Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA64795CC5F911EF80C21D7D762E951A.roa
File: BA64795CC5F911EF80C21D7D762E951A.roa (raw, json)
Hash identifier: Qbb4cZTsLmv0LmIrFFAotazD5z2/fBdMZv9oUOTVKd0=
Subject key identifier: 56:41:3A:8B:8F:AA:A8:90:77:E9:4B:6E:7B:AA:0D:DE:84:2D:13:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012E20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA64795CC5F911EF80C21D7D762E951A.roa
Signing time: Sun 29 Dec 2024 15:29:44 +0000
ROA not before: Sun 29 Dec 2024 15:29:40 +0000
ROA not after: Sun 12 Dec 2027 15:29:40 +0000
asID: 17561
IP address blocks: 154.213.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77344 (0x12e20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 15:29:40 2024 GMT
Not After : Dec 12 15:29:40 2027 GMT
Subject: CN=67716ae8-5ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:c1:de:32:30:b8:1a:de:c2:88:58:24:2e:
98:13:88:b8:59:3c:da:60:e2:b0:7b:b3:41:5e:83:
73:fd:e3:44:dd:c3:03:10:c0:51:ce:be:d2:1d:77:
04:7a:e3:01:c0:be:a8:56:55:00:1d:37:73:0d:ab:
6b:a7:da:fb:1f:37:df:18:e7:8b:1f:6c:a0:38:16:
da:de:1c:67:62:ff:bc:11:92:7c:14:7f:05:e1:05:
f9:f2:5e:70:f4:ef:c6:fe:5e:ed:97:8d:71:47:8c:
72:10:9c:4e:93:21:94:42:cb:6a:bd:00:17:84:38:
ce:ae:6c:48:59:b6:97:97:98:91:54:b9:bb:5e:35:
79:01:c9:4a:17:d0:d1:7f:66:88:d5:cd:da:4f:76:
68:50:08:58:b4:e7:ba:7c:97:4c:6a:fd:ed:ec:06:
c9:9d:04:fa:e9:0d:f0:dd:e5:5c:71:13:3f:2a:0d:
51:b2:5f:fb:b5:e4:c0:71:09:af:a0:97:e6:1e:d2:
60:ba:2f:f4:61:8b:4b:1d:b5:98:fe:84:85:b9:d0:
a3:b0:8a:78:bb:73:ef:a5:c6:c9:2f:57:c5:57:a4:
66:e2:83:a5:e1:0d:5d:b0:59:d6:e3:01:3a:e4:0b:
b1:60:14:f5:e0:94:cb:db:53:bd:70:31:66:09:0f:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:41:3A:8B:8F:AA:A8:90:77:E9:4B:6E:7B:AA:0D:DE:84:2D:13:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA64795CC5F911EF80C21D7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.222.0/24
Signature Algorithm: sha256WithRSAEncryption
42:2c:ca:be:e0:b8:54:8c:70:ed:6c:00:7e:00:82:79:bc:30:
ba:28:37:c9:62:e6:22:c3:03:aa:9e:b0:22:8d:91:c3:9e:a5:
bb:63:f2:f2:a0:58:ae:d2:b8:1b:ac:26:3e:90:66:4d:dc:f6:
84:4e:ff:d8:3c:2e:8f:bc:5b:e9:4e:43:0e:47:f7:cd:91:cf:
47:09:01:92:09:e8:56:46:9e:32:c8:8b:2c:75:d0:14:3b:3c:
47:7b:39:ad:e5:f7:6b:9b:cf:3e:42:7d:65:bb:ab:e8:7c:ab:
2f:b1:7c:f5:28:9b:55:37:56:5d:3f:6e:ce:b4:60:8f:96:6b:
c6:b8:2f:b5:50:1d:8e:23:15:a7:5b:57:80:b7:28:b4:d5:b6:
3a:e0:fa:97:2e:61:41:91:e8:09:23:8d:77:eb:ad:a9:e9:c2:
e6:79:33:6a:56:71:9a:78:a4:23:7d:35:06:b7:a1:e7:9d:c8:
c2:89:6f:7a:56:3b:29:3c:a1:0e:4c:52:8f:e7:13:cc:93:00:
80:a7:03:a7:26:e4:9f:22:4a:c3:b8:51:17:09:3b:bf:63:fa:
54:14:78:1e:8a:74:81:fb:14:e8:f5:5f:e5:20:02:89:49:ef:
77:67:87:e7:25:e3:f1:82:3f:a9:42:0e:32:b5:12:d6:9d:77:
82:b1:27:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAS4gMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI5MTUyOTQwWhcNMjcxMjEyMTUyOTQwWjAYMRYw
FAYDVQQDEw02NzcxNmFlOC01YWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAubrB3jIwuBrewohYJC6YE4i4WTzaYOKwe7NBXoNz/eNE3cMDEMBRzr7S
HXcEeuMBwL6oVlUAHTdzDatrp9r7HzffGOeLH2ygOBba3hxnYv+8EZJ8FH8F4QX5
8l5w9O/G/l7tl41xR4xyEJxOkyGUQstqvQAXhDjOrmxIWbaXl5iRVLm7XjV5AclK
F9DRf2aI1c3aT3ZoUAhYtOe6fJdMav3t7AbJnQT66Q3w3eVccRM/Kg1Rsl/7teTA
cQmvoJfmHtJgui/0YYtLHbWY/oSFudCjsIp4u3PvpcbJL1fFV6Rm4oOl4Q1dsFnW
4wE65AuxYBT14JTL21O9cDFmCQ/IfQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFZB
OouPqqiQd+lLbnuqDd6ELROgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQTY0Nzk1Q0M1RjkxMUVGODBDMjFEN0Q3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtXeMA0GCSqGSIb3DQEB
CwUAA4IBAQBCLMq+4LhUjHDtbAB+AIJ5vDC6KDfJYuYiwwOqnrAijZHDnqW7Y/Ly
oFiu0rgbrCY+kGZN3PaETv/YPC6PvFvpTkMOR/fNkc9HCQGSCehWRp4yyIssddAU
OzxHezmt5fdrm88+Qn1lu6vofKsvsXz1KJtVN1ZdP27OtGCPlmvGuC+1UB2OIxWn
W1eAtyi01bY64PqXLmFBkegJI413662p6cLmeTNqVnGaeKQjfTUGt6HnncjCiW96
VjspPKEOTFKP5xPMkwCApwOnJuSfIkrDuFEXCTu/Y/pUFHgeinSB+xTo9V/lIAKJ
Se93Z4fnJePxgj+pQg4ytRLWnXeCsScG
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:37:12 2025 by rpki-client