Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBA20940EF3C11EFA47033AB762E951A.roa
File: FBA20940EF3C11EFA47033AB762E951A.roa (raw, json)
Hash identifier: x6XGSrCYJ/LlP1Yt+2ZqPHWQmKg5h8/es8IDUdPHmXw=
Subject key identifier: 45:5B:35:69:B0:2C:7B:DE:F4:AE:40:0A:BF:6A:AF:24:7F:BC:0E:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0158A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBA20940EF3C11EFA47033AB762E951A.roa
Signing time: Thu 20 Feb 2025 03:44:27 +0000
ROA not before: Thu 20 Feb 2025 03:44:22 +0000
ROA not after: Wed 31 Dec 2025 03:44:22 +0000
asID: 17561
IP address blocks: 154.198.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88228 (0x158a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 20 03:44:22 2025 GMT
Not After : Dec 31 03:44:22 2025 GMT
Subject: CN=67b6a51b-eaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d3:25:b3:70:41:ca:77:4a:9b:c0:df:7d:b9:
05:b0:f0:1c:b5:ff:25:06:62:cb:c8:ba:3d:63:0a:
5a:b6:ad:fa:4c:ca:db:76:9a:31:fd:f8:35:b5:01:
73:0c:24:af:4d:d0:48:ac:df:98:02:13:96:86:6c:
99:0b:44:cf:49:5a:5d:da:aa:c5:0d:2d:18:86:23:
65:39:b5:de:c1:43:49:6d:b4:1b:d1:f6:43:05:76:
64:6a:aa:e4:46:37:9a:91:06:f2:3b:c9:69:a5:e5:
62:e7:bc:70:e7:db:42:4c:69:05:02:b0:b1:5f:35:
a6:15:6a:eb:67:97:d3:12:4a:47:4b:6c:3f:72:37:
58:23:03:74:ea:20:35:8a:64:b6:71:74:91:ee:8e:
f4:74:43:07:29:cd:01:e9:9e:0b:53:dc:ea:5d:12:
ec:98:a3:a8:85:1e:5e:22:c4:6d:20:ea:ff:b5:63:
16:b8:d1:fb:7b:6b:0d:6a:9a:09:5a:02:f8:5c:07:
9f:2b:50:45:59:58:6d:3d:c4:10:8a:f5:a1:06:85:
b3:be:0f:cf:61:50:81:fb:7e:f3:0d:27:ed:1c:bc:
f7:3b:ab:16:76:4d:cc:0d:90:17:79:5b:d5:ee:19:
c2:a9:a4:2c:1e:58:d3:c5:73:57:d1:28:29:aa:bb:
ec:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5B:35:69:B0:2C:7B:DE:F4:AE:40:0A:BF:6A:AF:24:7F:BC:0E:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBA20940EF3C11EFA47033AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.176.0/21
Signature Algorithm: sha256WithRSAEncryption
b0:f7:09:a4:0a:4d:9a:af:48:64:43:5c:47:3e:85:44:23:4b:
27:06:0f:ea:22:e7:68:0e:8d:a8:62:1a:f7:ad:fc:26:06:0c:
8b:dd:9b:69:a3:dc:2f:14:6f:ed:31:9a:60:cd:07:5d:09:85:
83:7f:cf:33:8c:c0:6e:c8:e6:8f:67:19:84:b0:2d:21:19:8e:
33:6c:60:7f:ac:79:8d:28:a9:20:dc:2b:a9:f6:f0:a5:f6:b8:
9a:aa:3f:47:4a:f9:f5:cc:1b:63:1c:80:5b:53:6f:f0:d4:7b:
17:5a:38:c4:f7:c6:fc:4f:3e:13:09:31:87:7a:6e:17:e4:be:
e9:51:dc:0d:39:88:c6:c1:3d:ba:d5:b4:c0:5e:ca:89:a4:85:
1e:10:e0:64:ef:2a:bd:14:11:2f:98:42:53:2e:7d:c9:3b:31:
16:1d:01:43:8b:e3:6a:7a:86:f9:c1:1a:1c:e0:56:f5:e2:32:
cc:71:72:b9:24:37:5f:a4:5b:db:ba:be:7b:fa:69:f4:3a:32:
93:6a:57:53:4f:5c:dd:46:81:cd:27:03:bc:48:ed:19:d2:3f:
23:c3:86:0e:a7:cd:bb:0a:f0:94:94:f1:df:04:c0:ce:3d:ef:
82:7f:5d:df:be:95:9a:f4:40:de:73:8f:a2:1d:34:3b:3f:e6:
2f:0b:89:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVikMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjIwMDM0NDIyWhcNMjUxMjMxMDM0NDIyWjAYMRYw
FAYDVQQDEw02N2I2YTUxYi1lYWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsdMls3BByndKm8DffbkFsPActf8lBmLLyLo9Ywpatq36TMrbdpox/fg1
tQFzDCSvTdBIrN+YAhOWhmyZC0TPSVpd2qrFDS0YhiNlObXewUNJbbQb0fZDBXZk
aqrkRjeakQbyO8lppeVi57xw59tCTGkFArCxXzWmFWrrZ5fTEkpHS2w/cjdYIwN0
6iA1imS2cXSR7o70dEMHKc0B6Z4LU9zqXRLsmKOohR5eIsRtIOr/tWMWuNH7e2sN
apoJWgL4XAefK1BFWVhtPcQQivWhBoWzvg/PYVCB+37zDSftHLz3O6sWdk3MDZAX
eVvV7hnCqaQsHljTxXNX0SgpqrvsRQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEVb
NWmwLHve9K5ACr9qryR/vA5eMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQkEyMDk0MEVGM0MxMUVGQTQ3MDMzQUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmsawMA0GCSqGSIb3DQEB
CwUAA4IBAQCw9wmkCk2ar0hkQ1xHPoVEI0snBg/qIudoDo2oYhr3rfwmBgyL3Ztp
o9wvFG/tMZpgzQddCYWDf88zjMBuyOaPZxmEsC0hGY4zbGB/rHmNKKkg3Cup9vCl
9riaqj9HSvn1zBtjHIBbU2/w1HsXWjjE98b8Tz4TCTGHem4X5L7pUdwNOYjGwT26
1bTAXsqJpIUeEOBk7yq9FBEvmEJTLn3JOzEWHQFDi+Nqeob5wRoc4Fb14jLMcXK5
JDdfpFvbur57+mn0OjKTaldTT1zdRoHNJwO8SO0Z0j8jw4YOp827CvCUlPHfBMDO
Pe+Cf13fvpWa9EDec4+iHTQ7P+YvC4lO
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:03 2025 by rpki-client