Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/752CCA64C8BB11EF81803092762E951A.roa
File: 752CCA64C8BB11EF81803092762E951A.roa (raw, json)
Hash identifier: O8QJQ7AWTZQKzic4710vWIg5csCdVuGxp9LLJqSdxMQ=
Subject key identifier: CD:78:88:84:34:FA:67:99:3D:3E:68:80:4A:6E:B6:F3:01:98:C0:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/752CCA64C8BB11EF81803092762E951A.roa
Signing time: Thu 02 Jan 2025 03:41:32 +0000
ROA not before: Thu 02 Jan 2025 03:41:29 +0000
ROA not after: Sat 13 Dec 2025 03:41:29 +0000
asID: 984
IP address blocks: 154.221.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78290 (0x131d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 03:41:29 2025 GMT
Not After : Dec 13 03:41:29 2025 GMT
Subject: CN=67760aec-15f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:3f:37:3c:e8:8d:cd:ea:b5:e9:d6:03:a4:
f7:c6:5f:5d:8e:d0:7a:31:34:f9:58:35:3e:de:e8:
4e:13:b2:d9:01:c0:59:57:07:cc:25:63:3b:81:ce:
01:f7:0e:b9:af:90:0a:b8:5d:98:69:88:70:78:79:
b2:15:1a:d3:06:cb:1e:e3:34:15:ab:f5:16:bb:d1:
f2:65:32:77:cc:f2:3e:cb:78:44:21:70:0e:11:8c:
ad:55:db:5a:67:e6:f3:58:9f:5e:5e:97:9c:ef:70:
af:b3:08:78:f2:48:42:c4:54:5b:15:af:07:eb:59:
3a:2c:f9:90:3f:0b:a7:05:f9:b1:b6:ca:7a:88:ab:
1d:25:88:f6:de:b5:03:52:d8:37:4e:54:d5:b8:ca:
da:10:19:3b:11:6c:3d:c3:ed:bd:29:e4:15:2b:02:
42:34:8b:cb:92:5f:45:93:2b:9e:ae:9d:72:df:12:
69:88:36:a9:4e:6e:47:80:28:d2:18:c6:f7:07:24:
94:bd:2c:e3:68:8a:d9:ae:32:4a:3d:11:c7:48:33:
fb:85:90:ba:0b:37:72:3d:23:08:47:c3:06:12:9e:
97:ec:66:10:ec:46:cb:2c:96:ac:de:69:c3:b5:16:
c8:8a:30:98:64:d6:3f:c1:c3:8a:99:0c:75:e9:aa:
13:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:78:88:84:34:FA:67:99:3D:3E:68:80:4A:6E:B6:F3:01:98:C0:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/752CCA64C8BB11EF81803092762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.41.0/24
Signature Algorithm: sha256WithRSAEncryption
34:aa:2a:a1:84:09:72:a4:2a:86:d9:7a:c4:05:1c:af:e9:5b:
a3:17:47:5b:01:5e:7f:f3:5f:e3:75:4b:32:bc:14:43:68:af:
9d:64:f4:fc:37:52:fc:cc:3d:c6:73:71:72:e2:c0:bf:35:43:
4d:25:c6:58:1b:44:56:bc:e3:95:96:38:83:2a:db:fc:8d:1c:
da:1b:99:3f:c2:fe:26:72:cf:5c:70:9a:c7:3b:11:e4:b7:5e:
28:2e:a9:f8:16:f1:6a:11:8e:60:40:cd:67:19:83:09:53:d2:
e3:14:ea:4f:1f:f9:83:55:c0:ba:bc:97:fa:3f:91:6a:23:08:
fe:38:1a:d9:84:97:4b:46:f2:34:22:37:cf:dc:39:0d:67:eb:
5c:0b:e8:b2:c6:a6:c8:92:ad:f4:a8:90:77:58:ce:14:4a:01:
a9:8f:ab:35:ae:38:70:9b:61:77:62:7b:6c:18:21:d9:d4:95:
ff:dd:36:cf:d4:84:44:cd:42:f1:77:0c:a1:0b:47:b5:8a:8f:
35:aa:b2:b8:cb:e2:0d:83:98:0f:a6:62:98:07:ba:1f:4f:76:
d1:a3:60:62:4e:af:6b:a4:f0:fb:91:79:e2:47:9e:5e:de:82:
2a:9a:37:c8:7d:90:8d:0b:91:f0:9e:80:32:f7:bd:89:4f:d4:
1c:1b:59:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATHSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMDM0MTI5WhcNMjUxMjEzMDM0MTI5WjAYMRYw
FAYDVQQDEw02Nzc2MGFlYy0xNWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2BM/Nzzojc3qtenWA6T3xl9djtB6MTT5WDU+3uhOE7LZAcBZVwfMJWM7
gc4B9w65r5AKuF2YaYhweHmyFRrTBsse4zQVq/UWu9HyZTJ3zPI+y3hEIXAOEYyt
VdtaZ+bzWJ9eXpec73Cvswh48khCxFRbFa8H61k6LPmQPwunBfmxtsp6iKsdJYj2
3rUDUtg3TlTVuMraEBk7EWw9w+29KeQVKwJCNIvLkl9Fkyuerp1y3xJpiDapTm5H
gCjSGMb3BySUvSzjaIrZrjJKPRHHSDP7hZC6CzdyPSMIR8MGEp6X7GYQ7EbLLJas
3mnDtRbIijCYZNY/wcOKmQx16aoTSwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM14
iIQ0+meZPT5ogEputvMBmMCRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NTJDQ0E2NEM4QkIxMUVGODE4MDMwOTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt0pMA0GCSqGSIb3DQEB
CwUAA4IBAQA0qiqhhAlypCqG2XrEBRyv6VujF0dbAV5/81/jdUsyvBRDaK+dZPT8
N1L8zD3Gc3Fy4sC/NUNNJcZYG0RWvOOVljiDKtv8jRzaG5k/wv4mcs9ccJrHOxHk
t14oLqn4FvFqEY5gQM1nGYMJU9LjFOpPH/mDVcC6vJf6P5FqIwj+OBrZhJdLRvI0
IjfP3DkNZ+tcC+iyxqbIkq30qJB3WM4USgGpj6s1rjhwm2F3YntsGCHZ1JX/3TbP
1IREzULxdwyhC0e1io81qrK4y+INg5gPpmKYB7ofT3bRo2BiTq9rpPD7kXniR55e
3oIqmjfIfZCNC5HwnoAy972JT9QcG1lP
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:30:46 2025 by rpki-client