Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6FEF868C92911EFBA145044762E951A.roa
File: B6FEF868C92911EFBA145044762E951A.roa (raw, json)
Hash identifier: o9czT2XzVouPNfh6oCBkw+DWKv8zmVerzvY0v6u8s2Q=
Subject key identifier: 65:75:F3:B1:30:91:72:30:53:A7:F2:FD:49:5C:52:3C:F3:1B:B2:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013371
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6FEF868C92911EFBA145044762E951A.roa
Signing time: Thu 02 Jan 2025 16:50:47 +0000
ROA not before: Thu 02 Jan 2025 16:50:44 +0000
ROA not after: Mon 13 Dec 2027 16:50:44 +0000
asID: 17561
IP address blocks: 154.222.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78705 (0x13371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:50:44 2025 GMT
Not After : Dec 13 16:50:44 2027 GMT
Subject: CN=6776c3e7-50f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:7c:1a:88:4a:0b:4a:d9:8c:2a:f6:ad:75:
8f:7b:45:95:ec:2e:4f:2e:33:75:3b:43:e5:98:13:
3e:ce:c1:1a:f1:d4:b7:b9:bb:e7:b4:f4:c0:5b:b6:
39:01:e1:d5:e8:f3:2e:2a:4f:ed:58:8e:65:ee:8f:
39:dc:7b:bb:6b:18:2b:bb:0a:1b:d6:3d:21:46:4d:
c9:5f:ce:2c:1a:c6:e5:8d:68:9f:93:e7:e2:46:95:
af:4c:1e:f9:41:7a:d0:79:74:a2:f1:da:ee:00:6b:
62:5a:e6:c8:8c:d2:9d:2a:dd:58:56:c2:be:34:c6:
3f:2f:a8:b1:f7:9e:34:e9:10:ee:e6:b6:83:66:d3:
f3:16:c6:98:e0:f6:88:b8:ae:b1:51:15:46:64:6f:
96:0a:61:54:98:c9:fb:4a:ae:6f:96:65:76:b4:53:
c0:f4:82:7e:c3:d5:ff:3b:e1:ac:e5:35:05:ac:8a:
45:61:0a:89:5d:42:22:20:0d:eb:36:d5:f3:67:51:
b9:5c:8f:dd:cd:0c:6b:64:68:f5:6f:09:63:17:ea:
59:e2:df:27:a8:da:86:65:d2:8e:25:c2:99:ab:d6:
20:5c:94:99:20:6e:d7:40:4b:61:c4:d1:cd:92:fa:
c8:3f:81:30:f0:aa:36:62:90:c2:1f:d7:37:68:23:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:75:F3:B1:30:91:72:30:53:A7:F2:FD:49:5C:52:3C:F3:1B:B2:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6FEF868C92911EFBA145044762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.132.0/24
Signature Algorithm: sha256WithRSAEncryption
70:84:e8:97:27:5e:be:a9:2c:fe:2e:7f:af:ea:9c:74:a8:15:
76:a3:96:bb:14:40:38:1f:18:a0:e1:e4:e7:ba:6f:4c:39:09:
d0:8e:41:6e:8f:61:e2:99:61:a4:58:c5:31:8a:14:2f:7e:19:
c7:ca:f5:15:29:a9:52:ef:be:e8:e5:93:a6:84:63:2e:67:76:
62:5f:e2:57:8d:dd:b2:da:24:41:3f:96:d2:c5:a8:cf:cf:a8:
7d:1d:f8:f5:7a:ae:48:da:37:78:0f:2f:09:00:38:8d:19:ee:
5f:71:f5:ba:0e:dc:04:ae:14:e7:ef:f5:93:d2:87:f7:d2:8a:
07:db:19:21:0a:5d:9a:dd:b7:15:8d:f4:5c:0e:06:72:fc:e6:
af:5a:89:5e:54:05:38:db:44:b0:a2:1e:35:98:79:d4:be:e3:
88:a7:f7:f3:37:18:d6:e8:5b:78:ab:6c:83:d3:ad:1e:24:1a:
cd:ab:b5:a2:fe:2a:9a:9a:a4:1a:df:25:c2:a1:8d:d7:75:3a:
37:2f:32:21:18:ed:de:03:9b:ed:28:b7:56:1b:1d:07:08:96:
61:93:0e:99:82:f2:bf:49:73:e1:ca:d9:1c:08:36:7d:ec:95:
a5:5f:0b:32:4b:00:40:02:bc:ee:97:44:f9:13:ea:a4:ac:a0:
bb:97:76:fe
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATNxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTY1MDQ0WhcNMjcxMjEzMTY1MDQ0WjAYMRYw
FAYDVQQDEw02Nzc2YzNlNy01MGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuDN8GohKC0rZjCr2rXWPe0WV7C5PLjN1O0PlmBM+zsEa8dS3ubvntPTA
W7Y5AeHV6PMuKk/tWI5l7o853Hu7axgruwob1j0hRk3JX84sGsbljWifk+fiRpWv
TB75QXrQeXSi8druAGtiWubIjNKdKt1YVsK+NMY/L6ix95406RDu5raDZtPzFsaY
4PaIuK6xURVGZG+WCmFUmMn7Sq5vlmV2tFPA9IJ+w9X/O+Gs5TUFrIpFYQqJXUIi
IA3rNtXzZ1G5XI/dzQxrZGj1bwljF+pZ4t8nqNqGZdKOJcKZq9YgXJSZIG7XQEth
xNHNkvrIP4Ew8Ko2YpDCH9c3aCPZKQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGV1
87EwkXIwU6fy/UlcUjzzG7JVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNkZFRjg2OEM5MjkxMUVGQkExNDUwNDQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt6EMA0GCSqGSIb3DQEB
CwUAA4IBAQBwhOiXJ16+qSz+Ln+v6px0qBV2o5a7FEA4Hxig4eTnum9MOQnQjkFu
j2HimWGkWMUxihQvfhnHyvUVKalS777o5ZOmhGMuZ3ZiX+JXjd2y2iRBP5bSxajP
z6h9Hfj1eq5I2jd4Dy8JADiNGe5fcfW6DtwErhTn7/WT0of30ooH2xkhCl2a3bcV
jfRcDgZy/OavWoleVAU420Swoh41mHnUvuOIp/fzNxjW6Ft4q2yD060eJBrNq7Wi
/iqamqQa3yXCoY3XdTo3LzIhGO3eA5vtKLdWGx0HCJZhkw6ZgvK/SXPhytkcCDZ9
7JWlXwsySwBAArzul0T5E+qkrKC7l3b+
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:50:06 2025 by rpki-client