Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF5AD456C52C11EFBECA186B762E951A.roa
File: BF5AD456C52C11EFBECA186B762E951A.roa (raw, json)
Hash identifier: uxyBt3A3e7vFdFJY7bhx449/0iZ1wn/nF4TOYi/u0jM=
Subject key identifier: D0:76:40:D3:75:DB:A5:80:1E:E1:3B:09:D8:13:48:C6:AB:16:C3:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012BC5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF5AD456C52C11EFBECA186B762E951A.roa
Signing time: Sat 28 Dec 2024 15:02:25 +0000
ROA not before: Sat 28 Dec 2024 15:02:21 +0000
ROA not after: Fri 12 Dec 2025 15:02:21 +0000
asID: 984
IP address blocks: 154.204.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76741 (0x12bc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 15:02:21 2024 GMT
Not After : Dec 12 15:02:21 2025 GMT
Subject: CN=67701301-906a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:43:c0:68:68:68:03:11:6d:01:ea:52:6b:
d6:7f:aa:54:83:0c:f9:ca:1c:46:d2:dc:ef:c2:85:
ae:c7:bc:12:b1:66:05:0d:8e:4c:c1:07:4a:0c:9c:
ac:34:74:32:1a:42:85:f3:af:a3:df:78:e4:bd:3e:
64:21:49:01:51:bb:c8:18:8a:66:33:2f:ca:b7:e6:
ac:b1:15:0d:bd:ef:eb:49:a4:10:cc:ff:0d:28:87:
f6:ce:ff:0a:ec:3c:44:69:4c:c1:22:fb:ed:37:6f:
7a:cb:80:cc:49:56:4b:c9:e3:ee:5c:d3:92:50:40:
d1:bf:21:d3:d2:e5:8a:04:d3:ec:6a:a6:85:24:bd:
ae:de:e6:5d:8d:27:9d:a6:22:cc:cb:cf:82:80:60:
5f:ca:92:be:26:f0:94:74:64:df:50:1d:33:76:26:
ad:ac:b3:c8:f4:7a:63:2c:f9:7d:d9:90:3f:bf:25:
b9:f0:2a:49:be:65:48:d5:18:2f:0b:b6:da:83:8d:
84:15:0e:f5:f7:93:07:b8:cf:99:4b:93:6d:c2:59:
a4:69:32:83:6c:0c:f8:ef:94:78:7e:8a:4e:3c:ff:
41:a4:0e:8a:be:57:b8:c0:f0:83:97:12:ec:33:7d:
64:fa:d3:9d:dc:a0:7b:a1:43:7e:f6:22:29:a6:46:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:76:40:D3:75:DB:A5:80:1E:E1:3B:09:D8:13:48:C6:AB:16:C3:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF5AD456C52C11EFBECA186B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.75.0/24
Signature Algorithm: sha256WithRSAEncryption
27:eb:dd:f1:33:85:3b:0b:d3:bf:11:7a:3f:4a:bb:ba:68:39:
d1:ed:53:a1:84:d1:e6:74:ea:f4:2a:0a:99:0d:01:4f:14:06:
4e:ff:e1:c0:d7:ad:2f:0f:e4:62:5d:a7:45:3b:19:58:12:b8:
e2:9e:af:4e:31:b5:5a:a5:dc:98:7f:0d:85:58:64:34:a0:ee:
4c:3f:21:73:c5:82:28:f2:a8:dd:73:9a:2e:1e:d9:fa:fe:6f:
a0:22:f5:de:ba:f0:cb:36:f1:47:f8:cd:39:0b:f1:34:e6:fd:
7a:37:1b:59:11:c5:27:b9:70:76:ea:b1:08:0d:87:ad:fe:ad:
8c:b1:a6:82:e5:58:2e:98:c3:8e:06:28:b6:c9:b4:25:fe:25:
1f:de:70:bc:a9:f0:be:95:8d:52:b0:ba:ae:b8:7c:07:96:90:
ae:59:a3:8d:79:79:ce:a6:a8:2c:e4:76:0e:6f:fd:55:f3:6a:
c2:36:95:55:79:b1:e8:18:48:6e:45:0e:8b:53:fd:13:ad:17:
62:e4:fe:7e:20:2e:33:26:6b:86:42:4f:75:e1:51:b9:45:97:
3e:cb:96:ac:ec:18:ae:f3:a7:6f:9b:b0:d8:b6:be:f0:a8:bb:
24:05:ff:87:d2:a6:b3:24:19:d0:71:43:00:44:88:58:c5:46:
f4:c4:8e:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASvFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI4MTUwMjIxWhcNMjUxMjEyMTUwMjIxWjAYMRYw
FAYDVQQDEw02NzcwMTMwMS05MDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAumRDwGhoaAMRbQHqUmvWf6pUgwz5yhxG0tzvwoWux7wSsWYFDY5MwQdK
DJysNHQyGkKF86+j33jkvT5kIUkBUbvIGIpmMy/Kt+assRUNve/rSaQQzP8NKIf2
zv8K7DxEaUzBIvvtN296y4DMSVZLyePuXNOSUEDRvyHT0uWKBNPsaqaFJL2u3uZd
jSedpiLMy8+CgGBfypK+JvCUdGTfUB0zdiatrLPI9HpjLPl92ZA/vyW58CpJvmVI
1RgvC7bag42EFQ7195MHuM+ZS5NtwlmkaTKDbAz475R4fopOPP9BpA6Kvle4wPCD
lxLsM31k+tOd3KB7oUN+9iIppkbcnwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNB2
QNN126WAHuE7CdgTSMarFsM2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRjVBRDQ1NkM1MkMxMUVGQkVDQTE4NkI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsxLMA0GCSqGSIb3DQEB
CwUAA4IBAQAn693xM4U7C9O/EXo/Sru6aDnR7VOhhNHmdOr0KgqZDQFPFAZO/+HA
160vD+RiXadFOxlYErjinq9OMbVapdyYfw2FWGQ0oO5MPyFzxYIo8qjdc5ouHtn6
/m+gIvXeuvDLNvFH+M05C/E05v16NxtZEcUnuXB26rEIDYet/q2MsaaC5VgumMOO
Bii2ybQl/iUf3nC8qfC+lY1SsLquuHwHlpCuWaONeXnOpqgs5HYOb/1V82rCNpVV
ebHoGEhuRQ6LU/0TrRdi5P5+IC4zJmuGQk914VG5RZc+y5as7Biu86dvm7DYtr7w
qLskBf+H0qazJBnQcUMARIhYxUb0xI6+
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:52:59 2025 by rpki-client