Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB08FDA6CF6D11EFA00E26A9762E951A.roa
File: BB08FDA6CF6D11EFA00E26A9762E951A.roa (raw, json)
Hash identifier: MCdY+R++BJGFWWFzyRZNv5cbUQ3h9PmZ4b1WxaZsHVY=
Subject key identifier: A5:4B:8A:73:FE:16:AF:0A:55:89:57:B6:E8:98:81:51:19:74:33:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013A4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB08FDA6CF6D11EFA00E26A9762E951A.roa
Signing time: Fri 10 Jan 2025 16:12:47 +0000
ROA not before: Fri 10 Jan 2025 16:12:43 +0000
ROA not after: Fri 12 Dec 2025 16:12:43 +0000
asID: 984
IP address blocks: 154.81.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80458 (0x13a4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 16:12:43 2025 GMT
Not After : Dec 12 16:12:43 2025 GMT
Subject: CN=678146ff-77d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:1e:e2:2c:e2:43:79:20:f7:49:37:1d:c0:
f0:5f:fe:e8:a2:14:35:14:23:66:73:5a:ad:82:1f:
2a:a5:d9:df:54:dc:4b:26:ad:62:6a:9e:6e:3c:6c:
77:26:67:ee:76:3d:d8:12:a9:de:57:66:b5:b6:d7:
51:8e:e8:28:88:59:d3:b0:f8:e6:70:5b:57:a3:ac:
01:99:ca:d3:38:ee:da:85:cb:4e:f4:46:bf:c1:76:
74:24:32:f4:ad:70:b3:a9:d8:3e:2a:d3:a6:ea:df:
ee:0d:a0:ba:c6:d1:86:87:03:fa:9f:e6:76:4a:9a:
f4:a5:c3:42:4c:82:38:ec:69:bf:8c:f1:82:50:ca:
d2:99:9a:c9:bc:92:01:5f:2f:64:7d:d8:35:07:a4:
4b:e8:fe:89:45:a1:f9:34:cf:bc:8a:a4:62:8d:4e:
27:53:81:0e:0f:99:a4:0d:e1:5e:89:52:3e:7a:b7:
af:bd:e7:00:54:da:6c:57:e1:47:74:9c:1b:e1:8f:
8e:75:14:2d:6c:7b:96:6a:8a:97:50:73:8b:96:db:
20:30:f7:74:86:46:da:97:78:5e:03:88:87:fc:49:
26:a1:e2:c5:ee:9f:15:89:a4:b8:6e:51:07:02:c9:
0c:6f:ad:35:86:85:8c:8b:0a:ca:8c:68:c8:30:12:
82:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4B:8A:73:FE:16:AF:0A:55:89:57:B6:E8:98:81:51:19:74:33:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB08FDA6CF6D11EFA00E26A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.156.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:05:b8:1a:7a:18:3a:98:1a:9d:8f:4c:32:ce:aa:ce:b5:ff:
9a:79:ed:e7:7c:34:2e:da:fe:3a:ac:ad:d3:44:d4:91:94:51:
4c:08:81:6b:41:2a:b6:c1:1d:6a:ba:cf:89:f9:3c:de:d4:ee:
97:af:41:1d:fa:40:6d:55:3e:78:c3:2f:6f:ec:c1:3f:92:a8:
68:ab:fe:52:fd:1e:8d:63:eb:81:6f:af:48:16:0e:5c:c8:57:
22:bc:de:41:2e:02:af:a9:4a:ae:49:62:fd:a9:df:1f:97:39:
a5:90:a2:be:fb:91:2e:38:d2:3e:6b:6d:8a:da:b4:82:c3:39:
fd:70:56:f4:d0:b4:2b:11:b8:33:12:ce:cc:12:3a:ab:d2:52:
b3:48:19:4e:42:27:e1:46:aa:d0:f5:af:5d:af:5f:25:f1:f1:
29:9e:a5:5b:08:53:88:4c:e9:5e:65:dd:9b:ac:a6:8f:c7:7d:
4d:30:74:ad:4e:06:63:a7:26:8a:fc:62:5b:2a:7a:2f:60:2f:
a7:65:37:c0:29:d2:27:b9:b2:d1:63:c8:7d:19:21:ce:be:4f:
77:7e:6f:f1:f0:a0:58:7b:f5:f1:e7:c9:02:fe:8d:63:b5:86:
45:49:02:59:3d:da:d4:cd:fe:88:80:39:a2:f1:ca:41:bf:28:
93:23:66:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATpKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTEwMTYxMjQzWhcNMjUxMjEyMTYxMjQzWjAYMRYw
FAYDVQQDEw02NzgxNDZmZi03N2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyJoe4iziQ3kg90k3HcDwX/7oohQ1FCNmc1qtgh8qpdnfVNxLJq1iap5u
PGx3Jmfudj3YEqneV2a1ttdRjugoiFnTsPjmcFtXo6wBmcrTOO7ahctO9Ea/wXZ0
JDL0rXCzqdg+KtOm6t/uDaC6xtGGhwP6n+Z2Spr0pcNCTII47Gm/jPGCUMrSmZrJ
vJIBXy9kfdg1B6RL6P6JRaH5NM+8iqRijU4nU4EOD5mkDeFeiVI+erevvecAVNps
V+FHdJwb4Y+OdRQtbHuWaoqXUHOLltsgMPd0hkbal3heA4iH/EkmoeLF7p8ViaS4
blEHAskMb601hoWMiwrKjGjIMBKCtQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKVL
inP+Fq8KVYlXtuiYgVEZdDN/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQjA4RkRBNkNGNkQxMUVGQTAwRTI2QTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlGcMA0GCSqGSIb3DQEB
CwUAA4IBAQDBBbgaehg6mBqdj0wyzqrOtf+aee3nfDQu2v46rK3TRNSRlFFMCIFr
QSq2wR1qus+J+Tze1O6Xr0Ed+kBtVT54wy9v7ME/kqhoq/5S/R6NY+uBb69IFg5c
yFcivN5BLgKvqUquSWL9qd8flzmlkKK++5EuONI+a22K2rSCwzn9cFb00LQrEbgz
Es7MEjqr0lKzSBlOQifhRqrQ9a9dr18l8fEpnqVbCFOITOleZd2brKaPx31NMHSt
TgZjpyaK/GJbKnovYC+nZTfAKdInubLRY8h9GSHOvk93fm/x8KBYe/Xx58kC/o1j
tYZFSQJZPdrUzf6IgDmi8cpBvyiTI2Zn
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:05 2025 by rpki-client