Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/079640300AE111F0A159B7AB762E951A.roa
File: 079640300AE111F0A159B7AB762E951A.roa (raw, json)
Hash identifier: dQuK5fF1B3rO429rYhI52lNf98npBFUDuAvNKNe8nBs=
Subject key identifier: 07:B5:45:78:26:32:01:1B:DE:C1:A9:EE:3D:BD:03:F0:3C:78:10:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017682
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/079640300AE111F0A159B7AB762E951A.roa
Signing time: Thu 27 Mar 2025 07:56:46 +0000
ROA not before: Thu 27 Mar 2025 07:56:42 +0000
ROA not after: Sat 03 May 2025 07:56:42 +0000
asID: 19318
IP address blocks: 154.85.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95874 (0x17682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 27 07:56:42 2025 GMT
Not After : May 3 07:56:42 2025 GMT
Subject: CN=67e504be-b3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:c7:f4:1c:32:e7:77:16:a8:df:01:a3:4e:
da:6c:43:0d:2e:b3:fd:fa:1a:6c:37:e6:f1:27:bc:
76:cb:fa:63:2b:a4:a1:e9:67:21:2e:5c:65:12:59:
5c:92:a4:66:a6:2c:94:1e:9b:1f:f2:e6:80:69:ac:
d0:00:4c:e4:6f:06:a1:ec:c8:58:76:10:7a:37:9b:
79:d4:8f:99:f9:60:33:15:a5:21:9d:1f:c0:fd:b6:
3f:59:08:ac:d4:81:be:99:b4:84:f4:ee:86:83:b3:
75:7e:85:30:41:02:bd:f0:6b:e4:f1:83:7d:19:6c:
ed:ed:19:dc:f1:7f:f1:54:db:a4:8c:19:75:76:c8:
e7:bd:93:93:11:33:39:a6:03:01:bb:a2:e3:3f:f1:
7c:de:30:3d:22:4f:af:75:53:3c:f9:79:0c:f2:10:
54:0c:7c:35:69:7d:59:58:c3:7a:be:bc:39:f1:6f:
a2:80:9c:5f:cd:1e:bc:95:aa:60:67:ea:41:98:8a:
39:59:f8:e1:6e:00:18:2f:ae:11:73:9d:fe:9c:64:
64:3c:18:9d:79:d0:fa:13:c7:03:08:36:99:6f:4f:
4c:55:13:c7:c0:79:9a:50:17:46:c2:e2:37:4b:83:
ec:ab:cc:28:dd:50:c7:7f:b7:ee:31:fa:5b:f1:13:
92:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B5:45:78:26:32:01:1B:DE:C1:A9:EE:3D:BD:03:F0:3C:78:10:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/079640300AE111F0A159B7AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.22.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:2f:7a:aa:22:9c:00:65:51:19:32:39:08:81:dd:f2:07:76:
3a:35:7b:50:44:6d:01:9d:ec:ed:5e:98:e6:33:0c:17:f8:eb:
48:ec:8b:08:a2:e8:80:6c:3f:4f:86:85:0e:29:84:db:5c:bd:
72:3f:2b:eb:90:1e:b3:d7:70:9f:f8:e8:27:43:81:e5:b2:b0:
2b:c1:ab:4f:95:1f:a0:7c:ef:86:0a:9e:c3:b3:56:0c:19:81:
b5:1a:c0:5b:f3:0d:1d:bf:0d:c8:f9:f9:04:62:4a:bc:f6:6d:
40:ac:c6:28:23:e0:0e:91:d2:0b:36:08:fe:fa:2f:2c:3c:2d:
2e:d6:4b:ff:07:05:e0:9c:bb:c2:f6:9f:6a:98:ea:cf:55:5d:
10:2f:c7:e3:29:f2:74:d5:a5:57:82:c2:3d:56:a0:33:0b:e4:
33:66:d2:7a:0e:ef:84:44:c2:1f:7a:7c:a2:49:1c:27:7c:f5:
33:35:55:77:e4:66:d5:df:d1:c3:ec:b1:3f:73:5d:10:cf:0b:
ba:57:06:e8:5f:ac:a5:a0:ec:b8:cb:9e:86:d5:40:26:d4:8c:
ea:f0:c7:53:4d:6e:f4:ef:4a:95:88:75:70:3c:8e:4d:87:f5:
4f:97:e8:d1:b2:23:e3:05:83:d8:27:9a:6e:e1:cd:65:0e:21:
db:2f:13:6e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXaCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzI3MDc1NjQyWhcNMjUwNTAzMDc1NjQyWjAYMRYw
FAYDVQQDEw02N2U1MDRiZS1iM2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAswbH9Bwy53cWqN8Bo07abEMNLrP9+hpsN+bxJ7x2y/pjK6Sh6WchLlxl
EllckqRmpiyUHpsf8uaAaazQAEzkbwah7MhYdhB6N5t51I+Z+WAzFaUhnR/A/bY/
WQis1IG+mbSE9O6Gg7N1foUwQQK98Gvk8YN9GWzt7Rnc8X/xVNukjBl1dsjnvZOT
ETM5pgMBu6LjP/F83jA9Ik+vdVM8+XkM8hBUDHw1aX1ZWMN6vrw58W+igJxfzR68
lapgZ+pBmIo5WfjhbgAYL64Rc53+nGRkPBidedD6E8cDCDaZb09MVRPHwHmaUBdG
wuI3S4Psq8wo3VDHf7fuMfpb8ROSfQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAe1
RXgmMgEb3sGp7j29A/A8eBCdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNzk2NDAzMDBBRTExMUYwQTE1OUI3QUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlUWMA0GCSqGSIb3DQEB
CwUAA4IBAQBtL3qqIpwAZVEZMjkIgd3yB3Y6NXtQRG0BneztXpjmMwwX+OtI7IsI
ouiAbD9PhoUOKYTbXL1yPyvrkB6z13Cf+OgnQ4HlsrArwatPlR+gfO+GCp7Ds1YM
GYG1GsBb8w0dvw3I+fkEYkq89m1ArMYoI+AOkdILNgj++i8sPC0u1kv/BwXgnLvC
9p9qmOrPVV0QL8fjKfJ01aVXgsI9VqAzC+QzZtJ6Du+ERMIfenyiSRwnfPUzNVV3
5GbV39HD7LE/c10Qzwu6VwboX6yloOy4y56G1UAm1Izq8MdTTW7070qViHVwPI5N
h/VPl+jRsiPjBYPYJ5pu4c1lDiHbLxNu
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:46:28 2025 by rpki-client