Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/971A42AEBEB711EF9D0EE380762E951A.roa
File: 971A42AEBEB711EF9D0EE380762E951A.roa (raw, json)
Hash identifier: PB1YHYw1CCb7NTHfuCDnCIW1jbkkxwUZF3mKUec2hEQ=
Subject key identifier: 6B:70:41:5F:C4:5F:68:43:76:1F:61:5E:C8:9F:02:E7:61:24:11:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CCE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/971A42AEBEB711EF9D0EE380762E951A.roa
Signing time: Fri 20 Dec 2024 09:48:40 +0000
ROA not before: Fri 20 Dec 2024 09:48:36 +0000
ROA not after: Sun 02 Feb 2025 09:48:36 +0000
asID: 202656
IP address blocks: 154.219.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72910 (0x11cce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 09:48:36 2024 GMT
Not After : Feb 2 09:48:36 2025 GMT
Subject: CN=67653d77-a32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:21:8a:d7:c9:75:cd:b9:24:27:45:1d:de:4e:
eb:80:b3:e4:83:e0:1e:ea:91:e6:f2:6a:48:0e:e8:
19:20:56:94:50:5d:30:6f:ad:20:9c:cd:e8:5c:df:
52:a9:06:ef:ef:81:9d:de:2b:c9:97:91:79:df:af:
88:89:a0:71:70:b1:7b:76:97:ee:13:cc:c1:90:1f:
55:d4:c2:94:07:d6:53:9b:52:13:78:4f:9a:68:2f:
2a:0e:4a:ef:13:68:aa:9c:08:96:12:15:1d:55:41:
66:5f:0d:b5:d0:44:c4:6b:30:0b:ab:5c:72:d0:bc:
b8:e5:d5:f8:de:30:71:90:a8:0a:36:2b:0a:f5:d7:
d7:6c:a8:89:5a:1f:2b:ec:9d:83:67:30:44:52:7d:
b2:2f:b7:e6:73:bd:c9:f8:a6:15:92:fd:e5:90:53:
bb:79:5e:ae:6f:0f:e0:ed:f2:35:6d:ec:a6:37:6c:
2d:93:c0:b8:d7:65:91:8f:04:4f:d4:a9:9e:25:ed:
c4:cf:74:8e:84:92:82:04:c0:fa:b1:7d:2e:1b:2d:
fb:70:22:93:4b:f1:d8:f5:47:4e:d4:b6:84:40:78:
c0:04:30:05:19:d3:b5:04:22:37:2b:80:c1:c8:14:
0d:ab:a8:c8:56:3d:82:00:0b:11:e0:2d:1e:89:a1:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:70:41:5F:C4:5F:68:43:76:1F:61:5E:C8:9F:02:E7:61:24:11:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/971A42AEBEB711EF9D0EE380762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.4.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:75:f0:44:b3:ae:a3:2f:2b:6d:26:d3:1c:f2:e5:39:f1:03:
fc:67:f9:2b:29:3e:e4:6b:9f:dc:6d:32:a3:ad:9e:37:63:25:
f2:45:dd:5e:cc:5f:6b:b6:ef:f7:07:37:0b:ea:4d:74:d8:5a:
07:bc:a7:cd:a9:21:b8:97:92:fb:1d:5e:1b:8d:15:53:ab:f0:
01:93:3f:62:af:da:0f:22:1f:21:ec:9c:54:14:8d:3a:40:99:
2a:05:09:69:40:b7:a8:54:c9:07:79:9d:ec:32:e8:34:92:fa:
fb:84:0c:f1:b9:a7:32:7b:99:c6:8a:0a:43:5f:eb:b9:81:c2:
65:48:1a:77:2d:70:85:31:d2:8a:c1:4c:dd:bd:ca:59:8d:15:
fe:b5:a2:8d:86:af:6f:96:cf:d0:01:fd:63:24:b8:41:b3:e4:
68:4b:5a:28:b3:a1:41:e6:6d:58:8a:f3:e5:bf:24:89:de:e7:
9d:32:00:ca:e6:51:c7:ec:96:c8:0b:3a:8c:7d:06:be:76:6c:
df:d2:dc:72:dd:c4:c8:37:35:4f:1c:c5:e5:32:7c:10:8f:2c:
88:89:68:38:05:b3:ef:5a:85:dc:e9:4a:89:a8:fc:b9:a1:1f:
b9:35:83:1d:6c:dd:39:cd:1b:61:53:43:c1:9b:31:4d:ff:0b:
b2:c6:c3:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARzOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIwMDk0ODM2WhcNMjUwMjAyMDk0ODM2WjAYMRYw
FAYDVQQDEw02NzY1M2Q3Ny1hMzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4SGK18l1zbkkJ0Ud3k7rgLPkg+Ae6pHm8mpIDugZIFaUUF0wb60gnM3o
XN9SqQbv74Gd3ivJl5F536+IiaBxcLF7dpfuE8zBkB9V1MKUB9ZTm1ITeE+aaC8q
DkrvE2iqnAiWEhUdVUFmXw210ETEazALq1xy0Ly45dX43jBxkKgKNisK9dfXbKiJ
Wh8r7J2DZzBEUn2yL7fmc73J+KYVkv3lkFO7eV6ubw/g7fI1beymN2wtk8C412WR
jwRP1KmeJe3Ez3SOhJKCBMD6sX0uGy37cCKTS/HY9UdO1LaEQHjABDAFGdO1BCI3
K4DByBQNq6jIVj2CAAsR4C0eiaHMVQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGtw
QV/EX2hDdh9hXsifAudhJBFrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NzFBNDJBRUJFQjcxMUVGOUQwRUUzODA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtsEMA0GCSqGSIb3DQEB
CwUAA4IBAQCcdfBEs66jLyttJtMc8uU58QP8Z/krKT7ka5/cbTKjrZ43YyXyRd1e
zF9rtu/3BzcL6k102FoHvKfNqSG4l5L7HV4bjRVTq/ABkz9ir9oPIh8h7JxUFI06
QJkqBQlpQLeoVMkHeZ3sMug0kvr7hAzxuacye5nGigpDX+u5gcJlSBp3LXCFMdKK
wUzdvcpZjRX+taKNhq9vls/QAf1jJLhBs+RoS1oos6FB5m1YivPlvySJ3uedMgDK
5lHH7JbICzqMfQa+dmzf0txy3cTINzVPHMXlMnwQjyyIiWg4BbPvWoXc6UqJqPy5
oR+5NYMdbN05zRthU0PBmzFN/wuyxsNs
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:01 2025 by rpki-client