Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82EB3C62C92E11EF8E338662762E951A.roa
File: 82EB3C62C92E11EF8E338662762E951A.roa (raw, json)
Hash identifier: QcddtPK6SgrpH/QLIT+IsZ8Uxdgo3FyhR4e+9EA2Omw=
Subject key identifier: 17:EB:1F:19:92:E1:DE:8D:5D:A4:BE:01:4F:F5:7A:85:11:17:3D:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013397
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82EB3C62C92E11EF8E338662762E951A.roa
Signing time: Thu 02 Jan 2025 17:25:07 +0000
ROA not before: Thu 02 Jan 2025 17:25:04 +0000
ROA not after: Sat 13 Dec 2025 17:25:04 +0000
asID: 984
IP address blocks: 154.222.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78743 (0x13397)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 17:25:04 2025 GMT
Not After : Dec 13 17:25:04 2025 GMT
Subject: CN=6776cbf3-97f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:50:33:f6:a1:9f:2d:1d:4a:41:b3:22:c9:
97:50:5f:57:54:f1:24:72:66:0d:17:f0:e0:cb:f7:
c5:11:c8:89:67:6a:51:69:47:ba:3f:65:53:c2:44:
4c:18:ee:ab:54:3c:f7:55:4a:cb:87:84:d3:0c:0d:
44:fe:75:55:56:59:7a:89:c9:11:27:dd:7d:8d:9c:
46:23:59:17:e4:dc:45:ae:fd:2c:ee:6c:b5:5f:0f:
aa:e9:a2:da:1b:6a:0c:00:5e:b9:e2:bc:cc:8c:4f:
b1:8f:32:99:2c:80:6b:8c:e6:1e:c8:e8:20:7d:c9:
14:02:47:b8:b3:f7:b9:da:c1:f0:48:8c:de:e6:16:
60:19:f0:af:78:89:f7:6a:b6:b5:bd:9c:a2:b4:a8:
4e:44:d0:74:d8:f4:2b:92:48:40:06:16:0d:22:ac:
f5:2a:53:d2:f2:a6:0d:f7:6a:d5:02:27:dd:97:64:
9f:80:85:fb:4a:49:a4:87:4e:83:f9:72:95:0d:e9:
83:38:46:c9:0f:b8:50:72:54:93:cf:1f:7e:dc:96:
47:96:0f:cb:7f:c3:45:c5:b4:5e:40:1e:6e:d5:32:
27:78:0c:e2:60:e8:f0:73:f5:d5:fe:51:cb:24:f3:
9d:8a:7a:a9:ed:92:71:16:d2:7d:16:f8:1c:7e:1a:
87:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EB:1F:19:92:E1:DE:8D:5D:A4:BE:01:4F:F5:7A:85:11:17:3D:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82EB3C62C92E11EF8E338662762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.152.0/24
Signature Algorithm: sha256WithRSAEncryption
03:98:6a:f8:7e:61:fd:84:5b:fe:b5:21:95:cc:c7:1e:9d:03:
3a:2b:8b:bc:91:f3:b1:58:80:fa:69:6a:cb:e5:8c:f7:6d:93:
a2:74:fe:c2:ab:c3:ff:76:8d:b5:35:77:cd:2c:e2:60:81:21:
d4:a4:57:40:47:fd:7f:68:43:a6:42:41:4a:2a:02:70:59:9e:
5e:1a:e7:52:9e:2a:64:e0:e2:23:80:08:6d:c9:a7:d5:5b:4c:
b1:b9:7b:22:a4:41:89:65:c2:64:7a:22:d7:43:1e:5d:08:be:
53:d6:80:5a:8d:b7:d9:ac:75:0b:81:f8:47:ea:02:c5:f8:17:
22:0b:67:e6:d8:a5:87:f9:c9:82:59:12:35:74:e2:ac:31:5d:
40:0e:54:99:c2:df:d1:0b:d5:06:ab:72:61:74:2b:76:60:73:
b8:d2:a7:18:44:0d:31:0c:25:aa:c2:f6:15:fc:b9:69:8f:66:
43:59:43:7f:a1:f9:10:a7:6d:4b:36:30:ac:c8:e3:d7:33:af:
52:a0:b8:31:8f:3d:10:fc:4e:2d:0b:70:09:5a:d7:de:94:3b:
d3:d4:e0:a0:66:24:a1:b5:50:49:90:9e:d7:8d:be:9c:0c:78:
46:72:3a:ee:74:65:9d:28:af:63:91:a0:a9:f2:45:a4:07:11:
9b:45:a9:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATOXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTcyNTA0WhcNMjUxMjEzMTcyNTA0WjAYMRYw
FAYDVQQDEw02Nzc2Y2JmMy05N2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2YFQM/ahny0dSkGzIsmXUF9XVPEkcmYNF/Dgy/fFEciJZ2pRaUe6P2VT
wkRMGO6rVDz3VUrLh4TTDA1E/nVVVll6ickRJ919jZxGI1kX5NxFrv0s7my1Xw+q
6aLaG2oMAF654rzMjE+xjzKZLIBrjOYeyOggfckUAke4s/e52sHwSIze5hZgGfCv
eIn3ara1vZyitKhORNB02PQrkkhABhYNIqz1KlPS8qYN92rVAifdl2SfgIX7Skmk
h06D+XKVDemDOEbJD7hQclSTzx9+3JZHlg/Lf8NFxbReQB5u1TIneAziYOjwc/XV
/lHLJPOdinqp7ZJxFtJ9FvgcfhqHfQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBfr
HxmS4d6NXaS+AU/1eoURFz1/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MkVCM0M2MkM5MkUxMUVGOEUzMzg2NjI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt6YMA0GCSqGSIb3DQEB
CwUAA4IBAQADmGr4fmH9hFv+tSGVzMcenQM6K4u8kfOxWID6aWrL5Yz3bZOidP7C
q8P/do21NXfNLOJggSHUpFdAR/1/aEOmQkFKKgJwWZ5eGudSnipk4OIjgAhtyafV
W0yxuXsipEGJZcJkeiLXQx5dCL5T1oBajbfZrHULgfhH6gLF+BciC2fm2KWH+cmC
WRI1dOKsMV1ADlSZwt/RC9UGq3JhdCt2YHO40qcYRA0xDCWqwvYV/Llpj2ZDWUN/
ofkQp21LNjCsyOPXM69SoLgxjz0Q/E4tC3AJWtfelDvT1OCgZiShtVBJkJ7Xjb6c
DHhGcjrudGWdKK9jkaCp8kWkBxGbRamw
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:31 2025 by rpki-client