Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F686382C2A311EF9BDDD350762E951A.roa
File: 0F686382C2A311EF9BDDD350762E951A.roa (raw, json)
Hash identifier: OLuM9KJXd+GOLlhaSL8sU5Yb5HeezUOCOX/BhFGN9Pg=
Subject key identifier: FC:DC:0A:A5:2B:2C:82:B1:8F:08:1B:47:11:55:83:B7:C2:8A:BE:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012548
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F686382C2A311EF9BDDD350762E951A.roa
Signing time: Wed 25 Dec 2024 09:31:46 +0000
ROA not before: Wed 25 Dec 2024 09:31:43 +0000
ROA not after: Thu 13 Feb 2025 09:31:43 +0000
asID: 138915
IP address blocks: 154.203.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75080 (0x12548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 09:31:43 2024 GMT
Not After : Feb 13 09:31:43 2025 GMT
Subject: CN=676bd102-34b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d4:ca:ce:43:d3:e6:3d:92:7b:7a:a0:a0:10:
c6:a2:7d:fe:82:5a:b3:73:c6:14:7f:52:1c:49:be:
e0:b7:5e:a0:ed:57:57:f1:23:40:f9:bd:4f:b8:e0:
63:e9:9c:9c:58:ca:da:53:d0:39:fb:a3:48:4c:f6:
c8:eb:73:0e:f6:9b:61:08:7c:b8:2b:5c:5b:5c:b5:
b5:07:f6:bb:c5:0d:6a:35:e7:e6:9b:97:e0:a2:09:
a6:44:93:5c:2b:9e:f4:50:df:2c:97:c0:59:55:07:
04:7b:cb:7b:8d:b1:33:a5:a1:14:ee:ce:16:4d:8f:
5c:d1:bc:2e:7f:74:9e:37:2e:fb:51:8d:63:56:0f:
6c:ce:42:39:b5:af:e2:5c:a3:ba:4b:7d:67:ed:50:
53:f6:15:53:40:02:bb:f5:65:46:ab:b8:53:c5:e5:
db:35:31:14:3d:dc:25:71:8c:05:8d:aa:f2:4a:9f:
09:27:f5:16:51:7a:c1:de:81:5f:9e:11:ad:64:f1:
8c:87:3f:d7:f1:c4:13:99:4b:90:82:32:08:6b:77:
74:b5:9f:d3:37:06:a2:e7:0d:db:de:05:5c:56:f0:
ed:98:32:e9:36:64:e6:9d:f8:7f:81:a5:6e:ca:5b:
06:b5:12:07:72:2b:d0:c6:34:2c:fb:b8:dc:67:04:
5c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DC:0A:A5:2B:2C:82:B1:8F:08:1B:47:11:55:83:B7:C2:8A:BE:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F686382C2A311EF9BDDD350762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.156.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:69:2d:fb:c4:13:2f:52:15:0d:03:6c:33:6e:21:44:c7:a3:
7c:f4:09:41:bc:07:2e:f6:77:c3:3f:72:e1:f7:df:da:91:09:
15:51:8d:44:ca:33:92:10:61:d4:34:57:a3:c4:8d:92:e4:48:
68:f9:75:ca:a5:5f:f6:fa:86:d7:64:1f:1b:69:71:36:dd:09:
04:ca:89:7b:f7:35:97:ff:ac:8a:44:72:24:87:1c:6a:eb:4e:
04:5b:76:80:d3:0f:5f:56:b3:fb:8a:b4:ea:f0:7b:5a:d0:93:
df:51:05:67:66:29:ec:45:46:50:30:9d:d3:46:15:10:11:26:
9b:78:f2:bf:fe:59:1e:8b:a9:c9:48:f0:6d:eb:aa:9f:30:bc:
e6:18:50:86:a5:00:06:35:cb:96:a6:a3:83:09:c1:a3:9f:b8:
3c:c6:b4:e9:bc:0b:a2:3a:d0:8c:3d:07:9d:c0:c9:29:04:d7:
7f:53:93:78:7d:27:de:13:32:9a:db:95:4d:7b:1a:65:ea:74:
3d:23:b4:89:5f:07:70:62:de:08:15:80:68:76:63:77:a0:61:
e9:47:04:bc:c1:78:7e:16:19:4d:7d:66:4f:f3:d0:ad:48:58:
27:35:36:20:6d:4d:ca:00:20:e7:f0:6a:e9:6e:c0:5b:d5:62:
a5:ed:87:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASVIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDkzMTQzWhcNMjUwMjEzMDkzMTQzWjAYMRYw
FAYDVQQDEw02NzZiZDEwMi0zNGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA59TKzkPT5j2Se3qgoBDGon3+glqzc8YUf1IcSb7gt16g7VdX8SNA+b1P
uOBj6ZycWMraU9A5+6NITPbI63MO9pthCHy4K1xbXLW1B/a7xQ1qNefmm5fgogmm
RJNcK570UN8sl8BZVQcEe8t7jbEzpaEU7s4WTY9c0bwuf3SeNy77UY1jVg9szkI5
ta/iXKO6S31n7VBT9hVTQAK79WVGq7hTxeXbNTEUPdwlcYwFjarySp8JJ/UWUXrB
3oFfnhGtZPGMhz/X8cQTmUuQgjIIa3d0tZ/TNwai5w3b3gVcVvDtmDLpNmTmnfh/
gaVuylsGtRIHcivQxjQs+7jcZwRcPQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPzc
CqUrLIKxjwgbRxFVg7fCir49MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wRjY4NjM4MkMyQTMxMUVGOUJEREQzNTA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsucMA0GCSqGSIb3DQEB
CwUAA4IBAQCfaS37xBMvUhUNA2wzbiFEx6N89AlBvAcu9nfDP3Lh99/akQkVUY1E
yjOSEGHUNFejxI2S5Eho+XXKpV/2+obXZB8baXE23QkEyol79zWX/6yKRHIkhxxq
604EW3aA0w9fVrP7irTq8Hta0JPfUQVnZinsRUZQMJ3TRhUQESabePK//lkei6nJ
SPBt66qfMLzmGFCGpQAGNcuWpqODCcGjn7g8xrTpvAuiOtCMPQedwMkpBNd/U5N4
fSfeEzKa25VNexpl6nQ9I7SJXwdwYt4IFYBodmN3oGHpRwS8wXh+FhlNfWZP89Ct
SFgnNTYgbU3KACDn8GrpbsBb1WKl7Yc7
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:45:50 2025 by rpki-client