec 2024 04:38:41 +0000
ROA not before: Tue 24 Dec 2024 04:38:37 +0000
ROA not after: Wed 10 Dec 2025 04:38:37 +0000
asID: 984
IP address blocks: 154.193.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74099 (0x12173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:38:37 2024 GMT
Not After : Dec 10 04:38:37 2025 GMT
Subject: CN=676a3ad1-aaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:46:7e:4c:c4:31:56:8a:a1:ca:3c:8c:1a:
3d:ab:40:89:13:2e:3e:34:bc:2a:5a:df:aa:d5:c0:
92:75:ef:95:57:d5:b2:e5:8a:19:cc:6b:89:9f:13:
d2:d6:67:35:83:ea:8b:fc:16:56:3e:c3:b8:64:b0:
c7:3e:ef:ee:96:94:b8:46:10:9a:1c:22:e8:9b:45:
da:78:7a:26:fa:08:a9:ba:96:ad:f6:94:71:45:91:
dd:14:01:4c:8a:eb:1b:26:70:76:09:be:0f:98:4f:
c3:52:51:11:1d:c9:71:78:0a:fe:1d:14:43:bb:24:
bb:eb:38:2c:32:cb:b7:12:8f:f8:eb:4d:27:7d:84:
f7:b9:88:7d:d5:ef:b1:7e:75:ab:93:e4:fe:ee:7d:
9e:08:c6:02:14:bb:8d:71:f1:8c:af:c2:59:95:bd:
d7:2c:89:5c:97:0c:7d:e5:25:c2:27:61:f1:46:a9:
63:3d:e7:5a:4f:5b:a7:d0:cf:9c:67:62:f5:1a:fa:
48:f2:8d:9c:a9:72:15:d2:4d:17:3d:fe:c4:9e:85:
62:f0:13:63:6e:7e:fb:e6:e2:e5:36:72:d8:61:c4:
d0:eb:91:37:64:fe:b3:92:e7:5d:df:0c:a2:c2:3a:
d9:92:1b:33:ef:8c:8d:0a:1e:e3:d8:7c:7b:54:1e:
0f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8E:F7:CA:DF:FA:03:95:B5:D8:59:B0:8D:2C:37:0F:76:49:1B:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3264EF2C1B011EFAE737CBF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.99.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:28:8e:35:26:c1:ec:46:87:2a:44:d1:2e:33:da:84:55:02:
52:d3:14:84:5f:d6:8a:a5:58:8b:92:ed:f7:38:2f:a7:ec:10:
d1:09:2f:ce:68:db:96:fd:f4:dc:25:79:6a:66:43:dc:b0:3d:
2b:23:2a:a4:64:63:ea:84:72:31:dc:07:9b:4b:6d:85:83:e4:
d0:b2:24:26:bd:56:5f:19:01:67:80:5e:e9:84:a9:5d:2c:44:
5d:70:a8:7e:65:db:23:3c:01:7d:3c:e7:ef:81:00:36:63:37:
fc:06:ba:2d:b1:99:ca:70:0d:b9:c8:88:3e:8d:a8:eb:76:c4:
08:ca:0e:95:9d:9b:78:76:6e:f7:67:e8:f4:1d:cb:c6:ce:d3:
d6:36:af:a8:6d:d0:a0:c9:32:6c:2d:54:bf:69:d1:3a:74:a6:
b3:bb:35:fc:06:6f:b0:ac:90:58:e7:e6:de:03:62:74:2f:7d:
3a:39:98:6b:5d:ca:d0:50:1f:9d:dc:f0:d2:0a:b5:6b:b7:a4:
dd:ee:82:17:a1:f0:2e:03:fe:82:dd:71:81:81:8c:7e:b0:64:
fe:7a:eb:21:b9:c4:fd:3b:2a:cc:6b:25:9e:3f:a2:c1:43:70:
55:40:12:db:58:64:ad:91:27:b7:84:1e:53:88:f3:a9:36:15:
0d:bf:5d:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASFzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDQzODM3WhcNMjUxMjEwMDQzODM3WjAYMRYw
FAYDVQQDEw02NzZhM2FkMS1hYWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtxpGfkzEMVaKoco8jBo9q0CJEy4+NLwqWt+q1cCSde+VV9Wy5YoZzGuJ
nxPS1mc1g+qL/BZWPsO4ZLDHPu/ulpS4RhCaHCLom0XaeHom+gipupat9pRxRZHd
FAFMiusbJnB2Cb4PmE/DUlERHclxeAr+HRRDuyS76zgsMsu3Eo/4600nfYT3uYh9
1e+xfnWrk+T+7n2eCMYCFLuNcfGMr8JZlb3XLIlclwx95SXCJ2HxRqljPedaT1un
0M+cZ2L1GvpI8o2cqXIV0k0XPf7EnoVi8BNjbn775uLlNnLYYcTQ65E3ZP6zkudd
3wyiwjrZkhsz74yNCh7j2Hx7VB4PuwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNKO
98rf+gOVtdhZsI0sNw92SRscMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMzI2NEVGMkMxQjAxMUVGQUU3MzdDQkY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsFjMA0GCSqGSIb3DQEB
CwUAA4IBAQC2KI41JsHsRocqRNEuM9qEVQJS0xSEX9aKpViLku33OC+n7BDRCS/O
aNuW/fTcJXlqZkPcsD0rIyqkZGPqhHIx3AebS22Fg+TQsiQmvVZfGQFngF7phKld
LERdcKh+ZdsjPAF9POfvgQA2Yzf8BrotsZnKcA25yIg+jajrdsQIyg6VnZt4dm73
Z+j0HcvGztPWNq+obdCgyTJsLVS/adE6dKazuzX8Bm+wrJBY5+beA2J0L306OZhr
XcrQUB+d3PDSCrVrt6Td7oIXofAuA/6C3XGBgYx+sGT+eushucT9OyrMayWeP6LB
Q3BVQBLbWGStkSe3hB5TiPOpNhUNv10c
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:39:51 2025 by rpki-client