Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB7A2CD4C19811EFA511B698762E951A.roa
File: BB7A2CD4C19811EFA511B698762E951A.roa (raw, json)
Hash identifier: b/Orxj512E1KYIHjfOm0ciav3C/nyIycYYJcLMQ9QfY=
Subject key identifier: 11:57:05:C3:9E:AA:23:FB:68:33:9D:AE:28:CE:5E:47:B9:34:82:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01204D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB7A2CD4C19811EFA511B698762E951A.roa
Signing time: Tue 24 Dec 2024 01:45:20 +0000
ROA not before: Tue 24 Dec 2024 01:45:16 +0000
ROA not after: Wed 10 Dec 2025 01:45:16 +0000
asID: 984
IP address blocks: 154.90.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73805 (0x1204d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:45:16 2024 GMT
Not After : Dec 10 01:45:16 2025 GMT
Subject: CN=676a1230-00b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:63:b1:a3:3a:56:d0:67:d7:60:8c:94:34:
8c:52:40:00:19:db:b3:3a:22:7a:05:ac:48:97:18:
67:be:44:a5:0a:f0:9a:8c:70:2f:3a:35:66:3c:74:
74:12:1e:b2:e0:fe:36:d0:f9:09:25:60:8f:17:b3:
b3:3e:46:21:a6:4f:bd:9c:2b:9d:e5:2f:b9:47:bc:
b9:eb:3d:18:af:db:86:2c:e1:39:35:b0:fc:fe:10:
a8:14:c5:1d:a7:0a:1e:49:dd:fa:9e:06:71:b0:4e:
34:0f:c8:9b:09:9a:45:44:19:f9:4c:4f:4e:b9:d7:
a9:04:75:e5:6a:d1:7d:75:a0:13:50:93:12:af:00:
a3:9d:ad:3d:09:d8:36:dc:68:46:c8:e2:0a:e3:4c:
87:d9:46:5c:74:6e:0c:a8:37:67:c2:77:45:8e:11:
46:1d:7f:8f:8c:42:43:11:43:8c:55:e9:1d:29:cd:
79:ad:b0:7c:6a:c0:7a:06:3e:53:4c:13:50:f1:fc:
17:0c:d3:b0:2d:6d:b9:c8:84:5c:14:df:4b:8d:4e:
85:b4:8a:02:66:5f:e8:07:89:05:e8:55:29:19:70:
80:88:76:84:a3:3a:df:44:eb:85:62:b7:f2:97:0a:
3c:4e:f4:57:d9:e9:3a:e7:5c:8c:cf:ca:e5:e6:9b:
76:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:57:05:C3:9E:AA:23:FB:68:33:9D:AE:28:CE:5E:47:B9:34:82:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB7A2CD4C19811EFA511B698762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.194.0/24
Signature Algorithm: sha256WithRSAEncryption
30:9f:3c:f7:b2:cd:b0:a4:15:db:a3:9f:95:ee:4f:c3:ea:60:
39:48:08:2b:f6:55:e4:04:c1:a0:85:02:5f:02:22:88:c5:fc:
0f:dd:f8:05:3f:34:8f:64:94:32:f7:a0:43:7c:13:72:1a:a4:
10:1b:ec:80:49:bd:2b:41:ef:7c:69:98:37:48:14:2d:64:14:
4d:b3:0a:31:b5:75:21:bf:e0:26:e2:03:db:2d:16:5c:9c:4a:
5d:f9:d7:c4:5d:62:01:ea:58:6e:be:c4:a6:7c:2f:d6:16:bf:
6f:bd:c8:d7:9d:94:39:96:51:a0:dd:66:97:05:f3:04:e5:a6:
02:2a:8b:ac:8d:e4:fb:d0:40:08:56:e8:65:3f:ab:98:84:e2:
0c:a1:ff:19:bb:bb:f2:a6:e6:d8:3f:69:e3:c8:3f:66:cd:92:
35:3b:26:a6:aa:64:3f:4a:3a:f0:55:96:71:e2:83:52:f0:a1:
c1:de:5c:03:a1:a5:8d:f8:98:db:84:53:a4:16:14:5e:86:60:
0c:87:b7:f3:4d:35:4f:98:9e:fd:e0:5e:0a:f6:98:ef:ee:a2:
57:19:0f:90:2d:d4:30:c0:28:65:25:2a:28:5b:83:f9:4d:94:
bf:c5:08:5c:eb:af:58:bd:19:a7:5c:9c:71:da:4b:33:43:05:
92:8e:8d:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASBNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI0MDE0NTE2WhcNMjUxMjEwMDE0NTE2WjAYMRYw
FAYDVQQDEw02NzZhMTIzMC0wMGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoSljsaM6VtBn12CMlDSMUkAAGduzOiJ6BaxIlxhnvkSlCvCajHAvOjVm
PHR0Eh6y4P420PkJJWCPF7OzPkYhpk+9nCud5S+5R7y56z0Yr9uGLOE5NbD8/hCo
FMUdpwoeSd36ngZxsE40D8ibCZpFRBn5TE9OudepBHXlatF9daATUJMSrwCjna09
Cdg23GhGyOIK40yH2UZcdG4MqDdnwndFjhFGHX+PjEJDEUOMVekdKc15rbB8asB6
Bj5TTBNQ8fwXDNOwLW25yIRcFN9LjU6FtIoCZl/oB4kF6FUpGXCAiHaEozrfROuF
Yrfylwo8TvRX2ek651yMz8rl5pt2cQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBFX
BcOeqiP7aDOdrijOXke5NIJRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQjdBMkNENEMxOTgxMUVGQTUxMUI2OTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlrCMA0GCSqGSIb3DQEB
CwUAA4IBAQAwnzz3ss2wpBXbo5+V7k/D6mA5SAgr9lXkBMGghQJfAiKIxfwP3fgF
PzSPZJQy96BDfBNyGqQQG+yASb0rQe98aZg3SBQtZBRNswoxtXUhv+Am4gPbLRZc
nEpd+dfEXWIB6lhuvsSmfC/WFr9vvcjXnZQ5llGg3WaXBfME5aYCKousjeT70EAI
VuhlP6uYhOIMof8Zu7vypubYP2njyD9mzZI1OyamqmQ/SjrwVZZx4oNS8KHB3lwD
oaWN+JjbhFOkFhRehmAMh7fzTTVPmJ794F4K9pjv7qJXGQ+QLdQwwChlJSooW4P5
TZS/xQhc669YvRmnXJxx2kszQwWSjo3h
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:40 2025 by rpki-client