Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF95F40CC36811EF928A43B6762E951A.roa
File: BF95F40CC36811EF928A43B6762E951A.roa (raw, json)
Hash identifier: PGoFmzvtzzVeBbknFz6uSoruZ9kDCdpaosB1SQykHG4=
Subject key identifier: 4E:73:6B:D9:3D:8F:F9:35:C0:68:63:00:D9:A2:57:8C:E7:1C:4C:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF95F40CC36811EF928A43B6762E951A.roa
Signing time: Thu 26 Dec 2024 09:06:53 +0000
ROA not before: Thu 26 Dec 2024 09:06:49 +0000
ROA not after: Fri 12 Dec 2025 09:06:49 +0000
asID: 984
IP address blocks: 154.94.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75474 (0x126d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 09:06:49 2024 GMT
Not After : Dec 12 09:06:49 2025 GMT
Subject: CN=676d1cad-fa08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:8f:c5:9c:07:44:65:04:8f:ff:2e:4b:78:
71:b9:63:14:09:28:38:9f:7e:c2:a3:0b:b9:cf:7d:
eb:5b:81:b1:dc:0d:eb:6c:8c:6d:e5:c7:e4:6b:6d:
b9:25:32:f4:c3:4c:b7:77:90:2f:13:3e:4f:7b:a0:
74:3b:ce:e4:c2:88:5f:fb:2a:6f:f8:3c:30:79:2b:
b2:ad:43:20:38:38:c9:77:55:48:f8:ef:ad:a2:d9:
3e:0f:78:f8:1b:d4:9d:39:84:f6:8b:bf:34:67:fd:
4d:61:04:3b:c6:71:54:e5:79:29:7c:e4:e7:2a:77:
8d:1d:d5:24:e3:15:0f:c0:e4:00:a2:6d:3e:3e:bf:
49:79:9d:0e:4e:33:70:0a:8f:d6:89:d1:2a:b5:4b:
13:32:8f:8a:d0:f2:fe:08:20:74:2a:a8:1e:ab:36:
2a:69:71:04:47:d6:5b:da:58:27:f7:86:e1:f0:8d:
5c:82:e0:cf:20:b5:d4:4d:a3:cc:82:1e:5f:fc:74:
38:79:c0:e1:90:51:a5:a6:83:c9:52:26:1c:3f:1d:
c5:5b:56:6e:72:10:ce:db:31:d9:89:81:d9:fb:c4:
b9:d8:07:1d:ad:54:59:9e:cb:ec:07:2a:c8:62:00:
fe:6b:fe:c1:ce:89:bf:9b:b0:40:b0:9b:d3:65:2a:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:73:6B:D9:3D:8F:F9:35:C0:68:63:00:D9:A2:57:8C:E7:1C:4C:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF95F40CC36811EF928A43B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.128.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b0:75:71:9c:78:a8:bc:4f:74:42:54:95:ee:e3:19:82:da:
93:ac:27:bc:06:4a:48:36:0f:66:3e:11:07:d1:aa:5a:a7:77:
85:a7:5a:4e:3c:a8:36:b1:60:18:a8:ac:00:cb:6e:84:75:5a:
d0:3f:60:0e:db:ae:4d:45:9c:9c:ab:e3:94:75:e7:6d:4a:9b:
2c:a8:f8:5c:da:21:bd:bc:18:b8:20:8f:63:35:41:91:e1:cc:
d5:37:a1:a8:42:20:34:f1:a5:2f:a5:ac:42:12:0b:8d:9a:7d:
32:59:e4:17:96:c8:5e:f0:20:1e:16:f3:b2:dd:f8:a5:17:ac:
f2:6a:d8:82:1c:e2:b1:aa:89:bd:30:f2:b3:0a:41:2d:d1:04:
2f:48:4a:fb:fc:a2:f1:5d:86:d6:fa:92:f6:47:f9:9e:96:7b:
3e:cd:25:42:ad:8d:7d:d6:7a:54:2b:9c:3b:16:3b:af:1e:e4:
9c:e4:44:89:8b:89:47:6c:dc:8a:ee:47:5b:bf:f2:75:f7:8d:
fa:d7:57:9a:b7:f8:b0:80:0e:9e:72:f3:11:5b:dc:e8:53:fc:
1d:e3:df:f4:54:8e:fa:de:27:aa:52:c0:11:4d:72:55:04:81:
f1:2e:8e:70:4b:2b:dd:98:fb:f0:56:82:60:cc:dc:0d:bf:a1:
93:db:eb:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASbSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI2MDkwNjQ5WhcNMjUxMjEyMDkwNjQ5WjAYMRYw
FAYDVQQDEw02NzZkMWNhZC1mYTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv8mPxZwHRGUEj/8uS3hxuWMUCSg4n37Cowu5z33rW4Gx3A3rbIxt5cfk
a225JTL0w0y3d5AvEz5Pe6B0O87kwohf+ypv+DwweSuyrUMgODjJd1VI+O+totk+
D3j4G9SdOYT2i780Z/1NYQQ7xnFU5XkpfOTnKneNHdUk4xUPwOQAom0+Pr9JeZ0O
TjNwCo/WidEqtUsTMo+K0PL+CCB0KqgeqzYqaXEER9Zb2lgn94bh8I1cguDPILXU
TaPMgh5f/HQ4ecDhkFGlpoPJUiYcPx3FW1ZuchDO2zHZiYHZ+8S52AcdrVRZnsvs
ByrIYgD+a/7Bzom/m7BAsJvTZSoHAQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE5z
a9k9j/k1wGhjANmiV4znHEz4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRjk1RjQwQ0MzNjgxMUVGOTI4QTQzQjY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml6AMA0GCSqGSIb3DQEB
CwUAA4IBAQBbsHVxnHiovE90QlSV7uMZgtqTrCe8BkpINg9mPhEH0apap3eFp1pO
PKg2sWAYqKwAy26EdVrQP2AO265NRZycq+OUdedtSpssqPhc2iG9vBi4II9jNUGR
4czVN6GoQiA08aUvpaxCEguNmn0yWeQXlshe8CAeFvOy3filF6zyatiCHOKxqom9
MPKzCkEt0QQvSEr7/KLxXYbW+pL2R/melns+zSVCrY191npUK5w7FjuvHuSc5ESJ
i4lHbNyK7kdbv/J1943611eat/iwgA6ecvMRW9zoU/wd49/0VI763ieqUsARTXJV
BIHxLo5wSyvdmPvwVoJgzNwNv6GT2+uL
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:18 2025 by rpki-client