Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEAE2240F47711EF974EB44C762E951A.roa
File: BEAE2240F47711EF974EB44C762E951A.roa (raw, json)
Hash identifier: IsdY0VXMYJOQRNIIv1XZ3D/QWnzhmjo0NC3bS/2sbNE=
Subject key identifier: 70:11:91:3E:B3:DE:80:79:86:B7:BB:A6:C4:4D:02:89:C1:D1:9D:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01659F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEAE2240F47711EF974EB44C762E951A.roa
Signing time: Wed 26 Feb 2025 19:27:41 +0000
ROA not before: Wed 26 Feb 2025 19:27:37 +0000
ROA not after: Sat 19 Feb 2028 19:27:37 +0000
asID: 17561
IP address blocks: 154.218.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91551 (0x1659f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:27:37 2025 GMT
Not After : Feb 19 19:27:37 2028 GMT
Subject: CN=67bf6b2d-fda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:c5:32:dd:a8:0b:38:2f:b6:79:ae:65:d9:
dc:b6:55:77:cc:3c:20:56:d1:2a:d5:78:01:48:8a:
b4:12:03:f8:9d:82:65:02:08:f1:57:98:28:a2:8d:
9b:c2:88:49:38:8b:a3:ca:56:66:7f:4b:c9:6b:46:
c3:31:10:8e:4d:93:2f:60:79:fb:bd:7e:ea:1c:e9:
be:23:77:32:f2:76:7a:f2:57:53:ef:85:34:52:b6:
a6:0e:75:ee:48:9e:af:69:0b:5b:f7:c5:bb:d7:f0:
34:d9:9d:bf:64:b2:9e:d7:1c:e0:e0:17:f9:e6:1b:
07:e6:8b:6a:0d:31:ec:c7:02:11:34:dc:45:60:8e:
5c:e8:9e:04:c2:dc:1d:07:83:1c:26:47:05:c9:a1:
93:14:3a:5b:6b:33:4d:bd:55:8b:82:e6:b8:f5:89:
fb:22:5c:38:7a:fc:74:0d:cc:d0:eb:b5:f5:f9:22:
77:e6:2b:45:1a:e2:38:b9:1c:3e:12:bb:c5:66:7b:
6b:7b:2b:b7:e9:da:80:bd:e3:31:91:7d:32:5d:87:
1f:76:01:4d:bc:25:b8:ca:5a:ce:69:b4:da:4b:08:
a5:a5:56:b1:a8:2c:41:12:d9:d1:1f:41:4a:cd:b8:
f6:13:3c:52:91:ed:d2:7c:64:63:a5:c2:c1:3c:12:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:11:91:3E:B3:DE:80:79:86:B7:BB:A6:C4:4D:02:89:C1:D1:9D:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BEAE2240F47711EF974EB44C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.44.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:b5:7d:58:41:a6:4f:7d:fb:be:c7:3d:46:8b:47:85:63:a9:
b8:d6:23:88:7f:ae:11:13:41:49:5c:f6:02:3c:cc:49:70:99:
36:1d:4b:ce:c2:8a:93:b2:3f:65:c2:94:84:0e:57:a6:08:7f:
6f:d4:97:3c:a0:1a:10:f8:0f:fc:ec:e5:ab:72:e0:49:92:10:
93:a0:14:ac:41:95:29:57:7b:fa:43:e5:09:1c:29:a0:5c:00:
f2:1f:5c:4f:58:91:c1:97:e1:4e:7e:82:c4:f1:f7:2c:b4:d0:
82:4a:33:89:d9:e0:b1:32:ba:a1:80:e0:f1:a4:b3:0e:4c:01:
02:af:67:f8:2b:69:f6:a9:3a:cd:72:7d:38:ea:d2:50:81:28:
92:d1:f1:12:3a:80:41:18:11:5d:84:b0:d4:e2:df:34:70:48:
70:d7:f9:31:cf:b1:b5:10:2a:5a:4b:30:36:9a:4e:76:8e:aa:
6c:9b:34:0a:d7:dd:d2:bd:7a:35:28:96:2a:d2:b6:18:6c:07:
8c:3a:c5:42:7c:2c:ad:c6:d3:50:af:42:c8:3d:d1:7e:3e:84:
82:73:b8:3a:69:84:1a:49:28:ce:71:49:90:32:33:11:1a:66:
34:5b:ef:36:b2:7f:22:29:c7:a8:bc:48:ff:f2:97:89:1f:24:
18:81:19:32
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWWfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTkyNzM3WhcNMjgwMjE5MTkyNzM3WjAYMRYw
FAYDVQQDEw02N2JmNmIyZC1mZGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtKvFMt2oCzgvtnmuZdnctlV3zDwgVtEq1XgBSIq0EgP4nYJlAgjxV5go
oo2bwohJOIujylZmf0vJa0bDMRCOTZMvYHn7vX7qHOm+I3cy8nZ68ldT74U0Uram
DnXuSJ6vaQtb98W71/A02Z2/ZLKe1xzg4Bf55hsH5otqDTHsxwIRNNxFYI5c6J4E
wtwdB4McJkcFyaGTFDpbazNNvVWLgua49Yn7Ilw4evx0DczQ67X1+SJ35itFGuI4
uRw+ErvFZntreyu36dqAveMxkX0yXYcfdgFNvCW4ylrOabTaSwilpVaxqCxBEtnR
H0FKzbj2EzxSke3SfGRjpcLBPBIeVQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHAR
kT6z3oB5hre7psRNAonB0Z08MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRUFFMjI0MEY0NzcxMUVGOTc0RUI0NEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtosMA0GCSqGSIb3DQEB
CwUAA4IBAQCetX1YQaZPffu+xz1Gi0eFY6m41iOIf64RE0FJXPYCPMxJcJk2HUvO
woqTsj9lwpSEDlemCH9v1Jc8oBoQ+A/87OWrcuBJkhCToBSsQZUpV3v6Q+UJHCmg
XADyH1xPWJHBl+FOfoLE8fcstNCCSjOJ2eCxMrqhgODxpLMOTAECr2f4K2n2qTrN
cn046tJQgSiS0fESOoBBGBFdhLDU4t80cEhw1/kxz7G1ECpaSzA2mk52jqpsmzQK
193SvXo1KJYq0rYYbAeMOsVCfCytxtNQr0LIPdF+PoSCc7g6aYQaSSjOcUmQMjMR
GmY0W+82sn8iKceovEj/8peJHyQYgRky
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:28:23 2025 by rpki-client