Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6CFD6BAC35211EF8676C8AC762E951A.roa
File: F6CFD6BAC35211EF8676C8AC762E951A.roa (raw, json)
Hash identifier: TqiMivBjeGc4KkPq9JER86EfRgbY+BSMvrLh/x3HSWU=
Subject key identifier: D9:78:AC:28:D8:3F:1D:3F:B8:AA:F7:A4:FC:89:4B:AB:BE:EC:E7:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0125BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6CFD6BAC35211EF8676C8AC762E951A.roa
Signing time: Thu 26 Dec 2024 06:30:57 +0000
ROA not before: Thu 26 Dec 2024 06:30:53 +0000
ROA not after: Sun 12 Dec 2027 06:30:53 +0000
asID: 17561
IP address blocks: 154.88.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75197 (0x125bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 06:30:53 2024 GMT
Not After : Dec 12 06:30:53 2027 GMT
Subject: CN=676cf821-b344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:be:42:fb:79:15:70:ad:6b:99:81:8c:c5:b7:
4f:ae:09:09:22:d3:71:fa:9d:70:fe:01:01:f3:02:
0b:66:e4:02:2f:0a:f0:87:91:a3:85:e7:bb:80:b3:
b0:90:d1:f3:f1:35:bd:e0:21:97:5d:f1:3d:fb:27:
e6:fa:2d:b5:c3:5e:ca:cc:50:5a:6d:46:f8:06:06:
d6:fe:c4:90:d6:be:83:a5:d6:6f:43:ec:ff:de:3c:
da:a1:17:a1:6f:0e:d5:a3:91:0a:6d:a6:d2:46:51:
0d:25:3c:6e:84:28:bd:c6:29:e6:14:9f:fa:ac:f4:
b9:cf:d6:76:f3:4b:c3:64:39:f0:93:73:d5:f4:8e:
26:0b:d4:79:4c:38:59:69:58:b6:d1:64:24:36:21:
d2:51:7f:6e:de:66:20:8b:c7:1f:39:24:e9:18:b4:
a0:f3:0a:a4:3b:71:35:3c:23:18:e6:6b:71:b8:9d:
a7:6b:65:1c:8c:c4:0e:ba:e1:79:61:b8:80:ff:4d:
89:03:e5:d1:72:c0:bc:34:07:5a:00:9d:f2:6c:38:
5f:8a:b3:01:cd:b4:cb:c7:a5:53:c5:77:24:24:1f:
cb:3b:d0:ee:e6:ce:ca:35:0c:51:7d:d6:13:a7:7d:
ac:7e:3e:03:17:41:67:66:e3:9c:9d:ed:b5:2a:c3:
a7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:78:AC:28:D8:3F:1D:3F:B8:AA:F7:A4:FC:89:4B:AB:BE:EC:E7:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6CFD6BAC35211EF8676C8AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.34.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6b:f2:85:9a:fc:29:bd:bd:14:9a:bc:c6:fe:04:93:eb:df:
c2:14:af:87:b0:de:9c:3f:c0:db:c8:e2:4d:b0:a8:a7:46:95:
fb:6d:5f:fb:02:8f:62:c1:da:3c:ff:98:98:96:06:af:05:c9:
12:68:3e:21:4b:02:c9:7d:b8:c8:33:63:5f:66:17:a8:4b:8b:
57:92:bb:55:23:55:51:54:29:92:da:af:de:0d:01:5a:69:0c:
f6:e3:15:9c:aa:8b:16:cf:a9:00:6f:ec:5f:d8:c1:91:00:e1:
91:44:29:9b:b0:d1:bf:db:47:d1:44:93:75:59:d8:0b:c8:83:
b3:87:6e:d2:5f:d9:50:ae:9f:ef:7b:f5:70:31:14:7d:74:b1:
26:c5:d2:c9:35:ef:bc:72:a5:36:26:92:95:33:a4:22:cf:f4:
89:ce:64:04:22:61:20:81:0e:0c:fb:bc:4b:5e:70:df:9c:32:
3c:48:c0:df:a4:17:95:4d:78:34:9e:2f:73:a2:28:b4:5b:5a:
9f:be:7b:5a:73:62:29:09:65:f9:d1:31:b1:7c:d0:56:e1:5b:
97:4f:a1:70:e2:eb:fc:03:12:20:b1:15:ce:53:cd:3c:3c:43:
6c:aa:b4:6e:e9:a9:b8:7b:34:dd:10:1f:22:2a:4e:35:cd:15:
c8:9b:57:28
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASW9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDYzMDUzWhcNMjcxMjEyMDYzMDUzWjAYMRYw
FAYDVQQDEw02NzZjZjgyMS1iMzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0L5C+3kVcK1rmYGMxbdPrgkJItNx+p1w/gEB8wILZuQCLwrwh5Gjhee7
gLOwkNHz8TW94CGXXfE9+yfm+i21w17KzFBabUb4BgbW/sSQ1r6DpdZvQ+z/3jza
oRehbw7Vo5EKbabSRlENJTxuhCi9xinmFJ/6rPS5z9Z280vDZDnwk3PV9I4mC9R5
TDhZaVi20WQkNiHSUX9u3mYgi8cfOSTpGLSg8wqkO3E1PCMY5mtxuJ2na2UcjMQO
uuF5YbiA/02JA+XRcsC8NAdaAJ3ybDhfirMBzbTLx6VTxXckJB/LO9Du5s7KNQxR
fdYTp32sfj4DF0FnZuOcne21KsOnuQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNl4
rCjYPx0/uKr3pPyJS6u+7Od6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNkNGRDZCQUMzNTIxMUVGODY3NkM4QUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlgiMA0GCSqGSIb3DQEB
CwUAA4IBAQAZa/KFmvwpvb0UmrzG/gST69/CFK+HsN6cP8DbyOJNsKinRpX7bV/7
Ao9iwdo8/5iYlgavBckSaD4hSwLJfbjIM2NfZheoS4tXkrtVI1VRVCmS2q/eDQFa
aQz24xWcqosWz6kAb+xf2MGRAOGRRCmbsNG/20fRRJN1WdgLyIOzh27SX9lQrp/v
e/VwMRR9dLEmxdLJNe+8cqU2JpKVM6Qiz/SJzmQEImEggQ4M+7xLXnDfnDI8SMDf
pBeVTXg0ni9zoii0W1qfvntac2IpCWX50TGxfNBW4VuXT6Fw4uv8AxIgsRXOU808
PENsqrRu6am4ezTdEB8iKk41zRXIm1co
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:45:35 2025 by rpki-client