Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/792F3CD8D99011EF85E05446762E951A.roa
File: 792F3CD8D99011EF85E05446762E951A.roa (raw, json)
Hash identifier: JhUYn+3F3o7Wsj9DM8aIRdAgzbIwJDxuZ54OpOkAnx8=
Subject key identifier: 19:91:8C:FE:FF:EB:60:62:9F:1E:EF:39:42:C7:30:54:43:9D:78:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01428A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/792F3CD8D99011EF85E05446762E951A.roa
Signing time: Thu 23 Jan 2025 13:46:40 +0000
ROA not before: Thu 23 Jan 2025 13:46:37 +0000
ROA not after: Tue 13 May 2025 13:46:37 +0000
asID: 138915
IP address blocks: 154.205.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82570 (0x1428a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 23 13:46:37 2025 GMT
Not After : May 13 13:46:37 2025 GMT
Subject: CN=67924840-7571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:24:87:ba:0d:54:b0:81:00:88:2f:28:0c:
fa:bd:3d:50:66:54:1e:5a:d9:78:52:13:0d:a2:61:
4a:a8:c0:05:40:a2:5e:28:e4:e2:3c:62:ce:52:9e:
69:67:79:df:fe:ee:09:3a:74:1a:da:b5:82:55:87:
25:8b:3f:9b:35:ec:85:71:d0:d4:bc:62:fd:3b:19:
c7:65:81:26:85:ae:17:94:e2:81:20:21:2f:e1:fc:
62:a3:71:7f:11:ef:ec:ad:c2:26:5c:f0:f5:13:f1:
67:87:2b:7f:e7:30:d0:50:b0:b5:fc:d3:8c:02:06:
19:d0:1a:88:89:37:b8:a9:2d:02:a0:51:f3:90:7c:
94:e8:97:fc:2f:cb:a2:9b:9e:0e:65:be:29:dd:16:
1b:9c:b1:12:68:30:2f:2a:f7:cd:d2:65:2b:80:16:
53:eb:7d:f1:4f:7b:e9:26:72:9a:a5:7f:29:0d:72:
fe:3b:aa:01:bf:21:bc:b3:a8:0f:83:6a:b8:6e:24:
81:d9:ff:2f:e4:17:07:77:ac:7a:c0:c0:a2:5d:b9:
c9:87:71:0f:ea:13:c9:d4:3d:0e:ba:e4:9f:33:16:
2c:28:e2:4f:58:ed:e6:71:ff:9b:3d:a0:84:15:6a:
0f:f8:90:0a:83:28:89:91:7c:34:52:0b:df:48:60:
b6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:91:8C:FE:FF:EB:60:62:9F:1E:EF:39:42:C7:30:54:43:9D:78:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/792F3CD8D99011EF85E05446762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.152.0/24
Signature Algorithm: sha256WithRSAEncryption
51:32:12:25:48:c9:40:dd:e5:72:c4:5b:74:4f:44:b8:8e:ce:
3e:26:86:10:38:47:05:bb:0f:f9:5c:ee:11:26:46:63:d5:90:
1c:16:66:b9:50:2c:2d:c0:e4:4b:fc:c1:2a:ca:75:ed:1b:f2:
91:1a:83:3d:03:9d:70:ae:c5:ea:6f:93:9b:c1:3d:27:b2:f1:
ff:3e:9e:98:42:65:2b:53:14:26:2c:33:83:45:ee:d1:65:2d:
e3:df:0e:81:a8:f7:74:a3:b1:f0:a3:f7:de:97:a1:81:53:ca:
94:de:15:81:bf:fd:c6:37:49:2f:ba:36:87:b9:9d:dc:3d:b0:
1f:1b:8f:4a:8d:17:20:9e:e3:1a:bf:d8:ee:a2:76:9f:86:45:
dc:d8:a2:49:4c:18:af:02:df:35:e9:fd:d1:cb:cd:31:56:8b:
4f:92:29:a9:27:5f:bf:8f:7e:32:15:4c:56:e9:ee:a5:08:1a:
98:cd:c4:89:5f:aa:20:50:01:7d:ee:fa:02:a4:2d:af:8e:ac:
97:8e:d5:b1:9a:c2:bd:fe:30:ac:ff:bb:25:2c:f7:4e:71:41:
89:cb:6b:b3:63:c3:84:80:28:4e:c2:4e:cc:28:1f:cd:17:a2:
63:d5:24:dc:bc:d4:06:fb:57:09:1b:31:02:b5:0e:b2:9a:57:
db:81:94:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUKKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTM0NjM3WhcNMjUwNTEzMTM0NjM3WjAYMRYw
FAYDVQQDEw02NzkyNDg0MC03NTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3okkh7oNVLCBAIgvKAz6vT1QZlQeWtl4UhMNomFKqMAFQKJeKOTiPGLO
Up5pZ3nf/u4JOnQa2rWCVYcliz+bNeyFcdDUvGL9OxnHZYEmha4XlOKBICEv4fxi
o3F/Ee/srcImXPD1E/Fnhyt/5zDQULC1/NOMAgYZ0BqIiTe4qS0CoFHzkHyU6Jf8
L8uim54OZb4p3RYbnLESaDAvKvfN0mUrgBZT633xT3vpJnKapX8pDXL+O6oBvyG8
s6gPg2q4biSB2f8v5BcHd6x6wMCiXbnJh3EP6hPJ1D0OuuSfMxYsKOJPWO3mcf+b
PaCEFWoP+JAKgyiJkXw0UgvfSGC2aQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBmR
jP7/62Binx7vOULHMFRDnXiCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OTJGM0NEOEQ5OTAxMUVGODVFMDU0NDY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms2YMA0GCSqGSIb3DQEB
CwUAA4IBAQBRMhIlSMlA3eVyxFt0T0S4js4+JoYQOEcFuw/5XO4RJkZj1ZAcFma5
UCwtwORL/MEqynXtG/KRGoM9A51wrsXqb5ObwT0nsvH/Pp6YQmUrUxQmLDODRe7R
ZS3j3w6BqPd0o7Hwo/fel6GBU8qU3hWBv/3GN0kvujaHuZ3cPbAfG49KjRcgnuMa
v9juonafhkXc2KJJTBivAt816f3Ry80xVotPkimpJ1+/j34yFUxW6e6lCBqYzcSJ
X6ogUAF97voCpC2vjqyXjtWxmsK9/jCs/7slLPdOcUGJy2uzY8OEgChOwk7MKB/N
F6Jj1STcvNQG+1cJGzECtQ6ymlfbgZTP
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:48 2025 by rpki-client