Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F82972A8C40811EF868C0CBB762E951A.roa
File: F82972A8C40811EF868C0CBB762E951A.roa (raw, json)
Hash identifier: gWPITcm6KgfZ4u50G+iitfmkuZFyED8USdB8bjsIXn4=
Subject key identifier: BF:C6:14:27:B1:1D:87:08:48:C6:71:A4:27:C7:36:92:55:66:CF:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F82972A8C40811EF868C0CBB762E951A.roa
Signing time: Fri 27 Dec 2024 04:13:47 +0000
ROA not before: Fri 27 Dec 2024 04:13:44 +0000
ROA not after: Fri 12 Dec 2025 04:13:44 +0000
asID: 984
IP address blocks: 154.195.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76031 (0x128ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:13:44 2024 GMT
Not After : Dec 12 04:13:44 2025 GMT
Subject: CN=676e297b-34eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e5:5a:04:d4:20:aa:25:51:53:7a:2a:07:e5:
09:25:ea:77:f9:d4:a2:b7:57:31:01:d7:7d:16:c1:
8b:a8:61:ac:c6:4d:69:0e:56:a2:6c:75:23:77:14:
93:dd:ad:bf:44:6f:ed:7c:dc:df:1a:2b:a2:2c:cc:
96:7f:b5:0f:a3:f1:4b:a3:04:cb:3e:12:d2:59:42:
80:9c:dc:73:2e:f7:38:b3:03:e4:98:a0:64:e2:04:
be:91:f4:af:10:24:6e:7c:88:8e:46:e6:35:96:a0:
33:ed:9d:8e:81:d0:e2:8d:40:79:19:24:cd:d6:30:
3a:31:c6:18:fd:0b:c0:5c:e2:4f:67:82:69:a9:b2:
3b:bb:18:32:ef:2f:c2:02:9e:30:61:6d:33:1d:0f:
86:dc:fe:c9:bd:c9:6e:ec:4b:42:3b:34:19:b4:76:
f3:d2:9e:4a:c9:50:0a:66:91:60:57:80:41:c5:d7:
e3:d9:8a:12:f0:7c:e8:35:2b:bf:58:1f:f0:1c:09:
7c:29:ba:6f:e7:5c:2e:c5:b2:70:ed:1d:64:27:4c:
fa:5f:c5:31:a7:96:94:40:4b:65:fd:6a:7f:0e:06:
55:39:25:6f:00:07:db:2e:77:9d:d9:d8:19:ab:0d:
b1:64:1d:34:c0:c0:b0:0d:bc:c1:fb:02:bb:07:de:
a9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C6:14:27:B1:1D:87:08:48:C6:71:A4:27:C7:36:92:55:66:CF:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F82972A8C40811EF868C0CBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.46.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:c9:b4:52:b5:d7:9c:30:31:af:28:54:95:bc:6b:51:07:7b:
20:e2:5e:e3:12:c4:a3:9d:d1:47:39:ca:9c:09:b6:f1:be:32:
ba:05:dc:6c:04:f2:f7:47:2f:ba:08:7f:83:2a:08:4c:d9:d7:
7e:61:93:6b:85:53:5a:1c:dd:d9:60:a8:8f:02:81:96:23:59:
7c:78:de:41:fb:40:59:cf:e8:5b:f9:e3:21:9d:9e:55:a6:3a:
53:36:b5:64:47:0f:13:a3:40:fa:91:18:86:83:ea:7c:7a:1c:
9c:f7:df:9e:90:e7:ac:96:82:82:22:61:fe:06:0a:a7:15:19:
70:18:2e:b3:03:4b:b4:f5:ff:40:ae:b2:71:39:2c:59:06:06:
b7:b7:41:2e:8a:e9:a0:b9:6b:e7:53:02:b5:11:f0:a7:38:69:
a7:22:2e:7a:13:9d:f7:60:a1:ad:6f:84:b2:b9:71:dc:5e:e6:
dd:b8:0b:13:2d:fc:98:35:ec:18:96:73:e1:d0:4c:0b:56:b0:
24:17:66:bc:36:55:52:8c:c0:e8:54:73:62:47:7c:9f:c2:11:
7c:83:1d:03:a9:6c:d6:1e:86:ce:f7:e9:40:9e:90:81:91:4a:
86:e6:9d:9e:36:98:59:6b:a6:a2:55:db:17:7b:44:62:03:01:
96:9d:06:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDASj/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjI3MDQxMzQ0WhcNMjUxMjEyMDQxMzQ0WjAYMRYw
FAYDVQQDEw02NzZlMjk3Yi0zNGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7+VaBNQgqiVRU3oqB+UJJep3+dSit1cxAdd9FsGLqGGsxk1pDlaibHUj
dxST3a2/RG/tfNzfGiuiLMyWf7UPo/FLowTLPhLSWUKAnNxzLvc4swPkmKBk4gS+
kfSvECRufIiORuY1lqAz7Z2OgdDijUB5GSTN1jA6McYY/QvAXOJPZ4JpqbI7uxgy
7y/CAp4wYW0zHQ+G3P7Jvclu7EtCOzQZtHbz0p5KyVAKZpFgV4BBxdfj2YoS8Hzo
NSu/WB/wHAl8Kbpv51wuxbJw7R1kJ0z6X8Uxp5aUQEtl/Wp/DgZVOSVvAAfbLned
2dgZqw2xZB00wMCwDbzB+wK7B96pYwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL/G
FCexHYcISMZxpCfHNpJVZs9vMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GODI5NzJBOEM0MDgxMUVGODY4QzBDQkI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsMuMA0GCSqGSIb3DQEB
CwUAA4IBAQDRybRStdecMDGvKFSVvGtRB3sg4l7jEsSjndFHOcqcCbbxvjK6Bdxs
BPL3Ry+6CH+DKghM2dd+YZNrhVNaHN3ZYKiPAoGWI1l8eN5B+0BZz+hb+eMhnZ5V
pjpTNrVkRw8To0D6kRiGg+p8ehyc99+ekOesloKCImH+BgqnFRlwGC6zA0u09f9A
rrJxOSxZBga3t0EuiumguWvnUwK1EfCnOGmnIi56E533YKGtb4SyuXHcXubduAsT
LfyYNewYlnPh0EwLVrAkF2a8NlVSjMDoVHNiR3yfwhF8gx0DqWzWHobO9+lAnpCB
kUqG5p2eNphZa6aiVdsXe0RiAwGWnQaR
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:00:52 2025 by rpki-client