Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3576B56C1B311EFA9BE9954762E951A.roa
File: F3576B56C1B311EFA9BE9954762E951A.roa (raw, json)
Hash identifier: hHWpKD/wa9HItR61o8CiyP6RPGSEyjTOLNLqMiwKPgg=
Subject key identifier: 36:12:48:F8:CF:9E:A8:64:CB:A2:F6:66:40:F3:59:C5:5D:1A:34:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012197
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3576B56C1B311EFA9BE9954762E951A.roa
Signing time: Tue 24 Dec 2024 05:00:10 +0000
ROA not before: Tue 24 Dec 2024 05:00:06 +0000
ROA not after: Wed 10 Dec 2025 05:00:06 +0000
asID: 984
IP address blocks: 154.193.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74135 (0x12197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 05:00:06 2024 GMT
Not After : Dec 10 05:00:06 2025 GMT
Subject: CN=676a3fda-0461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:70:a4:87:74:dd:24:9b:fd:28:a4:57:9b:bd:
0a:d5:83:13:97:44:dd:b0:dc:a3:2d:72:8a:83:6c:
e3:6a:2c:39:a8:13:c8:b8:f9:a6:5c:7b:4b:74:65:
91:fd:2e:fd:41:5f:84:48:82:7e:0f:ac:54:a7:41:
9f:2d:bd:a0:03:1e:66:8f:88:3a:8c:96:b5:0f:06:
fe:10:84:65:7c:98:c9:e2:24:95:01:4b:2c:05:7d:
2e:0e:45:1b:10:3f:5e:a5:57:73:26:e1:d4:e6:c7:
2a:b3:27:54:f5:72:3a:60:69:15:f6:df:6b:29:25:
cd:f9:46:07:dd:48:b3:0e:83:17:cc:23:ef:b7:69:
3c:79:0c:80:3c:36:fa:f8:60:e7:71:91:d4:c1:28:
80:91:0b:28:e1:e9:a6:12:4d:45:f6:ca:8c:03:f2:
30:0c:e5:36:21:4c:60:e5:db:3f:c3:48:93:07:f4:
88:e9:76:b6:22:c2:ed:30:b0:c0:2e:46:45:04:6a:
ed:d9:1c:b4:f7:a3:29:eb:a7:7d:4e:5c:8b:b5:e6:
67:ca:9d:93:2c:a6:d0:2e:b1:1f:20:c8:55:70:c0:
da:44:55:63:b8:0b:32:be:da:5c:8f:93:9b:87:7b:
ff:14:a4:55:8a:e9:34:90:7e:17:dd:cf:c8:2b:73:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:12:48:F8:CF:9E:A8:64:CB:A2:F6:66:40:F3:59:C5:5D:1A:34:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3576B56C1B311EFA9BE9954762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.133.0/24
Signature Algorithm: sha256WithRSAEncryption
34:fe:15:8b:bb:7e:ac:b3:69:50:82:66:2b:36:a6:62:6f:1b:
7c:e6:09:1b:65:17:6e:48:35:33:07:12:98:95:eb:ba:a2:21:
bf:71:cf:70:af:1c:fc:01:78:38:65:43:ee:83:72:3f:06:05:
68:43:8c:50:c5:1c:e8:08:d8:42:3f:58:52:13:99:4b:1d:e6:
40:90:04:73:3e:05:3e:0f:70:c1:72:e6:a7:b7:6b:60:cb:b7:
5e:4c:ef:da:44:df:4f:3c:2e:d7:48:4e:b9:e6:8a:14:08:70:
44:23:cc:4e:99:14:84:31:1d:ef:5d:78:e7:41:e3:44:9c:19:
33:65:d1:5c:a3:a2:37:ea:c1:b9:ce:0d:c4:f6:14:58:2c:8b:
0e:43:85:29:c9:b2:b0:de:19:49:62:09:da:6c:df:1d:84:a9:
28:1f:37:f7:37:3f:fb:9d:bb:ff:a4:50:07:a9:66:ca:a4:62:
b6:26:a3:02:58:2a:2e:58:5b:31:fa:ea:20:29:c6:d8:b0:2c:
be:8f:80:7f:63:ae:c6:e9:20:f7:03:59:a1:93:0c:d5:18:51:
d4:97:23:37:33:c7:29:02:75:49:fd:f6:2d:c7:ba:d2:33:ed:
b1:f9:eb:46:53:9e:0b:9e:5e:8c:58:e7:63:9d:01:fe:a5:32:
ec:a1:7d:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASGXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDUwMDA2WhcNMjUxMjEwMDUwMDA2WjAYMRYw
FAYDVQQDEw02NzZhM2ZkYS0wNDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1nCkh3TdJJv9KKRXm70K1YMTl0TdsNyjLXKKg2zjaiw5qBPIuPmmXHtL
dGWR/S79QV+ESIJ+D6xUp0GfLb2gAx5mj4g6jJa1Dwb+EIRlfJjJ4iSVAUssBX0u
DkUbED9epVdzJuHU5scqsydU9XI6YGkV9t9rKSXN+UYH3UizDoMXzCPvt2k8eQyA
PDb6+GDncZHUwSiAkQso4emmEk1F9sqMA/IwDOU2IUxg5ds/w0iTB/SI6Xa2IsLt
MLDALkZFBGrt2Ry096Mp66d9TlyLteZnyp2TLKbQLrEfIMhVcMDaRFVjuAsyvtpc
j5Obh3v/FKRViuk0kH4X3c/IK3PdEwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDYS
SPjPnqhky6L2ZkDzWcVdGjRvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMzU3NkI1NkMxQjMxMUVGQTlCRTk5NTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsGFMA0GCSqGSIb3DQEB
CwUAA4IBAQA0/hWLu36ss2lQgmYrNqZibxt85gkbZRduSDUzBxKYleu6oiG/cc9w
rxz8AXg4ZUPug3I/BgVoQ4xQxRzoCNhCP1hSE5lLHeZAkARzPgU+D3DBcuant2tg
y7deTO/aRN9PPC7XSE655ooUCHBEI8xOmRSEMR3vXXjnQeNEnBkzZdFco6I36sG5
zg3E9hRYLIsOQ4UpybKw3hlJYgnabN8dhKkoHzf3Nz/7nbv/pFAHqWbKpGK2JqMC
WCouWFsx+uogKcbYsCy+j4B/Y67G6SD3A1mhkwzVGFHUlyM3M8cpAnVJ/fYtx7rS
M+2x+etGU54Lnl6MWOdjnQH+pTLsoX2Y
-----END CERTIFICATE-----
Generated at Fri Apr 11 18:44:58 2025 by rpki-client