Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4154E2C0A1511F0BDA8325A762E951A.roa
File: B4154E2C0A1511F0BDA8325A762E951A.roa (raw, json)
Hash identifier: NpnxzZiAgFjSNUIrcn9bx5lM+f+xBzq458L7EDtb5Sk=
Subject key identifier: 0A:71:41:66:94:1E:11:63:DF:E0:AA:2B:73:4C:76:DB:70:F2:99:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017657
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4154E2C0A1511F0BDA8325A762E951A.roa
Signing time: Wed 26 Mar 2025 07:41:18 +0000
ROA not before: Wed 26 Mar 2025 07:41:14 +0000
ROA not after: Sat 03 May 2025 07:41:14 +0000
asID: 19318
IP address blocks: 154.82.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95831 (0x17657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 26 07:41:14 2025 GMT
Not After : May 3 07:41:14 2025 GMT
Subject: CN=67e3af9e-fdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:d2:aa:e9:34:b8:ad:2d:1c:a3:b7:8b:9d:
f1:cb:59:40:d0:ba:16:cb:e7:a4:0a:b0:62:77:53:
ee:a9:2b:48:15:7d:b8:cf:f5:90:35:be:55:ba:7b:
0a:76:7c:d0:40:e9:46:88:6f:13:bc:7f:ec:5e:98:
d2:62:8f:19:98:e6:b7:84:3c:d2:18:b2:81:46:53:
72:e8:f5:9b:be:70:e3:a1:71:44:43:23:5d:67:25:
e4:36:62:57:53:06:f6:1a:b0:31:ba:07:3e:57:bf:
e1:85:39:50:c1:db:00:b4:37:9a:cc:b7:67:a4:6e:
ef:a3:ae:87:d2:d9:45:65:e1:35:4a:a3:6c:db:b8:
fc:88:54:fb:f4:9a:25:5c:36:49:dd:b7:a4:0a:b2:
33:2e:6b:ea:c9:00:44:7f:08:f6:ac:9b:bb:f1:81:
f9:57:ef:db:94:3f:37:aa:ea:87:e1:76:32:07:52:
2c:5f:20:c4:b9:1a:f7:66:da:d1:59:f5:b1:fd:61:
ce:eb:a6:a4:2f:11:1f:ec:ff:b1:af:cf:c5:4a:a2:
64:27:65:87:62:e7:6c:3c:e5:14:b4:b9:87:b8:67:
c8:21:b4:02:84:51:dd:a4:12:74:8a:e2:3b:7a:0c:
49:21:a9:54:a4:b2:45:90:2a:c2:0a:50:53:f0:d0:
8b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:71:41:66:94:1E:11:63:DF:E0:AA:2B:73:4C:76:DB:70:F2:99:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4154E2C0A1511F0BDA8325A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.22.0/23
Signature Algorithm: sha256WithRSAEncryption
55:b4:0f:d3:71:ab:4c:f0:6d:da:7d:bf:8d:67:c2:a3:89:73:
64:9d:3b:63:2b:61:76:4e:06:7a:d3:c9:bc:d4:7a:21:20:5b:
2f:ab:01:51:6b:19:33:cb:6d:6d:b4:be:a1:06:68:4d:de:b0:
a9:ab:c4:44:0b:3b:d1:5d:b8:00:0c:87:1a:7a:65:f9:eb:e6:
5e:c3:30:6c:9b:b3:8a:db:11:28:ec:4d:e5:9f:57:79:d0:10:
2f:52:37:ce:66:83:6e:03:b4:b3:3e:62:a2:94:57:3b:ca:69:
ce:61:7f:fa:7c:ff:d3:6c:3a:45:0b:3f:47:a1:85:d1:5e:7d:
99:4e:9a:f2:de:81:b4:e0:79:29:6e:5f:5e:e1:be:76:df:62:
13:e1:7e:79:31:14:30:2b:0d:93:d7:91:90:80:24:32:07:c8:
ce:60:fb:e9:00:eb:85:dd:2b:bf:48:d7:08:a4:a9:c8:b9:4a:
92:1c:cd:b9:77:77:d2:be:86:86:16:1e:be:b0:c7:61:f3:79:
13:63:ed:8c:4b:05:74:59:55:aa:e3:67:85:d7:7f:55:57:65:
64:91:54:8e:09:d1:89:97:7d:0c:52:96:56:40:7a:74:24:53:
b6:18:9d:6d:15:17:55:a6:3c:9f:41:4d:9d:2b:11:cd:8a:af:
26:0b:66:07
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXZXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzI2MDc0MTE0WhcNMjUwNTAzMDc0MTE0WjAYMRYw
FAYDVQQDEw02N2UzYWY5ZS1mZGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApBzSquk0uK0tHKO3i53xy1lA0LoWy+ekCrBid1PuqStIFX24z/WQNb5V
unsKdnzQQOlGiG8TvH/sXpjSYo8ZmOa3hDzSGLKBRlNy6PWbvnDjoXFEQyNdZyXk
NmJXUwb2GrAxugc+V7/hhTlQwdsAtDeazLdnpG7vo66H0tlFZeE1SqNs27j8iFT7
9JolXDZJ3bekCrIzLmvqyQBEfwj2rJu78YH5V+/blD83quqH4XYyB1IsXyDEuRr3
ZtrRWfWx/WHO66akLxEf7P+xr8/FSqJkJ2WHYudsPOUUtLmHuGfIIbQChFHdpBJ0
iuI7egxJIalUpLJFkCrCClBT8NCLYwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFApx
QWaUHhFj3+CqK3NMdttw8pmpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNDE1NEUyQzBBMTUxMUYwQkRBODMyNUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlIWMA0GCSqGSIb3DQEB
CwUAA4IBAQBVtA/TcatM8G3afb+NZ8KjiXNknTtjK2F2TgZ608m81HohIFsvqwFR
axkzy21ttL6hBmhN3rCpq8RECzvRXbgADIcaemX56+ZewzBsm7OK2xEo7E3ln1d5
0BAvUjfOZoNuA7SzPmKilFc7ymnOYX/6fP/TbDpFCz9HoYXRXn2ZTpry3oG04Hkp
bl9e4b5232IT4X55MRQwKw2T15GQgCQyB8jOYPvpAOuF3Su/SNcIpKnIuUqSHM25
d3fSvoaGFh6+sMdh83kTY+2MSwV0WVWq42eF139VV2VkkVSOCdGJl30MUpZWQHp0
JFO2GJ1tFRdVpjyfQU2dKxHNiq8mC2YH
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:49 2025 by rpki-client