Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDD3BD3CF44911EF89981E8C762E951A.roa
File: FDD3BD3CF44911EF89981E8C762E951A.roa (raw, json)
Hash identifier: j0/AANORdB4/290Zp/jmp8+XQh5kgMmWZjAPKcF72Ns=
Subject key identifier: 27:46:88:B0:C2:E8:5B:02:BD:1D:AF:C1:7D:F4:2C:9A:2C:4C:79:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01640B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDD3BD3CF44911EF89981E8C762E951A.roa
Signing time: Wed 26 Feb 2025 14:00:10 +0000
ROA not before: Wed 26 Feb 2025 14:00:06 +0000
ROA not after: Sat 19 Feb 2028 14:00:06 +0000
asID: 17561
IP address blocks: 154.82.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91147 (0x1640b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:00:06 2025 GMT
Not After : Feb 19 14:00:06 2028 GMT
Subject: CN=67bf1e6a-82b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:1a:3f:fa:60:1d:28:11:b4:70:a2:8c:cd:
a1:9e:94:9e:32:47:d6:74:23:96:c5:7a:55:cc:51:
42:67:4a:e7:cc:8c:42:9e:3c:47:9d:4b:e9:6a:fa:
67:a4:7c:ac:4b:1f:e3:8e:ba:4b:22:0e:5c:75:ce:
dd:a0:78:52:ad:12:89:83:c8:e9:d9:86:38:65:9a:
80:57:d3:78:17:6c:f6:13:ed:1d:41:14:87:2e:45:
2c:03:c4:fc:23:82:8a:60:68:ab:be:a4:1c:e5:97:
ac:e7:1f:72:42:6d:17:5e:c5:1f:43:37:02:8c:dc:
21:8b:dd:49:13:8d:05:12:d4:6c:3f:aa:51:da:b9:
b1:63:d9:dc:ab:8b:3f:08:a7:7e:a6:57:69:0a:8f:
ce:f8:ec:d1:ca:2d:70:ce:92:66:a5:91:c2:49:96:
ed:4d:04:28:ba:b5:57:dc:a3:ab:de:04:2c:6d:58:
74:b5:9d:31:d9:0c:98:00:ba:25:5f:f6:cf:89:04:
09:e6:58:8b:07:3f:2a:ca:40:ad:bf:79:3c:cc:c2:
f8:51:87:16:36:f0:fc:dd:e2:b0:36:0b:17:e5:37:
0c:9a:f2:99:17:f7:84:fa:3d:1f:28:1e:55:48:8c:
1e:ba:47:02:07:f6:c4:10:08:a3:dd:81:b4:ba:04:
b5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:46:88:B0:C2:E8:5B:02:BD:1D:AF:C1:7D:F4:2C:9A:2C:4C:79:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDD3BD3CF44911EF89981E8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.191.0/24
Signature Algorithm: sha256WithRSAEncryption
73:2a:08:25:27:13:f0:c8:47:5a:5c:de:c0:40:31:8d:20:24:
a6:44:36:a1:d0:1c:70:c1:17:25:7c:00:5a:d5:2e:36:a8:f1:
5c:e0:2b:b1:bf:ba:97:9d:c2:f5:00:27:dc:ab:6f:65:51:ba:
e1:f8:7c:d1:fd:35:e8:fa:c6:5d:02:8d:9f:dc:d4:ea:e3:e7:
38:97:0b:e5:f5:07:fe:27:18:53:1f:eb:b4:14:ee:20:7d:0e:
96:8c:23:20:03:a3:99:78:2f:c3:18:64:c8:10:32:f3:8c:25:
e3:79:e8:00:05:7b:ba:47:83:4c:e6:8f:e4:78:cd:2a:b6:06:
3a:24:86:33:4d:4f:03:d4:f9:73:ad:92:25:ef:f6:e7:42:72:
ec:a7:69:0b:68:02:94:ed:d6:20:b4:54:c6:0f:93:bb:7b:c8:
25:d9:a5:8f:62:b0:34:eb:6f:00:4f:0a:93:8e:1a:94:25:83:
79:57:e8:1b:22:20:39:c6:18:96:de:34:48:31:c6:be:aa:88:
3f:6c:83:36:71:af:3a:9b:7b:f1:93:af:62:5a:f2:11:5e:3b:
ab:b2:7b:7b:bf:ec:be:48:c9:0f:59:2e:0f:dd:ba:78:50:08:
00:8d:1f:1e:c4:0d:f7:36:1f:65:d8:6d:8b:4f:08:10:48:34:
92:e9:7b:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWQLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTQwMDA2WhcNMjgwMjE5MTQwMDA2WjAYMRYw
FAYDVQQDEw02N2JmMWU2YS04MmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwtcaP/pgHSgRtHCijM2hnpSeMkfWdCOWxXpVzFFCZ0rnzIxCnjxHnUvp
avpnpHysSx/jjrpLIg5cdc7doHhSrRKJg8jp2YY4ZZqAV9N4F2z2E+0dQRSHLkUs
A8T8I4KKYGirvqQc5Zes5x9yQm0XXsUfQzcCjNwhi91JE40FEtRsP6pR2rmxY9nc
q4s/CKd+pldpCo/O+OzRyi1wzpJmpZHCSZbtTQQourVX3KOr3gQsbVh0tZ0x2QyY
ALolX/bPiQQJ5liLBz8qykCtv3k8zML4UYcWNvD83eKwNgsX5TcMmvKZF/eE+j0f
KB5VSIweukcCB/bEEAij3YG0ugS1awIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCdG
iLDC6FsCvR2vwX30LJosTHlcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GREQzQkQzQ0Y0NDkxMUVGODk5ODFFOEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlK/MA0GCSqGSIb3DQEB
CwUAA4IBAQBzKgglJxPwyEdaXN7AQDGNICSmRDah0BxwwRclfABa1S42qPFc4Cux
v7qXncL1ACfcq29lUbrh+HzR/TXo+sZdAo2f3NTq4+c4lwvl9Qf+JxhTH+u0FO4g
fQ6WjCMgA6OZeC/DGGTIEDLzjCXjeegABXu6R4NM5o/keM0qtgY6JIYzTU8D1Plz
rZIl7/bnQnLsp2kLaAKU7dYgtFTGD5O7e8gl2aWPYrA0628ATwqTjhqUJYN5V+gb
IiA5xhiW3jRIMca+qog/bIM2ca86m3vxk69iWvIRXjursnt7v+y+SMkPWS4P3bp4
UAgAjR8exA33Nh9l2G2LTwgQSDSS6XuX
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:50:33 2025 by rpki-client