Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBB9DB36088811F089F48A5F762E951A.roa
File: BBB9DB36088811F089F48A5F762E951A.roa (raw, json)
Hash identifier: YnTq7wZLTgpirpKI4UZOINsIwOX/3mOzjtKP/i0MjFY=
Subject key identifier: 1A:AB:7C:83:73:28:C5:5A:72:68:B3:58:4D:33:CF:AF:E5:D0:A2:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBB9DB36088811F089F48A5F762E951A.roa
Signing time: Mon 24 Mar 2025 08:19:41 +0000
ROA not before: Mon 24 Mar 2025 08:19:37 +0000
ROA not after: Sun 11 May 2025 08:19:37 +0000
asID: 138915
IP address blocks: 154.223.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95694 (0x175ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 24 08:19:37 2025 GMT
Not After : May 11 08:19:37 2025 GMT
Subject: CN=67e1159d-7959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:f3:2d:a5:d5:01:5e:ec:42:3c:9f:24:84:
c1:cf:4e:8a:99:8c:f7:b2:af:5b:c7:1f:af:b9:34:
9b:e7:15:bf:e9:14:bd:cb:a4:5d:30:17:d0:8d:8b:
dd:f2:3e:7f:8e:46:74:18:b1:22:29:56:05:2e:e5:
9e:97:fb:34:58:7f:2e:db:8a:38:43:e9:2c:27:43:
7c:3e:7c:a2:61:e7:63:ce:27:ec:cf:7e:86:51:df:
bb:95:98:8f:7e:44:c7:26:81:06:19:81:10:71:62:
b5:60:88:9a:0c:3a:fd:c8:37:fa:06:97:0a:00:39:
73:5d:ce:9f:fa:5e:bf:e5:aa:00:31:32:f9:2b:73:
ab:03:a0:23:d9:07:57:a3:bb:26:d6:f6:cb:4a:5c:
90:80:31:c9:7a:56:8d:d8:b9:9d:5e:10:b6:c5:be:
4a:0f:c3:88:0a:0d:25:3d:64:29:1e:ab:b0:fb:85:
de:6f:18:51:08:47:40:42:57:4c:51:85:ff:e8:4b:
60:92:6c:f4:96:d6:43:68:d1:dc:6a:2a:f4:03:8c:
2d:7c:eb:8d:77:cf:38:17:b9:cf:cf:58:8e:e2:49:
86:53:0b:f1:96:b4:67:ec:ff:f3:f5:cf:f8:4e:0b:
bd:c3:19:aa:f8:b2:7c:51:54:d9:ab:41:ce:69:cc:
82:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AB:7C:83:73:28:C5:5A:72:68:B3:58:4D:33:CF:AF:E5:D0:A2:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBB9DB36088811F089F48A5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.52.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:0b:3c:a4:51:ad:cc:79:1a:df:a1:ac:29:d5:84:74:6b:a3:
a0:ae:1e:07:f1:e4:ab:61:9e:46:60:0b:68:12:0c:5e:c9:05:
69:dd:31:29:3f:f4:f8:c2:d4:8c:04:b8:f6:08:82:14:c3:74:
1e:23:63:ca:62:9b:31:6d:5f:a3:ff:f5:7f:ce:25:5c:28:ed:
0f:84:da:24:a0:72:bb:83:16:f1:ec:eb:55:51:a4:e4:1a:85:
16:b5:22:bc:e1:3f:f3:25:8a:af:fc:fb:31:ad:72:52:45:93:
ec:99:c8:e4:48:81:cd:e4:d4:88:8f:84:1f:2a:f4:a6:6b:6f:
3b:f2:7f:1a:8f:fd:b9:cd:d2:f3:2f:2c:7a:57:cb:af:3f:47:
eb:09:68:f0:00:0c:ce:95:4c:cb:3c:87:1c:34:80:01:14:3e:
fd:2f:52:29:e1:a4:38:15:d3:ec:a6:6c:40:68:d3:99:d5:ab:
b2:8a:c6:93:26:47:da:13:82:cf:ab:d4:2c:f2:8d:85:2f:4c:
81:04:6e:ab:a6:38:19:8e:42:73:1d:36:af:18:19:aa:3c:54:
4a:9c:e8:2d:aa:37:ce:5d:72:52:72:b6:50:fe:bd:9a:e0:54:
8c:f7:50:63:29:b8:85:d9:23:17:b9:8e:ea:3d:eb:61:b8:3c:
d7:87:ac:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXXOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzI0MDgxOTM3WhcNMjUwNTExMDgxOTM3WjAYMRYw
FAYDVQQDEw02N2UxMTU5ZC03OTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvxjzLaXVAV7sQjyfJITBz06KmYz3sq9bxx+vuTSb5xW/6RS9y6RdMBfQ
jYvd8j5/jkZ0GLEiKVYFLuWel/s0WH8u24o4Q+ksJ0N8PnyiYedjzifsz36GUd+7
lZiPfkTHJoEGGYEQcWK1YIiaDDr9yDf6BpcKADlzXc6f+l6/5aoAMTL5K3OrA6Aj
2QdXo7sm1vbLSlyQgDHJelaN2LmdXhC2xb5KD8OICg0lPWQpHquw+4XebxhRCEdA
QldMUYX/6Etgkmz0ltZDaNHcair0A4wtfOuNd884F7nPz1iO4kmGUwvxlrRn7P/z
9c/4Tgu9wxmq+LJ8UVTZq0HOacyCzwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBqr
fINzKMVacmizWE0zz6/l0KJhMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQkI5REIzNjA4ODgxMUYwODlGNDhBNUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt80MA0GCSqGSIb3DQEB
CwUAA4IBAQCLCzykUa3MeRrfoawp1YR0a6Ogrh4H8eSrYZ5GYAtoEgxeyQVp3TEp
P/T4wtSMBLj2CIIUw3QeI2PKYpsxbV+j//V/ziVcKO0PhNokoHK7gxbx7OtVUaTk
GoUWtSK84T/zJYqv/PsxrXJSRZPsmcjkSIHN5NSIj4QfKvSma2878n8aj/25zdLz
Lyx6V8uvP0frCWjwAAzOlUzLPIccNIABFD79L1Ip4aQ4FdPspmxAaNOZ1auyisaT
JkfaE4LPq9Qs8o2FL0yBBG6rpjgZjkJzHTavGBmqPFRKnOgtqjfOXXJScrZQ/r2a
4FSM91BjKbiF2SMXuY7qPethuDzXh6wZ
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:54 2025 by rpki-client