Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BBE8832F44711EF97A4D977762E951A.roa
File: 3BBE8832F44711EF97A4D977762E951A.roa (raw, json)
Hash identifier: 3ggvOTqqZRD2SvAlopDtuywkAUqM7g42sPGKpvRIvVE=
Subject key identifier: 23:29:9D:D7:B6:90:16:BB:AF:02:93:44:9D:A9:73:31:BC:BB:55:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BBE8832F44711EF97A4D977762E951A.roa
Signing time: Wed 26 Feb 2025 13:40:26 +0000
ROA not before: Wed 26 Feb 2025 13:40:22 +0000
ROA not after: Sat 19 Feb 2028 13:40:22 +0000
asID: 17561
IP address blocks: 154.82.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91105 (0x163e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:40:22 2025 GMT
Not After : Feb 19 13:40:22 2028 GMT
Subject: CN=67bf19c9-8cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:d2:bd:bc:e5:b8:69:79:3f:34:c2:51:f2:
99:0e:45:c8:f4:75:71:7c:94:ba:b5:72:c0:88:fb:
f4:ca:b2:8a:a8:4e:68:c6:d5:c3:76:04:12:3d:99:
c5:16:8b:65:c1:c1:4c:73:3b:65:4a:c1:c2:48:12:
db:74:92:59:12:46:77:6b:06:bd:cc:13:09:ca:d5:
e2:34:b5:a4:2b:d4:f5:24:a6:10:45:5d:29:b8:37:
62:d3:3b:51:b8:35:55:ed:75:34:54:14:ed:af:ad:
55:41:f6:62:e9:5e:6f:c7:e1:d4:68:9a:15:23:d2:
06:8c:84:6a:39:22:d7:de:b4:fc:72:a5:74:ef:44:
f7:ba:14:7b:3e:a5:62:f7:9a:3d:09:8f:6d:e2:43:
35:a9:42:b0:30:29:97:e5:a7:77:b3:2a:70:4b:45:
f6:7f:d2:5e:0a:92:f8:cb:77:ef:f3:4a:e3:f8:27:
63:db:69:10:be:e9:58:09:21:46:7e:47:0c:02:60:
96:ca:ad:0d:1e:9a:98:db:06:53:14:a4:ea:ef:ac:
72:fb:ca:47:38:8e:c4:74:d6:00:31:83:00:0f:43:
1b:6e:25:32:d5:82:19:0f:e4:0f:a7:d9:73:ee:ae:
0a:27:cd:ae:e2:ea:74:f8:17:74:3f:3d:28:ce:13:
73:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:29:9D:D7:B6:90:16:BB:AF:02:93:44:9D:A9:73:31:BC:BB:55:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BBE8832F44711EF97A4D977762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.184.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:b2:3e:c2:4f:31:40:3b:5d:f5:fa:65:89:a1:42:94:3e:09:
47:26:92:10:51:c0:39:50:5b:0d:6e:6e:26:ee:37:3c:d8:4b:
a8:bc:7d:83:c5:d7:db:dd:4a:d3:14:05:02:11:3e:e3:80:1f:
61:13:de:cb:11:91:9e:1c:31:80:de:65:ea:12:1f:25:1f:52:
31:23:3b:ed:7e:2a:2e:c9:1e:15:9b:6e:70:0e:73:c5:af:3d:
9d:3b:f8:4d:54:52:63:a0:1d:a6:fc:f4:ff:bc:aa:dd:dc:51:
ee:f8:19:f4:8b:46:52:28:df:0c:4c:c9:70:3d:30:80:21:d7:
30:d5:a4:03:ea:19:f8:a2:1a:0d:66:41:7a:b3:e7:98:5b:40:
c8:74:bb:fd:d7:5f:4a:29:5d:4c:2a:b7:5c:a4:3f:b2:cf:c3:
d9:91:ba:c5:cb:cb:f7:03:51:47:40:5e:09:c6:d4:63:10:44:
d4:6e:ca:d5:cb:e7:08:ab:ff:d6:96:7a:05:b2:51:23:48:1a:
19:7b:1a:d8:92:79:b9:b4:0d:18:86:53:86:39:f1:db:02:5c:
e2:86:ca:73:ed:2b:83:37:fb:73:d3:5a:29:3b:8e:00:f9:5f:
8d:c7:6b:5a:79:a2:06:85:13:a9:85:7f:37:2c:79:d4:ab:fa:
07:2d:37:70
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWPhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTM0MDIyWhcNMjgwMjE5MTM0MDIyWjAYMRYw
FAYDVQQDEw02N2JmMTljOS04Y2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvA/SvbzluGl5PzTCUfKZDkXI9HVxfJS6tXLAiPv0yrKKqE5oxtXDdgQS
PZnFFotlwcFMcztlSsHCSBLbdJJZEkZ3awa9zBMJytXiNLWkK9T1JKYQRV0puDdi
0ztRuDVV7XU0VBTtr61VQfZi6V5vx+HUaJoVI9IGjIRqOSLX3rT8cqV070T3uhR7
PqVi95o9CY9t4kM1qUKwMCmX5ad3sypwS0X2f9JeCpL4y3fv80rj+Cdj22kQvulY
CSFGfkcMAmCWyq0NHpqY2wZTFKTq76xy+8pHOI7EdNYAMYMAD0MbbiUy1YIZD+QP
p9lz7q4KJ82u4up0+Bd0Pz0ozhNzEQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCMp
nde2kBa7rwKTRJ2pczG8u1WfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQkJFODgzMkY0NDcxMUVGOTdBNEQ5Nzc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlK4MA0GCSqGSIb3DQEB
CwUAA4IBAQBrsj7CTzFAO131+mWJoUKUPglHJpIQUcA5UFsNbm4m7jc82EuovH2D
xdfb3UrTFAUCET7jgB9hE97LEZGeHDGA3mXqEh8lH1IxIzvtfiouyR4Vm25wDnPF
rz2dO/hNVFJjoB2m/PT/vKrd3FHu+Bn0i0ZSKN8MTMlwPTCAIdcw1aQD6hn4ohoN
ZkF6s+eYW0DIdLv9119KKV1MKrdcpD+yz8PZkbrFy8v3A1FHQF4JxtRjEETUbsrV
y+cIq//WlnoFslEjSBoZexrYknm5tA0YhlOGOfHbAlzihspz7SuDN/tz01opO44A
+V+Nx2taeaIGhROphX83LHnUq/oHLTdw
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:13 2025 by rpki-client