Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB753790C93611EFB506B395762E951A.roa
File: DB753790C93611EFB506B395762E951A.roa (raw, json)
Hash identifier: aA/frSc0FAoLR8PSXTnyYPtZlsj7pWTpExG4NzzgmbQ=
Subject key identifier: 19:A9:DD:DB:CF:38:E4:27:2F:6E:6E:7A:9C:B5:12:BE:E1:05:1D:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB753790C93611EFB506B395762E951A.roa
Signing time: Thu 02 Jan 2025 18:24:52 +0000
ROA not before: Thu 02 Jan 2025 18:24:48 +0000
ROA not after: Mon 13 Dec 2027 18:24:48 +0000
asID: 17561
IP address blocks: 154.222.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78809 (0x133d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:24:48 2025 GMT
Not After : Dec 13 18:24:48 2027 GMT
Subject: CN=6776d9f4-2986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:67:4b:dc:25:a3:89:4c:8b:91:11:0e:4d:
d3:c8:30:26:61:e3:ef:84:4b:1c:80:68:e9:cd:2b:
0f:12:6f:37:8c:86:07:5f:e5:29:4c:86:b0:7d:f8:
18:69:31:3a:90:22:72:ae:84:41:ef:ec:1e:75:72:
ff:23:55:30:c7:34:ba:29:4d:e4:90:b1:f8:7e:ce:
02:29:6e:14:2f:7a:56:10:c8:5b:1f:10:5b:73:a9:
9f:b8:15:e4:5c:71:db:1f:4d:1d:d0:a9:ee:f6:ad:
e3:c6:e0:98:71:33:d7:b7:36:51:c7:4b:f1:4d:2b:
fc:43:01:cb:e2:cf:ed:7c:dd:a2:8a:97:a3:66:41:
87:63:5f:a8:ba:7d:f2:81:e9:a8:fc:66:4e:53:3c:
5c:01:04:58:3d:22:e8:23:ed:da:ea:06:3d:1c:3d:
a0:c3:1d:35:76:1a:73:af:03:17:26:dd:cf:77:81:
41:d6:5c:89:87:67:34:fa:7a:30:89:2a:cb:00:71:
a2:7e:2e:80:1f:1f:91:49:ca:a3:bf:5b:2b:be:06:
7e:56:ba:c5:0b:fa:05:a5:c3:72:bd:fa:66:0f:91:
50:85:1d:be:4f:94:f3:31:82:09:bf:03:cb:28:9c:
90:e3:0f:77:a2:fe:00:4f:6d:1b:56:c2:a0:c9:e4:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A9:DD:DB:CF:38:E4:27:2F:6E:6E:7A:9C:B5:12:BE:E1:05:1D:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB753790C93611EFB506B395762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.188.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:e4:90:6c:76:3f:cc:ae:95:d0:ee:4f:cc:34:03:43:8a:84:
32:2b:b7:55:47:f5:7c:8c:7b:11:f8:36:18:55:5a:d0:ca:28:
41:58:f6:b4:5b:bc:4f:c5:41:c5:fe:84:a3:d9:69:22:bf:a6:
56:92:63:52:0b:01:12:44:94:ad:9c:5c:b3:fb:2d:c7:6e:b7:
fe:5d:81:af:c2:b3:ae:ac:08:32:ab:30:61:46:b7:16:fd:4f:
58:25:92:4d:7e:f0:30:6c:56:1a:7b:69:10:b6:75:de:d3:54:
c8:5d:93:dc:33:12:8b:69:d1:f8:ac:15:85:1c:03:fd:60:32:
d7:c5:c2:25:98:5d:b1:21:6e:e2:8a:cb:69:ba:fb:33:55:df:
2b:36:1a:ab:d5:8e:1a:cf:38:ae:e5:be:aa:a7:29:cd:06:98:
86:77:74:14:5b:b0:03:2d:b1:73:65:e3:23:c8:4b:ba:de:ac:
4d:2f:50:cf:47:f4:60:8d:d6:a1:63:1c:33:f1:22:d1:4b:fa:
35:fb:b2:79:95:07:f1:c9:8a:a6:dc:e0:b4:e7:bb:d2:31:57:
e2:d5:59:d0:42:47:32:7b:cd:9c:4a:95:e1:55:5a:73:85:b9:
d1:6c:6c:36:9c:c9:f1:9d:1a:49:bd:8e:32:27:ef:27:2c:cf:
7c:ba:82:8a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATPZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAyMTgyNDQ4WhcNMjcxMjEzMTgyNDQ4WjAYMRYw
FAYDVQQDEw02Nzc2ZDlmNC0yOTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuKVnS9wlo4lMi5ERDk3TyDAmYePvhEscgGjpzSsPEm83jIYHX+UpTIaw
ffgYaTE6kCJyroRB7+wedXL/I1UwxzS6KU3kkLH4fs4CKW4UL3pWEMhbHxBbc6mf
uBXkXHHbH00d0Knu9q3jxuCYcTPXtzZRx0vxTSv8QwHL4s/tfN2iipejZkGHY1+o
un3ygemo/GZOUzxcAQRYPSLoI+3a6gY9HD2gwx01dhpzrwMXJt3Pd4FB1lyJh2c0
+nowiSrLAHGifi6AHx+RScqjv1srvgZ+VrrFC/oFpcNyvfpmD5FQhR2+T5TzMYIJ
vwPLKJyQ4w93ov4AT20bVsKgyeTbXQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBmp
3dvPOOQnL25uepy1Er7hBR10MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQjc1Mzc5MEM5MzYxMUVGQjUwNkIzOTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt68MA0GCSqGSIb3DQEB
CwUAA4IBAQDA5JBsdj/MrpXQ7k/MNANDioQyK7dVR/V8jHsR+DYYVVrQyihBWPa0
W7xPxUHF/oSj2Wkiv6ZWkmNSCwESRJStnFyz+y3Hbrf+XYGvwrOurAgyqzBhRrcW
/U9YJZJNfvAwbFYae2kQtnXe01TIXZPcMxKLadH4rBWFHAP9YDLXxcIlmF2xIW7i
istpuvszVd8rNhqr1Y4azziu5b6qpynNBpiGd3QUW7ADLbFzZeMjyEu63qxNL1DP
R/RgjdahYxwz8SLRS/o1+7J5lQfxyYqm3OC057vSMVfi1VnQQkcye82cSpXhVVpz
hbnRbGw2nMnxnRpJvY4yJ+8nLM98uoKK
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:48:35 2025 by rpki-client