Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D82A5BAF67E11EFA23699BA762E951A.roa
File: 4D82A5BAF67E11EFA23699BA762E951A.roa (raw, json)
Hash identifier: c662lIp+hdiE8RxoaYM31RN8Hd/9/wtXS0G3nA2O7to=
Subject key identifier: 53:AF:79:29:50:F7:33:6F:D8:07:45:A8:3E:DB:A2:33:85:3D:D1:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D82A5BAF67E11EFA23699BA762E951A.roa
Signing time: Sat 01 Mar 2025 09:19:40 +0000
ROA not before: Sat 01 Mar 2025 09:19:36 +0000
ROA not after: Mon 31 Mar 2025 09:19:36 +0000
asID: 48031
IP address blocks: 154.218.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93582 (0x16d8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 09:19:36 2025 GMT
Not After : Mar 31 09:19:36 2025 GMT
Subject: CN=67c2d12c-4577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:0d:df:34:16:70:8d:c4:95:20:88:c8:ec:
14:bd:59:ef:df:1d:b3:10:63:24:27:ed:21:88:a0:
da:ac:b6:f1:40:54:ae:05:6b:25:c5:54:a9:df:fb:
9a:ee:c3:ba:48:04:11:c3:63:78:45:6a:e2:74:ef:
04:99:0b:0d:71:56:05:29:07:7e:29:1b:30:fd:49:
f7:9e:07:97:c3:f1:3d:ae:82:e3:82:7d:af:02:10:
83:3e:8f:ab:7e:bf:6c:0d:40:77:81:a8:7d:d9:f5:
1e:26:7b:d5:cf:87:16:62:77:47:43:74:15:01:5f:
b1:36:72:6c:a8:a2:01:0a:7c:4f:12:a5:f3:3d:0b:
3f:fb:7e:0b:11:82:d2:2a:74:72:19:ee:44:11:79:
98:db:ce:06:e8:0a:15:32:a8:dd:b3:3a:68:0b:3a:
75:d5:9b:79:65:77:08:44:bc:43:e1:84:d4:5d:f9:
b2:e9:6c:45:c8:c5:c6:f7:ff:bb:9a:ee:f5:f0:41:
aa:36:65:fc:1c:69:7e:cc:04:62:fd:1d:4c:6c:7c:
28:a6:4f:f1:ad:fa:6f:6f:9f:d8:c1:ad:e0:13:c4:
9f:91:4a:b4:06:18:60:4b:a9:7e:a0:6b:60:34:df:
b1:be:38:08:2e:b8:08:f1:45:15:28:0f:98:e6:46:
aa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AF:79:29:50:F7:33:6F:D8:07:45:A8:3E:DB:A2:33:85:3D:D1:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D82A5BAF67E11EFA23699BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.22.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:7a:19:c5:84:00:8c:fa:6b:29:2d:fe:34:79:b2:69:3f:fa:
d6:70:47:89:73:ed:4a:7b:09:54:8b:77:35:e0:c1:6e:52:bc:
8e:f6:3a:5f:fe:7a:39:86:1d:1e:74:6b:76:ab:99:71:a5:09:
b2:14:06:90:be:55:e1:80:ea:9d:b5:07:c1:fa:9d:2e:e4:53:
b4:8c:f1:c5:b9:61:c0:59:d1:76:bb:d5:72:d7:d2:88:04:b6:
44:00:86:7c:53:92:c4:9e:95:3e:f5:11:30:53:73:82:b8:8b:
e9:fe:ec:fc:d6:7a:31:a6:38:2f:48:f7:11:5e:03:8c:b8:7e:
b7:1c:da:cf:38:cf:7a:21:8b:59:55:91:7b:d1:86:3a:35:b3:
22:9b:de:ad:3e:8a:ac:92:75:b7:42:c1:92:fd:23:f9:1e:fc:
4d:82:82:71:e0:82:43:1a:8e:f9:30:38:b3:3f:51:45:e9:b7:
4d:c0:57:57:e1:24:b6:0c:3a:43:c2:16:14:d6:23:43:b0:1b:
3c:67:29:e3:e7:55:69:dc:37:71:42:1c:4c:de:9b:3e:b9:08:
e4:70:7a:3a:11:e7:8a:c5:a1:36:4d:61:53:e0:0c:a5:04:6b:
ff:3e:25:28:0d:7f:b3:df:5d:d4:c7:04:2c:d3:1e:a0:22:bc:
9e:58:db:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW2OMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMDkxOTM2WhcNMjUwMzMxMDkxOTM2WjAYMRYw
FAYDVQQDEw02N2MyZDEyYy00NTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwSgN3zQWcI3ElSCIyOwUvVnv3x2zEGMkJ+0hiKDarLbxQFSuBWslxVSp
3/ua7sO6SAQRw2N4RWridO8EmQsNcVYFKQd+KRsw/Un3ngeXw/E9roLjgn2vAhCD
Po+rfr9sDUB3gah92fUeJnvVz4cWYndHQ3QVAV+xNnJsqKIBCnxPEqXzPQs/+34L
EYLSKnRyGe5EEXmY284G6AoVMqjdszpoCzp11Zt5ZXcIRLxD4YTUXfmy6WxFyMXG
9/+7mu718EGqNmX8HGl+zARi/R1MbHwopk/xrfpvb5/Ywa3gE8SfkUq0BhhgS6l+
oGtgNN+xvjgILrgI8UUVKA+Y5kaqiwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFOv
eSlQ9zNv2AdFqD7bojOFPdFuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RDgyQTVCQUY2N0UxMUVGQTIzNjk5QkE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtoWMA0GCSqGSIb3DQEB
CwUAA4IBAQCmehnFhACM+mspLf40ebJpP/rWcEeJc+1KewlUi3c14MFuUryO9jpf
/no5hh0edGt2q5lxpQmyFAaQvlXhgOqdtQfB+p0u5FO0jPHFuWHAWdF2u9Vy19KI
BLZEAIZ8U5LEnpU+9REwU3OCuIvp/uz81noxpjgvSPcRXgOMuH63HNrPOM96IYtZ
VZF70YY6NbMim96tPoqsknW3QsGS/SP5HvxNgoJx4IJDGo75MDizP1FF6bdNwFdX
4SS2DDpDwhYU1iNDsBs8Zynj51Vp3DdxQhxM3ps+uQjkcHo6EeeKxaE2TWFT4Ayl
BGv/PiUoDX+z313UxwQs0x6gIryeWNvr
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:50 2025 by rpki-client