Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/782B1AD4DB2311EF98DD6E6C762E951A.roa
File: 782B1AD4DB2311EF98DD6E6C762E951A.roa (raw, json)
Hash identifier: mxIcJBsGCjjGOqQ/WVaG728WA5IYMzQPxxHXIMJ3Cdo=
Subject key identifier: B0:AE:5B:AB:27:45:D4:09:42:A9:F3:F3:45:A0:95:CB:91:E1:18:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/782B1AD4DB2311EF98DD6E6C762E951A.roa
Signing time: Sat 25 Jan 2025 13:51:26 +0000
ROA not before: Sat 25 Jan 2025 13:51:22 +0000
ROA not after: Tue 04 Feb 2025 13:51:22 +0000
asID: 5065
IP address blocks: 154.207.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84392 (0x149a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:51:22 2025 GMT
Not After : Feb 4 13:51:22 2025 GMT
Subject: CN=6794ec5e-4085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:d8:a7:b9:57:3c:c3:e9:28:61:26:8e:18:
3f:43:d8:09:8d:6d:a8:c4:a8:90:1a:8c:0c:7b:fe:
bc:44:c9:4c:98:e0:7f:8f:b6:0a:71:ec:2e:be:4a:
ed:a2:11:c9:68:a2:1b:2c:8e:9c:b5:64:eb:f7:3a:
2a:e6:18:58:30:e3:55:0b:2b:b3:33:1a:94:79:6c:
79:3a:83:b3:db:47:08:e5:b8:c7:ad:32:65:a1:06:
9b:ad:14:4e:a8:1b:93:ca:ff:89:26:c5:fb:9b:61:
55:2a:ab:29:ac:8d:d7:a1:e1:c3:72:b3:8d:1a:aa:
87:aa:a9:bb:fa:d5:a1:5c:1b:00:a1:cf:b6:bd:59:
fb:ea:55:aa:e5:7c:d5:fe:fa:72:2d:e1:ed:43:23:
61:16:f8:0e:19:88:39:90:35:d6:f5:ec:96:e1:42:
a1:84:3f:ad:25:b4:4f:a6:1c:fc:d7:54:62:b1:54:
3f:cd:cc:02:d1:cd:ef:62:d3:c7:7e:13:4f:4a:1f:
a0:00:8c:fd:4e:87:97:24:cb:32:df:49:43:ec:d0:
1f:3c:ac:72:15:57:2a:98:2d:4b:d5:2e:b0:3f:ec:
f8:11:9f:0d:5b:cd:2a:fe:d9:8a:45:3b:ce:ea:0b:
f4:1b:b4:a5:03:0c:4f:cf:eb:8c:81:b8:9e:66:7c:
5d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AE:5B:AB:27:45:D4:09:42:A9:F3:F3:45:A0:95:CB:91:E1:18:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/782B1AD4DB2311EF98DD6E6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.150.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:d8:92:28:a4:29:f7:f1:56:b6:a9:2b:92:96:83:8e:12:c6:
6b:a6:a2:4d:71:a0:20:ac:10:32:31:a5:33:1c:de:57:61:ea:
80:fe:c5:8e:ac:a8:35:2e:46:28:35:af:80:a6:0d:c3:a6:33:
e7:9e:80:41:f9:12:87:ee:f6:ac:48:b9:dc:bd:45:75:2c:76:
3d:bc:d5:af:4f:90:92:0d:cd:fe:1d:2d:28:c6:f2:1c:82:59:
a9:e4:9d:48:0e:70:d3:62:10:d2:6e:c0:58:d8:57:5f:9d:6e:
84:3f:65:52:b4:d6:84:0e:5f:df:ef:8c:1d:7c:72:06:01:d7:
24:d8:46:df:9a:55:85:de:2e:b8:55:d4:ba:aa:6f:87:b3:e4:
ef:87:30:78:07:47:db:c7:57:51:c5:0d:0f:c3:63:fe:80:65:
b3:d0:03:44:15:43:b3:a7:2c:a0:bf:12:3d:90:3e:4a:e9:86:
7b:68:eb:d8:f8:e6:99:63:3e:19:e2:8d:50:21:8b:e1:ac:07:
93:43:a6:9f:5b:7d:11:7e:42:48:1c:98:bc:9c:08:f6:b6:51:
10:31:0c:1d:16:f0:54:56:af:cd:f4:9c:4f:7f:cc:6f:45:f0:
74:72:0c:42:8e:c1:2f:06:a1:c9:14:33:de:ca:e0:5b:3d:17:
a8:cf:6f:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUmoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI1MTM1MTIyWhcNMjUwMjA0MTM1MTIyWjAYMRYw
FAYDVQQDEw02Nzk0ZWM1ZS00MDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyPHYp7lXPMPpKGEmjhg/Q9gJjW2oxKiQGowMe/68RMlMmOB/j7YKcewu
vkrtohHJaKIbLI6ctWTr9zoq5hhYMONVCyuzMxqUeWx5OoOz20cI5bjHrTJloQab
rRROqBuTyv+JJsX7m2FVKqsprI3XoeHDcrONGqqHqqm7+tWhXBsAoc+2vVn76lWq
5XzV/vpyLeHtQyNhFvgOGYg5kDXW9eyW4UKhhD+tJbRPphz811RisVQ/zcwC0c3v
YtPHfhNPSh+gAIz9ToeXJMsy30lD7NAfPKxyFVcqmC1L1S6wP+z4EZ8NW80q/tmK
RTvO6gv0G7SlAwxPz+uMgbieZnxdAwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLCu
W6snRdQJQqnz80WglcuR4RiFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83ODJCMUFENERCMjMxMUVGOThERDZFNkM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms+WMA0GCSqGSIb3DQEB
CwUAA4IBAQA/2JIopCn38Va2qSuSloOOEsZrpqJNcaAgrBAyMaUzHN5XYeqA/sWO
rKg1LkYoNa+Apg3DpjPnnoBB+RKH7vasSLncvUV1LHY9vNWvT5CSDc3+HS0oxvIc
glmp5J1IDnDTYhDSbsBY2FdfnW6EP2VStNaEDl/f74wdfHIGAdck2EbfmlWF3i64
VdS6qm+Hs+TvhzB4B0fbx1dRxQ0Pw2P+gGWz0ANEFUOzpyygvxI9kD5K6YZ7aOvY
+OaZYz4Z4o1QIYvhrAeTQ6afW30RfkJIHJi8nAj2tlEQMQwdFvBUVq/N9JxPf8xv
RfB0cgxCjsEvBqHJFDPeyuBbPReoz2/f
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:35 2025 by rpki-client