Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC7516FCC2A311EF81D10557762E951A.roa
File: FC7516FCC2A311EF81D10557762E951A.roa (raw, json)
Hash identifier: 3vNyaHYGbyGvK+fSRRgve0CKMFufWWYG7Pr8sXxVkh4=
Subject key identifier: EF:40:9F:FF:58:18:D8:67:22:50:C2:17:AF:37:9B:6C:83:21:62:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012552
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC7516FCC2A311EF81D10557762E951A.roa
Signing time: Wed 25 Dec 2024 09:38:24 +0000
ROA not before: Wed 25 Dec 2024 09:38:21 +0000
ROA not after: Thu 13 Feb 2025 09:38:21 +0000
asID: 63139
IP address blocks: 154.203.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75090 (0x12552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 09:38:21 2024 GMT
Not After : Feb 13 09:38:21 2025 GMT
Subject: CN=676bd290-dc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c1:7e:5b:3b:a0:2b:92:22:ab:ee:28:4c:fa:
7d:5b:46:35:50:7f:38:1a:d9:51:3a:0b:bf:7c:3b:
f6:8f:6b:f4:76:96:c4:db:bd:bd:c0:87:87:db:ec:
30:aa:15:d7:63:2b:d5:99:26:a6:09:d8:09:3e:6d:
e3:32:56:36:e5:84:86:4f:e3:48:2c:af:c3:e1:45:
0e:e9:58:16:fa:25:04:38:3d:b1:59:90:29:69:cc:
da:74:86:1c:cd:18:ea:d2:fd:12:a0:e4:47:fe:af:
26:cb:bc:7e:1d:8b:57:11:af:1f:0b:f3:d2:2e:2b:
ff:e6:13:9a:21:a9:f3:89:9e:90:3d:42:a4:3c:bd:
d6:82:4b:37:47:5f:47:65:4a:fc:00:44:76:41:3a:
7b:53:54:24:9d:ca:f4:23:d8:78:78:ab:4b:5e:13:
d6:eb:1a:74:af:22:da:4f:f0:23:5e:59:f5:78:2a:
c9:04:3f:69:5d:62:f3:ee:3d:1c:bb:74:51:30:09:
17:45:6f:7d:58:3f:28:e0:50:50:1a:d8:3d:5a:fb:
7b:ef:fc:d2:58:e5:72:39:cc:4e:e2:df:ec:c3:b3:
a7:2b:0d:fb:f6:67:0a:54:0b:03:94:af:3b:b0:82:
fc:a9:f1:c8:22:c8:05:64:ce:4d:ef:7c:e7:b2:4e:
cc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:40:9F:FF:58:18:D8:67:22:50:C2:17:AF:37:9B:6C:83:21:62:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC7516FCC2A311EF81D10557762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.160.0/20
Signature Algorithm: sha256WithRSAEncryption
ca:c2:69:58:8c:c6:bc:09:3d:a4:de:4e:b9:5d:e5:4a:f7:40:
41:ee:6a:00:53:9d:d9:5b:d4:51:80:82:a8:ed:55:e7:0d:30:
8a:e4:80:39:98:b5:f3:0f:f4:b4:8d:17:83:e9:dc:51:e8:82:
8d:2e:c3:5a:50:d5:2f:58:72:36:56:f4:9f:bd:88:b4:d1:d3:
0a:06:0c:8d:3c:5b:45:56:ec:54:6a:5d:d4:0f:94:17:58:00:
93:1f:48:71:05:a8:71:4d:18:21:99:41:a4:7a:31:04:f4:ad:
2b:a9:ee:ee:7e:c9:9f:7c:0e:b9:5c:6a:16:0c:7b:4c:1e:06:
a5:e6:0f:e6:7f:54:aa:96:3d:fe:35:c1:d5:fa:49:22:80:fd:
a1:d5:16:d1:6f:37:23:9e:d8:c3:dc:b7:f8:6e:5f:31:17:d6:
f6:6b:a4:2c:33:7c:5b:41:fd:7b:df:a6:29:73:63:46:00:38:
6c:8c:96:eb:59:99:53:54:fb:18:de:85:a2:16:eb:6b:b3:3f:
af:27:1b:fa:f7:aa:31:5d:37:54:46:4d:6c:9f:b8:4a:4e:15:
8e:1d:d7:d2:e7:d3:19:8c:e9:51:00:eb:fc:c2:ce:23:6c:72:
9b:44:f0:d3:c2:51:08:2b:66:cf:cb:bf:f4:de:56:52:db:f8:
ba:00:cb:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASVSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI1MDkzODIxWhcNMjUwMjEzMDkzODIxWjAYMRYw
FAYDVQQDEw02NzZiZDI5MC1kYzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3MF+WzugK5Iiq+4oTPp9W0Y1UH84GtlROgu/fDv2j2v0dpbE2729wIeH
2+wwqhXXYyvVmSamCdgJPm3jMlY25YSGT+NILK/D4UUO6VgW+iUEOD2xWZApacza
dIYczRjq0v0SoORH/q8my7x+HYtXEa8fC/PSLiv/5hOaIanziZ6QPUKkPL3Wgks3
R19HZUr8AER2QTp7U1Qkncr0I9h4eKtLXhPW6xp0ryLaT/AjXln1eCrJBD9pXWLz
7j0cu3RRMAkXRW99WD8o4FBQGtg9Wvt77/zSWOVyOcxO4t/sw7OnKw379mcKVAsD
lK87sIL8qfHIIsgFZM5N73znsk7MIwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFO9A
n/9YGNhnIlDCF683m2yDIWISMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQzc1MTZGQ0MyQTMxMUVGODFEMTA1NTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmsugMA0GCSqGSIb3DQEB
CwUAA4IBAQDKwmlYjMa8CT2k3k65XeVK90BB7moAU53ZW9RRgIKo7VXnDTCK5IA5
mLXzD/S0jReD6dxR6IKNLsNaUNUvWHI2VvSfvYi00dMKBgyNPFtFVuxUal3UD5QX
WACTH0hxBahxTRghmUGkejEE9K0rqe7ufsmffA65XGoWDHtMHgal5g/mf1Sqlj3+
NcHV+kkigP2h1RbRbzcjntjD3Lf4bl8xF9b2a6QsM3xbQf1736Ypc2NGADhsjJbr
WZlTVPsY3oWiFutrsz+vJxv696oxXTdURk1sn7hKThWOHdfS59MZjOlRAOv8ws4j
bHKbRPDTwlEIK2bPy7/03lZS2/i6AMvw
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:51 2025 by rpki-client