Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE6207E6C54411EFB2B5A481762E951A.roa
File: BE6207E6C54411EFB2B5A481762E951A.roa (raw, json)
Hash identifier: IKAI91YJEOpCm681whUya9+AIF+9pOcLtD/Um/7tWEw=
Subject key identifier: E4:9A:D2:9A:4E:EA:FA:50:B1:DC:86:BA:EE:B7:6E:2D:9D:FD:55:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012C9F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE6207E6C54411EFB2B5A481762E951A.roa
Signing time: Sat 28 Dec 2024 17:54:11 +0000
ROA not before: Sat 28 Dec 2024 17:54:08 +0000
ROA not after: Sun 12 Dec 2027 17:54:08 +0000
asID: 17561
IP address blocks: 154.208.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76959 (0x12c9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 17:54:08 2024 GMT
Not After : Dec 12 17:54:08 2027 GMT
Subject: CN=67703b43-3907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:6c:9d:6f:61:29:19:f4:28:3d:1e:8c:5b:
8b:01:84:1f:32:9e:62:c6:6f:a0:dd:e8:b2:b5:20:
9e:22:da:9e:39:f5:3e:a0:de:3a:38:63:19:93:7a:
73:8f:06:02:c6:1e:44:ea:9d:fd:8e:26:f5:d9:fc:
99:8d:0d:a1:72:32:80:a2:23:15:9c:a2:69:61:5c:
dd:a3:72:91:a0:1c:ff:ec:be:a9:94:ce:a9:21:70:
4e:3e:31:79:4b:c8:6c:92:e9:0c:0a:73:a9:7f:eb:
1f:58:a8:a4:bb:fe:51:96:a4:b4:34:17:ae:73:77:
24:10:8c:43:9b:20:27:4e:b2:8b:90:e8:30:c6:bf:
f8:dd:3b:ca:a6:85:38:94:38:4e:d6:6d:fb:46:7b:
d4:68:1b:5f:83:63:ef:ad:78:3d:59:1b:80:08:95:
f4:b3:3e:03:c0:1a:e3:0c:b9:c5:ec:55:89:18:31:
da:8b:60:66:78:ca:a4:de:dc:a6:c1:92:3d:b3:e4:
02:6b:d3:2e:1c:89:07:9c:87:55:3c:06:16:31:74:
14:49:2a:95:1c:11:17:05:2f:9e:45:8e:c6:cb:3b:
65:6d:1e:ec:a0:a0:70:cd:71:fc:b3:9f:fd:1f:60:
d9:0a:b0:00:11:b3:98:51:e5:60:2c:92:d3:9d:da:
32:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9A:D2:9A:4E:EA:FA:50:B1:DC:86:BA:EE:B7:6E:2D:9D:FD:55:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE6207E6C54411EFB2B5A481762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.180.0/24
Signature Algorithm: sha256WithRSAEncryption
77:5d:ff:25:7f:e9:3d:61:5b:7d:17:b1:84:f9:d4:55:61:5d:
c0:fe:ff:18:a8:44:31:0e:00:6c:d7:94:09:fb:0c:77:2c:82:
22:e8:c7:80:88:d1:4e:ed:1b:b3:96:d9:f3:6f:d6:78:90:f9:
88:e6:47:c6:a0:af:cd:24:c8:ea:17:a3:37:94:05:97:3a:11:
97:43:b6:d6:a0:47:c3:b2:60:53:cb:de:7d:42:5c:e8:bc:2b:
4e:69:2d:41:04:23:cc:7e:18:eb:87:69:57:34:37:6d:5d:d7:
5a:a2:7b:f9:20:27:11:de:1d:9a:8d:36:b4:38:9f:da:ee:15:
bd:bd:a6:43:90:bd:db:45:26:98:aa:cd:5e:47:1b:7c:ff:5e:
88:b5:e9:2b:ce:34:b2:19:7b:50:c0:99:df:b8:b6:0f:f1:74:
62:61:81:c9:81:ce:d5:ec:94:2b:50:0f:98:71:f9:f9:82:b7:
10:37:c9:c5:a2:7f:51:21:61:8b:5f:b4:7e:10:31:24:0f:86:
15:3b:ae:53:f8:6e:49:25:b0:88:0b:12:ac:4c:2a:03:54:06:
2a:67:11:fe:d6:d3:eb:2b:bb:80:d1:81:14:30:54:fe:6e:05:
42:fc:b2:ec:cd:89:9d:9e:57:cc:e6:d6:be:39:22:f9:12:f0:
1b:ea:b4:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASyfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTc1NDA4WhcNMjcxMjEyMTc1NDA4WjAYMRYw
FAYDVQQDEw02NzcwM2I0My0zOTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsVhsnW9hKRn0KD0ejFuLAYQfMp5ixm+g3eiytSCeItqeOfU+oN46OGMZ
k3pzjwYCxh5E6p39jib12fyZjQ2hcjKAoiMVnKJpYVzdo3KRoBz/7L6plM6pIXBO
PjF5S8hskukMCnOpf+sfWKiku/5RlqS0NBeuc3ckEIxDmyAnTrKLkOgwxr/43TvK
poU4lDhO1m37RnvUaBtfg2PvrXg9WRuACJX0sz4DwBrjDLnF7FWJGDHai2BmeMqk
3tymwZI9s+QCa9MuHIkHnIdVPAYWMXQUSSqVHBEXBS+eRY7GyztlbR7soKBwzXH8
s5/9H2DZCrAAEbOYUeVgLJLTndoyVwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOSa
0ppO6vpQsdyGuu63bi2d/VVeMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRTYyMDdFNkM1NDQxMUVGQjJCNUE0ODE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtC0MA0GCSqGSIb3DQEB
CwUAA4IBAQB3Xf8lf+k9YVt9F7GE+dRVYV3A/v8YqEQxDgBs15QJ+wx3LIIi6MeA
iNFO7Ruzltnzb9Z4kPmI5kfGoK/NJMjqF6M3lAWXOhGXQ7bWoEfDsmBTy959Qlzo
vCtOaS1BBCPMfhjrh2lXNDdtXddaonv5ICcR3h2ajTa0OJ/a7hW9vaZDkL3bRSaY
qs1eRxt8/16ItekrzjSyGXtQwJnfuLYP8XRiYYHJgc7V7JQrUA+Ycfn5grcQN8nF
on9RIWGLX7R+EDEkD4YVO65T+G5JJbCICxKsTCoDVAYqZxH+1tPrK7uA0YEUMFT+
bgVC/LLszYmdnlfM5ta+OSL5EvAb6rRn
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:27:16 2025 by rpki-client