Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B330E7E4C53911EF91F727BD762E951A.roa
File: B330E7E4C53911EF91F727BD762E951A.roa (raw, json)
Hash identifier: i0ax9eqBJsvSJjhIO6XVggnqHH6CWn3ktM/4l9/nhUQ=
Subject key identifier: E8:81:8D:15:9C:FA:82:53:2F:FB:C2:90:A7:53:2A:0F:70:F4:53:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C39
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B330E7E4C53911EF91F727BD762E951A.roa
Signing time: Sat 28 Dec 2024 16:35:08 +0000
ROA not before: Sat 28 Dec 2024 16:35:04 +0000
ROA not after: Sun 12 Dec 2027 16:35:04 +0000
asID: 17561
IP address blocks: 154.205.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76857 (0x12c39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 16:35:04 2024 GMT
Not After : Dec 12 16:35:04 2027 GMT
Subject: CN=677028bc-fa7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:88:69:26:b6:13:f9:47:4f:ed:b1:a0:b6:
19:f5:e8:73:29:ad:aa:f0:5f:f3:02:4a:04:9f:f0:
c6:f2:26:12:f2:4a:92:b4:84:af:3f:7e:a7:47:7b:
38:e3:6a:5c:9c:58:64:7f:ca:63:72:a4:36:55:67:
fb:d0:39:46:c8:f3:0a:0d:a3:be:a1:5f:75:99:dc:
1c:f6:35:c4:7c:20:ec:e2:ab:49:3f:da:98:72:d5:
ca:27:c4:3a:ed:c5:2e:a6:10:9c:4e:63:4b:4b:63:
35:63:ea:f2:7d:aa:1b:51:c7:87:3c:48:de:fd:62:
df:21:4a:d1:34:7e:67:f2:b8:f5:65:8b:d4:6b:43:
8e:03:34:37:15:40:07:ff:46:3d:c9:c2:7e:1c:fb:
3f:b5:10:45:ff:47:06:b3:85:a0:a0:73:2d:3e:06:
5d:5f:3b:02:c7:59:cc:5a:96:80:30:8f:72:a1:d2:
c6:5b:2a:ba:53:74:25:67:6d:8c:01:39:77:89:f8:
fa:77:4f:0a:5e:cd:7d:3d:08:6c:15:e4:43:b7:56:
78:94:da:c6:4f:0b:65:4c:e6:be:ea:a4:55:d7:bf:
f9:d1:a9:47:61:ff:f0:e5:69:9c:ca:38:71:16:5b:
fa:09:51:0d:06:5e:f1:2f:9a:cd:0a:03:f4:9f:ee:
44:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:81:8D:15:9C:FA:82:53:2F:FB:C2:90:A7:53:2A:0F:70:F4:53:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B330E7E4C53911EF91F727BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.37.0/24
Signature Algorithm: sha256WithRSAEncryption
86:a0:f4:a7:15:f1:e0:35:50:6c:ea:17:6a:ab:8b:59:f6:2e:
7d:03:5c:9a:d9:34:cc:4e:06:4f:07:d1:41:ed:15:91:bf:13:
4f:db:16:3f:32:2a:48:4a:dc:bb:a9:5f:07:8b:26:1c:57:e2:
f2:94:18:9c:70:6f:b1:fa:a1:b3:b6:5f:09:4f:f3:b2:ae:63:
79:20:11:1e:48:ac:eb:e4:db:7f:9e:9f:95:39:0e:e5:72:97:
b0:54:f4:cd:56:7a:3a:64:da:8f:33:cb:bf:22:2e:fc:49:18:
c2:6b:8d:cc:fd:5f:89:27:f6:38:a3:b6:01:e9:2c:71:10:cc:
0d:6b:e4:00:58:9c:65:4b:67:0e:77:90:17:32:73:2e:22:b7:
51:f3:32:48:91:18:a6:08:ed:7b:9a:c9:ea:09:bc:33:01:d8:
0a:e8:cd:a4:18:b5:4a:7b:1d:98:b2:c4:4a:f6:97:18:42:1c:
72:7e:6e:e5:d2:ba:7d:20:ad:32:71:bd:7d:c4:60:5b:c1:09:
0b:57:0f:cc:18:2d:b8:ce:fd:fb:b3:bb:24:fa:92:1e:8b:30:
d8:a8:84:2b:95:6f:b1:9a:01:87:44:17:91:83:35:91:2e:5f:
48:26:4f:03:70:7d:99:68:72:96:30:8c:78:54:45:71:f1:72:
53:7c:e0:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASw5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTYzNTA0WhcNMjcxMjEyMTYzNTA0WjAYMRYw
FAYDVQQDEw02NzcwMjhiYy1mYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1xyIaSa2E/lHT+2xoLYZ9ehzKa2q8F/zAkoEn/DG8iYS8kqStISvP36n
R3s442pcnFhkf8pjcqQ2VWf70DlGyPMKDaO+oV91mdwc9jXEfCDs4qtJP9qYctXK
J8Q67cUuphCcTmNLS2M1Y+ryfaobUceHPEje/WLfIUrRNH5n8rj1ZYvUa0OOAzQ3
FUAH/0Y9ycJ+HPs/tRBF/0cGs4WgoHMtPgZdXzsCx1nMWpaAMI9yodLGWyq6U3Ql
Z22MATl3ifj6d08KXs19PQhsFeRDt1Z4lNrGTwtlTOa+6qRV17/50alHYf/w5Wmc
yjhxFlv6CVENBl7xL5rNCgP0n+5EOQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOiB
jRWc+oJTL/vCkKdTKg9w9FM7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMzMwRTdFNEM1MzkxMUVGOTFGNzI3QkQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms0lMA0GCSqGSIb3DQEB
CwUAA4IBAQCGoPSnFfHgNVBs6hdqq4tZ9i59A1ya2TTMTgZPB9FB7RWRvxNP2xY/
MipISty7qV8HiyYcV+LylBiccG+x+qGztl8JT/OyrmN5IBEeSKzr5Nt/np+VOQ7l
cpewVPTNVno6ZNqPM8u/Ii78SRjCa43M/V+JJ/Y4o7YB6SxxEMwNa+QAWJxlS2cO
d5AXMnMuIrdR8zJIkRimCO17msnqCbwzAdgK6M2kGLVKex2YssRK9pcYQhxyfm7l
0rp9IK0ycb19xGBbwQkLVw/MGC24zv37s7sk+pIeizDYqIQrlW+xmgGHRBeRgzWR
Ll9IJk8DcH2ZaHKWMIx4VEVx8XJTfOC2
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:39 2025 by rpki-client