Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B43260960AD011F0971E154B762E951A.roa
File: B43260960AD011F0971E154B762E951A.roa (raw, json)
Hash identifier: hpVQZw9m+/JrL4AalLrrGahzvsLA+qHyweKy07N7n8g=
Subject key identifier: 71:11:27:42:C8:14:24:8F:50:7F:F0:32:4A:2E:8D:DF:7D:48:77:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01767E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B43260960AD011F0971E154B762E951A.roa
Signing time: Thu 27 Mar 2025 05:59:54 +0000
ROA not before: Thu 27 Mar 2025 05:59:49 +0000
ROA not after: Wed 16 Apr 2025 05:59:49 +0000
asID: 19318
IP address blocks: 154.82.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95870 (0x1767e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 27 05:59:49 2025 GMT
Not After : Apr 16 05:59:49 2025 GMT
Subject: CN=67e4e95a-f45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:20:4a:1a:ce:7e:62:3b:79:1f:2f:71:84:
2d:6e:e8:12:58:bc:7e:1a:b7:bd:0c:4d:56:40:af:
b1:07:e5:68:4b:03:aa:94:10:c0:02:f1:88:f8:f3:
8e:58:f1:b5:bd:8f:c0:49:a1:0d:0f:f8:4d:7e:b4:
dc:49:6f:90:62:54:06:14:9a:12:7d:e6:dd:97:79:
45:13:6c:de:75:3b:04:d8:8f:2c:ba:5c:24:9a:ce:
d7:9e:a9:f2:94:3b:73:23:ef:6d:4a:75:da:d5:34:
ab:a3:e3:bd:66:79:80:ed:6d:d9:12:ae:d4:c8:e3:
8f:23:a4:f1:54:5f:7c:6d:46:15:ec:70:a3:a4:b7:
d2:73:c1:52:b2:6c:56:b9:3f:ee:a2:b9:38:2c:ab:
0e:22:1f:a3:a3:9d:84:bb:19:76:a6:c2:66:4f:ee:
97:3a:90:3b:79:cc:7c:d6:ba:07:ef:d3:df:e9:a9:
9a:30:55:30:6a:e9:0d:9e:99:df:1f:2b:de:8b:d4:
7a:b4:53:ab:db:ae:f1:22:bd:5a:f1:02:b0:6b:00:
43:2d:e3:44:45:d8:48:5b:d5:2b:ea:e3:be:f6:1a:
cd:f6:1e:de:0c:b9:72:44:de:37:ee:5e:54:d2:ad:
91:7b:9b:10:9c:b7:d8:09:ee:eb:27:57:97:39:9a:
12:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:11:27:42:C8:14:24:8F:50:7F:F0:32:4A:2E:8D:DF:7D:48:77:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B43260960AD011F0971E154B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.22.0/23
Signature Algorithm: sha256WithRSAEncryption
39:a3:ea:59:9a:93:f8:20:5d:77:a3:24:2b:0c:32:bc:7c:a1:
c0:5d:91:34:e2:10:10:a8:b6:35:57:bf:b6:56:ce:1a:89:be:
20:7f:be:0f:11:ae:29:c1:aa:92:e8:d7:2f:41:f6:2c:b3:2d:
d2:8a:2f:a9:7f:4a:2d:36:b2:01:ea:f9:36:6f:26:08:92:88:
79:e6:a6:f5:45:0b:df:d0:fa:c4:50:a0:12:31:ef:9e:10:91:
81:9e:33:be:07:cc:5b:01:f3:f2:3b:99:ad:18:1b:84:f8:0a:
3c:81:48:aa:0a:8d:88:41:72:18:eb:72:ac:90:e2:bf:1d:d2:
19:20:92:a5:05:69:97:da:a9:ce:6e:ec:01:86:ab:4a:1d:16:
75:8e:19:20:72:23:c3:3b:fa:22:4d:65:22:23:62:54:c2:c7:
d1:c7:0b:13:83:1d:2a:fd:c8:f0:00:66:2d:9d:56:5f:18:a1:
3a:06:ab:45:72:24:1f:22:e7:52:d1:0d:0f:48:de:72:74:7e:
6a:56:95:a6:f2:7b:b7:ee:a6:f7:17:39:7c:d5:31:4b:e7:ae:
05:a8:01:59:d3:05:b5:de:ef:3d:bb:5c:65:b4:51:d4:20:47:
74:99:0e:b8:be:09:d5:5f:ed:43:39:ae:fd:3f:ef:b8:44:59:
a4:be:96:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXZ+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzI3MDU1OTQ5WhcNMjUwNDE2MDU1OTQ5WjAYMRYw
FAYDVQQDEw02N2U0ZTk1YS1mNDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAymcgShrOfmI7eR8vcYQtbugSWLx+Gre9DE1WQK+xB+VoSwOqlBDAAvGI
+POOWPG1vY/ASaEND/hNfrTcSW+QYlQGFJoSfebdl3lFE2zedTsE2I8sulwkms7X
nqnylDtzI+9tSnXa1TSro+O9ZnmA7W3ZEq7UyOOPI6TxVF98bUYV7HCjpLfSc8FS
smxWuT/uork4LKsOIh+jo52Euxl2psJmT+6XOpA7ecx81roH79Pf6amaMFUwaukN
npnfHyvei9R6tFOr267xIr1a8QKwawBDLeNERdhIW9Ur6uO+9hrN9h7eDLlyRN43
7l5U0q2Re5sQnLfYCe7rJ1eXOZoS6QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHER
J0LIFCSPUH/wMkoujd99SHfRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNDMyNjA5NjBBRDAxMUYwOTcxRTE1NEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlIWMA0GCSqGSIb3DQEB
CwUAA4IBAQA5o+pZmpP4IF13oyQrDDK8fKHAXZE04hAQqLY1V7+2Vs4aib4gf74P
Ea4pwaqS6NcvQfYssy3Sii+pf0otNrIB6vk2byYIkoh55qb1RQvf0PrEUKASMe+e
EJGBnjO+B8xbAfPyO5mtGBuE+Ao8gUiqCo2IQXIY63KskOK/HdIZIJKlBWmX2qnO
buwBhqtKHRZ1jhkgciPDO/oiTWUiI2JUwsfRxwsTgx0q/cjwAGYtnVZfGKE6BqtF
ciQfIudS0Q0PSN5ydH5qVpWm8nu37qb3Fzl81TFL564FqAFZ0wW13u89u1xltFHU
IEd0mQ64vgnVX+1DOa79P++4RFmkvpYT
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:13:09 2025 by rpki-client