Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB44D722C05911EFB623A643762E951A.roa
File: BB44D722C05911EFB623A643762E951A.roa (raw, json)
Hash identifier: wgsXGl4OhaFsQR6pE4BVXoHHCQ1SatrLeKnVh/yoA3E=
Subject key identifier: 49:5C:C2:39:82:2E:DD:8E:2B:E6:86:1B:37:AE:6E:E1:47:91:36:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011DB2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB44D722C05911EFB623A643762E951A.roa
Signing time: Sun 22 Dec 2024 11:41:50 +0000
ROA not before: Sun 22 Dec 2024 11:41:46 +0000
ROA not after: Mon 22 Dec 2025 11:41:46 +0000
asID: 149014
IP address blocks: 154.211.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73138 (0x11db2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 22 11:41:46 2024 GMT
Not After : Dec 22 11:41:46 2025 GMT
Subject: CN=6767fafe-ea17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:bf:f7:49:13:2c:d7:8f:fa:57:2b:75:ac:
de:3e:04:11:bd:d8:3e:c4:99:34:02:7f:b4:64:55:
67:a6:4a:92:29:f6:b2:23:fe:0c:d1:d5:cf:ae:bf:
0a:85:a2:a8:79:fa:9b:41:28:53:65:90:74:e0:d4:
8e:32:09:5a:c0:63:10:77:52:65:63:34:e4:1d:e3:
7e:79:20:fe:f1:82:cc:0c:6b:1d:41:1b:a3:3b:09:
8a:cf:21:2b:89:42:2e:ff:ca:bf:13:04:5e:f6:ab:
b8:5f:2c:52:ee:f0:07:e9:f6:22:21:5f:e8:67:98:
43:17:94:c6:24:74:e1:97:d1:35:d8:3a:86:6e:48:
71:c1:f8:33:c5:22:27:57:79:04:de:e1:41:34:e5:
dc:a9:65:23:05:ae:51:6a:bb:5c:dd:d5:94:8e:2f:
5d:27:3b:e9:c9:0a:92:44:d6:f5:7e:d5:3c:c6:f2:
1e:a7:0d:40:d5:18:2f:a5:94:83:af:63:26:67:df:
71:ad:87:fe:27:8c:81:57:91:86:22:f4:2c:39:5b:
85:1e:47:fe:23:b7:0f:27:25:56:bf:5f:e1:ce:58:
f0:4e:5a:83:46:94:79:4b:c0:41:85:22:3a:c2:3c:
47:49:4a:09:30:ff:d3:ed:02:0b:97:4c:a1:e9:61:
b2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5C:C2:39:82:2E:DD:8E:2B:E6:86:1B:37:AE:6E:E1:47:91:36:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB44D722C05911EFB623A643762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.20.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:d3:f6:8f:47:b5:92:c4:c8:82:c1:94:dd:31:ce:23:2d:63:
53:48:d9:93:61:ce:71:ba:aa:9e:b7:98:88:60:de:1b:19:36:
36:02:91:d1:5d:59:9f:51:14:72:b3:32:e6:7d:64:d5:62:68:
70:b7:30:87:69:b2:77:1a:3f:2a:d3:1e:dd:a7:b1:6e:93:e2:
b8:47:55:65:91:27:1b:e0:98:c2:f0:15:a5:56:b2:b4:54:94:
c7:57:9b:ab:fd:87:91:9b:ef:ba:13:ee:26:34:37:88:3d:8f:
4f:80:5d:17:d2:6f:cd:bd:aa:c2:da:db:b5:8a:0b:15:0e:b5:
9a:e6:70:06:1f:6e:9b:f4:2d:0c:ea:ab:ee:18:1c:e8:a0:ee:
16:70:80:24:86:b4:4c:93:67:f1:ba:e7:aa:e4:2a:32:1f:5c:
65:d8:64:2c:a6:7e:9c:80:68:b8:3e:ec:3f:fb:8f:e4:39:d7:
79:d5:b9:13:e8:9d:3e:a7:6f:12:c1:59:57:97:6f:b6:5e:41:
b1:38:db:ba:f5:e9:b7:9a:77:d4:9c:94:2f:4c:44:b2:3f:4e:
5e:d5:e2:a6:68:02:74:23:ed:5c:29:10:bd:54:85:b8:52:f9:
33:0b:ef:86:4f:a4:8d:87:5d:7e:5e:4a:cf:ba:0c:32:d6:6c:
bd:cf:3b:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAR2yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIyMTE0MTQ2WhcNMjUxMjIyMTE0MTQ2WjAYMRYw
FAYDVQQDEw02NzY3ZmFmZS1lYTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvy2/90kTLNeP+lcrdazePgQRvdg+xJk0An+0ZFVnpkqSKfayI/4M0dXP
rr8KhaKoefqbQShTZZB04NSOMglawGMQd1JlYzTkHeN+eSD+8YLMDGsdQRujOwmK
zyEriUIu/8q/EwRe9qu4XyxS7vAH6fYiIV/oZ5hDF5TGJHThl9E12DqGbkhxwfgz
xSInV3kE3uFBNOXcqWUjBa5Rartc3dWUji9dJzvpyQqSRNb1ftU8xvIepw1A1Rgv
pZSDr2MmZ99xrYf+J4yBV5GGIvQsOVuFHkf+I7cPJyVWv1/hzljwTlqDRpR5S8BB
hSI6wjxHSUoJMP/T7QILl0yh6WGywwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFElc
wjmCLt2OK+aGGzeubuFHkTZGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQjQ0RDcyMkMwNTkxMUVGQjYyM0E2NDM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmtMUMA0GCSqGSIb3DQEB
CwUAA4IBAQC80/aPR7WSxMiCwZTdMc4jLWNTSNmTYc5xuqqet5iIYN4bGTY2ApHR
XVmfURRyszLmfWTVYmhwtzCHabJ3Gj8q0x7dp7Fuk+K4R1VlkScb4JjC8BWlVrK0
VJTHV5ur/YeRm++6E+4mNDeIPY9PgF0X0m/NvarC2tu1igsVDrWa5nAGH26b9C0M
6qvuGBzooO4WcIAkhrRMk2fxuueq5CoyH1xl2GQspn6cgGi4Puw/+4/kOdd51bkT
6J0+p28SwVlXl2+2XkGxONu69em3mnfUnJQvTESyP05e1eKmaAJ0I+1cKRC9VIW4
UvkzC++GT6SNh11+XkrPugwy1my9zzsR
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:37:36 2025 by rpki-client