Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C725E186C93111EFA7B7CC75762E951A.roa
File: C725E186C93111EFA7B7CC75762E951A.roa (raw, json)
Hash identifier: C4kYqcJPC1XjiSB/C/sR1+0Trl0UMDf/duiKnZxEjzY=
Subject key identifier: 82:34:A7:FE:65:50:DE:81:47:54:D0:E8:A6:E6:17:49:E7:18:DC:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C725E186C93111EFA7B7CC75762E951A.roa
Signing time: Thu 02 Jan 2025 17:48:30 +0000
ROA not before: Thu 02 Jan 2025 17:48:27 +0000
ROA not after: Mon 13 Dec 2027 17:48:27 +0000
asID: 17561
IP address blocks: 154.222.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78769 (0x133b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 17:48:27 2025 GMT
Not After : Dec 13 17:48:27 2027 GMT
Subject: CN=6776d16e-ffa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:e3:95:7c:9f:e4:2b:bb:f1:5a:af:05:59:
65:a4:91:9b:2e:71:c0:a4:ac:32:38:c9:a7:d2:27:
a0:24:63:37:cb:7e:1c:27:f4:32:64:09:4c:de:a6:
f1:b4:75:2b:8e:c8:26:57:46:70:86:83:a8:c6:96:
f9:5d:d2:0f:7b:b7:3c:cb:c3:7f:49:8a:e0:96:27:
ff:47:11:8a:ff:c5:c1:de:c0:ec:be:15:92:5e:45:
31:f9:c4:15:b5:07:ae:5f:4c:d0:6f:67:5a:08:6e:
e9:05:74:5d:16:5c:6a:68:44:b9:7f:3f:7d:d4:43:
05:05:92:47:3d:86:db:60:72:f7:5b:41:6a:1c:52:
a5:45:c4:09:42:a7:57:e1:d0:f7:47:71:5e:93:65:
32:df:c1:66:f2:50:cd:5d:43:aa:ad:b9:94:09:cc:
6c:62:e8:7e:f0:87:5c:9c:d6:b6:fa:48:7a:76:cc:
05:de:b6:09:11:3e:80:07:a3:85:d7:9f:f4:3a:82:
5b:a9:76:77:96:88:35:f4:70:ad:10:3f:29:48:7c:
97:3d:64:4a:72:f5:e7:84:4d:f5:fc:ae:ee:5f:cb:
bb:6a:7d:f3:a1:24:75:19:99:9d:e7:30:2f:65:15:
9d:39:42:65:5a:82:91:3f:4c:c6:1b:78:29:cc:17:
31:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:34:A7:FE:65:50:DE:81:47:54:D0:E8:A6:E6:17:49:E7:18:DC:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C725E186C93111EFA7B7CC75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.166.0/24
Signature Algorithm: sha256WithRSAEncryption
58:6b:15:43:ad:32:0c:6a:80:17:63:5c:4f:87:c5:d4:ef:76:
ab:97:d8:c8:76:9e:1b:d2:21:37:33:10:db:5d:7e:70:21:15:
16:fb:c5:fb:97:71:b1:62:31:8a:26:a9:1e:1d:bc:69:13:b2:
0d:dd:3c:53:50:05:df:2a:ee:b5:57:d9:ca:c3:e6:5b:0a:a7:
86:a0:5d:ed:5a:b7:52:8c:11:c4:89:1f:d2:e0:a4:2e:53:c2:
e6:37:35:46:4c:ab:30:a7:d1:56:1e:02:2e:d5:ae:c7:ba:6c:
49:2e:04:c1:ad:2c:7a:1c:9d:31:c2:06:1e:43:b5:b0:48:39:
d6:38:c2:01:ab:74:a1:49:19:e3:ad:ba:17:23:d7:fd:88:43:
da:de:b7:eb:7b:76:0c:f0:ff:33:64:cc:50:d8:21:17:09:2b:
da:9f:e5:8f:c2:96:87:d0:b9:a6:54:de:b1:60:dd:58:a5:84:
49:58:43:62:43:c1:d1:3a:9d:d8:ec:04:16:d5:0b:b5:d2:b0:
46:50:d0:43:59:40:a6:16:37:da:d5:0b:41:bb:77:8a:b7:0a:
73:23:40:f0:e4:f4:76:72:da:78:e7:3c:bb:f3:dd:dc:34:b2:
34:24:9b:d0:b6:bf:3c:0c:c7:e3:15:ff:c3:9d:f6:dd:d2:41:
a9:5b:e5:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATOxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTc0ODI3WhcNMjcxMjEzMTc0ODI3WjAYMRYw
FAYDVQQDEw02Nzc2ZDE2ZS1mZmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApSzjlXyf5Cu78VqvBVllpJGbLnHApKwyOMmn0iegJGM3y34cJ/QyZAlM
3qbxtHUrjsgmV0ZwhoOoxpb5XdIPe7c8y8N/SYrglif/RxGK/8XB3sDsvhWSXkUx
+cQVtQeuX0zQb2daCG7pBXRdFlxqaES5fz991EMFBZJHPYbbYHL3W0FqHFKlRcQJ
QqdX4dD3R3Fek2Uy38Fm8lDNXUOqrbmUCcxsYuh+8IdcnNa2+kh6dswF3rYJET6A
B6OF15/0OoJbqXZ3log19HCtED8pSHyXPWRKcvXnhE31/K7uX8u7an3zoSR1GZmd
5zAvZRWdOUJlWoKRP0zGG3gpzBcxLQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFII0
p/5lUN6BR1TQ6KbmF0nnGNwXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNzI1RTE4NkM5MzExMUVGQTdCN0NDNzU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt6mMA0GCSqGSIb3DQEB
CwUAA4IBAQBYaxVDrTIMaoAXY1xPh8XU73arl9jIdp4b0iE3MxDbXX5wIRUW+8X7
l3GxYjGKJqkeHbxpE7IN3TxTUAXfKu61V9nKw+ZbCqeGoF3tWrdSjBHEiR/S4KQu
U8LmNzVGTKswp9FWHgIu1a7HumxJLgTBrSx6HJ0xwgYeQ7WwSDnWOMIBq3ShSRnj
rboXI9f9iEPa3rfre3YM8P8zZMxQ2CEXCSvan+WPwpaH0LmmVN6xYN1YpYRJWENi
Q8HROp3Y7AQW1Qu10rBGUNBDWUCmFjfa1QtBu3eKtwpzI0Dw5PR2ctp45zy7893c
NLI0JJvQtr88DMfjFf/Dnfbd0kGpW+Ux
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:43:55 2025 by rpki-client