Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEC5A042C51A11EFB98AAB7C762E951A.roa
File: FEC5A042C51A11EFB98AAB7C762E951A.roa (raw, json)
Hash identifier: NrLgiMv2SFsdlghOep/xMc4sg9LcltSAJXYmd/k4iu0=
Subject key identifier: F2:CB:5D:A6:6A:B0:85:F8:AA:C1:D1:B8:6A:A9:75:0E:E1:83:30:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B1F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEC5A042C51A11EFB98AAB7C762E951A.roa
Signing time: Sat 28 Dec 2024 12:55:21 +0000
ROA not before: Sat 28 Dec 2024 12:55:17 +0000
ROA not after: Sun 12 Dec 2027 12:55:17 +0000
asID: 17561
IP address blocks: 154.203.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76575 (0x12b1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 12:55:17 2024 GMT
Not After : Dec 12 12:55:17 2027 GMT
Subject: CN=676ff538-745f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:fe:fc:6f:7b:51:65:21:00:fa:79:7b:cd:
9c:52:15:05:fc:49:cc:1e:76:12:f9:30:99:58:af:
8a:2d:8a:bb:9c:2c:26:49:d0:43:3b:10:51:4f:83:
ea:c7:23:4e:14:34:d3:3b:ae:a6:a8:cb:8b:95:06:
56:7b:fe:70:48:39:50:a4:c6:d6:d3:01:29:eb:98:
0b:94:14:e8:50:48:cd:ab:00:f4:62:45:7c:05:46:
2c:34:53:bc:71:40:cd:c8:65:be:50:e1:4b:7b:50:
8b:4b:e3:cc:89:f0:2d:80:67:09:82:8a:4b:11:43:
e3:db:dd:c8:9b:c7:04:b4:9c:82:7e:b7:5c:56:98:
b3:a6:80:31:36:ab:4d:a0:f9:0d:fe:a6:39:fd:39:
fb:d2:19:9f:d8:ef:e7:73:31:e1:8b:7a:1e:74:3e:
e6:8d:70:48:46:bb:d7:19:41:21:32:72:c7:f6:32:
e9:20:db:cf:47:56:46:0b:bc:68:f7:1f:8f:86:a7:
19:73:a6:9d:29:e9:ef:00:c7:93:27:3e:5c:63:6e:
bb:ff:dd:1c:96:47:03:17:42:ce:89:ab:43:96:28:
30:6a:d0:d1:9c:58:e5:df:4b:93:28:a8:e9:86:1a:
f6:c8:b5:cf:e4:71:25:67:ec:d2:94:1f:a6:d0:f9:
27:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CB:5D:A6:6A:B0:85:F8:AA:C1:D1:B8:6A:A9:75:0E:E1:83:30:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEC5A042C51A11EFB98AAB7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.11.0/24
Signature Algorithm: sha256WithRSAEncryption
17:7b:2e:28:29:36:27:22:32:95:77:57:0e:62:ad:eb:13:ec:
92:41:7c:8e:a9:3a:b5:dc:de:05:1a:cb:2b:6e:13:cd:79:4e:
db:ca:58:e3:4c:4e:4f:0e:99:da:80:1b:d1:95:86:14:ac:d9:
da:19:c6:41:ed:1b:04:1e:bf:2a:59:a0:85:9d:75:c7:54:a5:
35:d9:bd:68:eb:a7:16:95:e8:a1:33:16:c4:a2:bc:55:c4:61:
2e:6d:a5:79:5d:4e:0a:1e:39:ba:ff:77:7b:62:45:86:1d:fe:
2d:70:cb:0b:b6:fa:ff:a3:20:6f:47:22:97:01:0f:7a:31:37:
2e:54:c5:e9:63:93:44:56:70:5e:4c:c4:2c:91:c1:86:2f:c8:
cc:05:1c:fb:30:d7:42:06:6c:46:a8:2d:85:02:19:82:59:e2:
04:34:7c:c9:cb:9e:6d:83:46:f9:67:9f:c3:5d:55:0d:68:b3:
26:07:07:56:c5:c5:76:60:11:34:82:b1:07:f7:d7:10:b4:b0:
71:24:ba:cb:7b:8b:9b:41:d3:e1:84:e9:c6:13:0a:51:38:73:
b0:c5:f5:31:a4:f0:b9:cf:f6:63:c2:1a:6c:cf:c4:2e:31:71:
ce:d9:ef:e0:68:ff:15:47:79:02:be:d8:ca:96:c6:72:a7:22:
7c:6f:e9:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASsfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTI1NTE3WhcNMjcxMjEyMTI1NTE3WjAYMRYw
FAYDVQQDEw02NzZmZjUzOC03NDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAthz+/G97UWUhAPp5e82cUhUF/EnMHnYS+TCZWK+KLYq7nCwmSdBDOxBR
T4PqxyNOFDTTO66mqMuLlQZWe/5wSDlQpMbW0wEp65gLlBToUEjNqwD0YkV8BUYs
NFO8cUDNyGW+UOFLe1CLS+PMifAtgGcJgopLEUPj293Im8cEtJyCfrdcVpizpoAx
NqtNoPkN/qY5/Tn70hmf2O/nczHhi3oedD7mjXBIRrvXGUEhMnLH9jLpINvPR1ZG
C7xo9x+PhqcZc6adKenvAMeTJz5cY267/90clkcDF0LOiatDligwatDRnFjl30uT
KKjphhr2yLXP5HElZ+zSlB+m0PknEwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPLL
XaZqsIX4qsHRuGqpdQ7hgzC0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRUM1QTA0MkM1MUExMUVGQjk4QUFCN0M3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmssLMA0GCSqGSIb3DQEB
CwUAA4IBAQAXey4oKTYnIjKVd1cOYq3rE+ySQXyOqTq13N4FGssrbhPNeU7byljj
TE5PDpnagBvRlYYUrNnaGcZB7RsEHr8qWaCFnXXHVKU12b1o66cWleihMxbEorxV
xGEubaV5XU4KHjm6/3d7YkWGHf4tcMsLtvr/oyBvRyKXAQ96MTcuVMXpY5NEVnBe
TMQskcGGL8jMBRz7MNdCBmxGqC2FAhmCWeIENHzJy55tg0b5Z5/DXVUNaLMmBwdW
xcV2YBE0grEH99cQtLBxJLrLe4ubQdPhhOnGEwpROHOwxfUxpPC5z/Zjwhpsz8Qu
MXHO2e/gaP8VR3kCvtjKlsZypyJ8b+l4
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:42 2025 by rpki-client