Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D02F8B00F45211EF83D4D44B762E951A.roa
File: D02F8B00F45211EF83D4D44B762E951A.roa (raw, json)
Hash identifier: hEm1hnbiGPHDZ3WjtcRIf7LtnhujTM9sBhObL4HZDJk=
Subject key identifier: E1:A9:E2:D2:6E:30:23:1A:B8:9D:2D:9B:28:B3:BD:7E:29:C4:55:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01649D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D02F8B00F45211EF83D4D44B762E951A.roa
Signing time: Wed 26 Feb 2025 15:03:19 +0000
ROA not before: Wed 26 Feb 2025 15:03:15 +0000
ROA not after: Sat 19 Feb 2028 15:03:15 +0000
asID: 17561
IP address blocks: 154.82.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91293 (0x1649d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:03:15 2025 GMT
Not After : Feb 19 15:03:15 2028 GMT
Subject: CN=67bf2d37-d6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:23:53:5c:99:a7:18:34:32:e4:92:cc:ec:
53:5e:2e:68:c9:26:05:5a:10:56:e2:ea:93:91:b0:
f9:ef:c2:99:b5:03:01:82:14:9d:61:48:33:61:3d:
75:2e:ca:7a:a9:0e:8e:53:63:f2:4c:83:f1:8c:8a:
bb:da:10:bf:66:e3:8b:7e:97:14:86:6d:b2:8c:26:
79:3f:58:be:ea:00:b5:c8:af:86:60:e9:ce:c6:8c:
c9:bc:58:e8:55:3f:8f:72:2c:5a:77:e3:f7:82:c6:
f8:0d:47:d5:17:c3:8b:c2:7b:62:a8:ac:9c:85:55:
35:52:25:4a:a5:9f:93:53:ea:c5:1a:fd:8c:92:69:
47:be:19:2e:9e:66:1c:bf:84:b0:8a:42:bd:90:43:
11:98:00:46:1c:54:68:d2:63:a1:26:2e:4d:8a:84:
6d:8a:57:ba:df:df:1c:d1:19:69:91:2f:c2:dc:cc:
52:ca:38:72:93:a9:97:86:21:95:95:89:fd:61:a8:
e8:c4:db:10:24:c6:1e:7b:bf:86:28:1b:c7:02:d8:
a5:00:b6:6b:64:64:18:ad:02:63:30:61:ca:21:47:
d6:fc:ea:e4:17:b8:20:f1:96:92:12:f9:06:19:81:
96:00:77:c8:5f:1c:9e:22:73:48:16:b6:40:55:f2:
4b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A9:E2:D2:6E:30:23:1A:B8:9D:2D:9B:28:B3:BD:7E:29:C4:55:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D02F8B00F45211EF83D4D44B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.224.0/24
Signature Algorithm: sha256WithRSAEncryption
92:39:5f:6b:04:4d:e0:03:dd:5c:81:7c:08:f7:7e:56:3d:d5:
39:18:5e:46:ff:1e:79:21:40:f2:b6:c8:34:9b:25:1f:bc:cd:
48:f7:a9:ef:5c:7e:65:d9:16:3b:01:66:7e:14:c1:57:27:97:
c5:9d:96:0b:d7:8d:76:1a:2c:5c:9e:13:ad:c7:32:3e:bf:8a:
01:5e:0d:2f:9a:72:b0:f5:ce:dd:7c:9a:b7:37:25:c5:df:64:
16:f8:10:b7:0b:b5:e5:64:15:31:c3:67:dd:31:00:80:eb:5d:
d8:9a:72:fd:a3:6e:49:cd:62:80:f0:4d:80:90:48:e5:ce:a0:
ec:be:fc:af:a9:17:68:67:51:33:c8:4f:7f:e7:5e:c7:18:8f:
3c:e4:f2:11:32:f4:f7:a4:11:fd:0c:96:1c:53:d8:12:db:80:
93:b1:00:d1:a9:54:15:9c:7f:7b:5e:47:53:8b:07:b2:5f:f8:
87:87:ff:f2:50:a3:44:ee:fa:4c:0e:29:28:c6:25:10:b2:0b:
ee:94:64:a8:2f:a2:f7:d5:b4:dd:ce:ea:7b:c7:8c:04:5d:1f:
93:df:30:49:91:fd:03:b4:9a:ea:c4:d7:21:05:ff:2f:3a:3c:
35:45:46:99:25:1c:e1:54:e8:b8:cf:83:7f:64:ab:3b:35:b8:
62:96:6b:07
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWSdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTUwMzE1WhcNMjgwMjE5MTUwMzE1WjAYMRYw
FAYDVQQDEw02N2JmMmQzNy1kNmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqv4jU1yZpxg0MuSSzOxTXi5oySYFWhBW4uqTkbD578KZtQMBghSdYUgz
YT11Lsp6qQ6OU2PyTIPxjIq72hC/ZuOLfpcUhm2yjCZ5P1i+6gC1yK+GYOnOxozJ
vFjoVT+Pcixad+P3gsb4DUfVF8OLwntiqKychVU1UiVKpZ+TU+rFGv2MkmlHvhku
nmYcv4SwikK9kEMRmABGHFRo0mOhJi5NioRtile6398c0RlpkS/C3MxSyjhyk6mX
hiGVlYn9YajoxNsQJMYee7+GKBvHAtilALZrZGQYrQJjMGHKIUfW/OrkF7gg8ZaS
EvkGGYGWAHfIXxyeInNIFrZAVfJLUQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOGp
4tJuMCMauJ0tmyizvX4pxFXXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMDJGOEIwMEY0NTIxMUVGODNENEQ0NEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlLgMA0GCSqGSIb3DQEB
CwUAA4IBAQCSOV9rBE3gA91cgXwI935WPdU5GF5G/x55IUDytsg0myUfvM1I96nv
XH5l2RY7AWZ+FMFXJ5fFnZYL1412GixcnhOtxzI+v4oBXg0vmnKw9c7dfJq3NyXF
32QW+BC3C7XlZBUxw2fdMQCA613YmnL9o25JzWKA8E2AkEjlzqDsvvyvqRdoZ1Ez
yE9/517HGI885PIRMvT3pBH9DJYcU9gS24CTsQDRqVQVnH97XkdTiweyX/iHh//y
UKNE7vpMDikoxiUQsgvulGSoL6L31bTdzup7x4wEXR+T3zBJkf0DtJrqxNchBf8v
Ojw1RUaZJRzhVOi4z4N/ZKs7NbhilmsH
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:01:52 2025 by rpki-client