Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4416F83CC92E11EFB9716860762E951A.roa
File: 4416F83CC92E11EFB9716860762E951A.roa (raw, json)
Hash identifier: e5VFQRr8DX/HCpZaDohYSZjiOKh6ogYtKJFt4f0TR30=
Subject key identifier: 31:6E:58:1C:05:28:9E:68:4A:25:EE:E5:17:85:15:68:6C:2E:35:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013395
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4416F83CC92E11EFB9716860762E951A.roa
Signing time: Thu 02 Jan 2025 17:23:22 +0000
ROA not before: Thu 02 Jan 2025 17:23:18 +0000
ROA not after: Mon 13 Dec 2027 17:23:18 +0000
asID: 17561
IP address blocks: 154.222.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78741 (0x13395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 17:23:18 2025 GMT
Not After : Dec 13 17:23:18 2027 GMT
Subject: CN=6776cb8a-d56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:34:7e:ab:ca:0d:48:6c:e6:9b:a2:a8:52:f0:
65:a5:b2:60:ff:32:d8:bf:f9:9e:b4:95:f4:06:91:
74:8b:10:bc:7d:a4:6f:4c:e6:9d:45:7e:22:e0:2e:
60:35:24:99:6c:e8:73:fc:cc:8f:fd:14:2c:fa:1c:
3e:a1:e7:04:3d:68:5c:fe:97:7c:0d:48:62:b8:ad:
ab:58:3c:43:23:40:49:e1:28:12:89:af:5d:21:44:
e6:98:fb:e5:a7:a2:38:61:77:fe:c3:7e:fd:ba:50:
c4:e1:eb:1d:bc:5c:5e:e9:54:4b:9c:56:9b:e1:8e:
02:3b:39:7f:6e:cf:17:c8:ca:e0:15:60:5a:d1:4c:
74:3d:b9:82:f0:4d:31:16:a0:61:9e:86:a4:ba:11:
08:4c:da:0a:59:8a:9c:4d:85:5f:8c:1c:b0:20:5c:
e7:90:0c:46:a9:36:d9:ec:49:b2:5d:30:19:83:91:
e0:55:5f:f5:f6:68:e3:1b:9f:ed:41:1a:ad:43:9c:
18:5d:f6:eb:a1:0e:55:3e:96:9a:d4:f2:a6:d3:04:
09:9b:e2:75:29:44:65:11:f2:7c:e5:74:ff:1c:69:
f9:4e:e1:8f:65:2b:32:ad:77:5a:9c:12:ed:51:e8:
c3:0a:c2:0f:fb:d0:77:ad:b7:9a:f6:9e:6d:78:df:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6E:58:1C:05:28:9E:68:4A:25:EE:E5:17:85:15:68:6C:2E:35:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4416F83CC92E11EFB9716860762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.151.0/24
Signature Algorithm: sha256WithRSAEncryption
76:89:dd:58:d8:77:c4:fa:fb:ba:03:1a:15:c0:39:13:fa:6f:
dd:1a:5d:95:1f:cd:77:82:59:03:0d:20:79:53:a5:39:b0:4d:
8c:35:11:4a:23:35:19:e5:b0:de:34:25:7a:78:e1:56:70:b6:
9b:5d:5b:39:f3:9d:56:f8:05:36:11:1d:e3:2b:51:ed:e7:f1:
d0:42:32:89:68:e1:f9:80:c2:7f:69:ea:f9:dc:b4:cb:d7:67:
06:98:0a:85:d1:81:fd:f9:77:de:28:bf:83:98:e6:a7:55:40:
54:0c:3a:23:c6:05:79:f7:86:07:0b:42:bd:a2:ea:0a:42:41:
84:18:6a:78:d8:15:0d:64:6c:56:14:bc:55:ac:25:7a:71:b5:
a1:cb:cb:10:1e:27:e1:10:e8:3d:79:15:38:8a:18:c1:ab:8f:
74:d7:89:36:3c:5f:ee:65:69:64:c0:34:3a:f1:a3:72:80:b4:
5f:39:32:1e:67:fc:7e:69:21:22:20:3b:b2:41:ba:7f:f4:99:
a1:6d:cb:6c:16:18:e8:46:82:38:73:26:7f:cd:93:2a:e2:ff:
62:83:47:f9:c3:1f:38:e6:29:ee:1d:db:d2:33:27:93:98:ba:
fe:9c:2f:b4:da:9c:cb:a4:5a:65:32:ff:f2:e2:8f:37:ca:be:
54:d6:c8:de
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATOVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTcyMzE4WhcNMjcxMjEzMTcyMzE4WjAYMRYw
FAYDVQQDEw02Nzc2Y2I4YS1kNTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4zR+q8oNSGzmm6KoUvBlpbJg/zLYv/metJX0BpF0ixC8faRvTOadRX4i
4C5gNSSZbOhz/MyP/RQs+hw+oecEPWhc/pd8DUhiuK2rWDxDI0BJ4SgSia9dIUTm
mPvlp6I4YXf+w379ulDE4esdvFxe6VRLnFab4Y4COzl/bs8XyMrgFWBa0Ux0PbmC
8E0xFqBhnoakuhEITNoKWYqcTYVfjBywIFznkAxGqTbZ7EmyXTAZg5HgVV/19mjj
G5/tQRqtQ5wYXfbroQ5VPpaa1PKm0wQJm+J1KURlEfJ85XT/HGn5TuGPZSsyrXda
nBLtUejDCsIP+9B3rbea9p5teN825QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDFu
WBwFKJ5oSiXu5ReFFWhsLjXVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NDE2RjgzQ0M5MkUxMUVGQjk3MTY4NjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt6XMA0GCSqGSIb3DQEB
CwUAA4IBAQB2id1Y2HfE+vu6AxoVwDkT+m/dGl2VH813glkDDSB5U6U5sE2MNRFK
IzUZ5bDeNCV6eOFWcLabXVs5851W+AU2ER3jK1Ht5/HQQjKJaOH5gMJ/aer53LTL
12cGmAqF0YH9+XfeKL+DmOanVUBUDDojxgV594YHC0K9ouoKQkGEGGp42BUNZGxW
FLxVrCV6cbWhy8sQHifhEOg9eRU4ihjBq49014k2PF/uZWlkwDQ68aNygLRfOTIe
Z/x+aSEiIDuyQbp/9JmhbctsFhjoRoI4cyZ/zZMq4v9ig0f5wx845inuHdvSMyeT
mLr+nC+02pzLpFplMv/y4o83yr5U1sje
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:20 2025 by rpki-client