Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81BB247CDA5611EF83D15580762E951A.roa
File: 81BB247CDA5611EF83D15580762E951A.roa (raw, json)
Hash identifier: 3DROCR1uB5iYZ4lqMfqr4yCI3cHA6uYdM0KW4YWyRs8=
Subject key identifier: BB:DC:28:59:E9:1B:B7:3D:B2:30:1D:7A:E9:33:AA:2C:E6:A8:C3:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01476B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81BB247CDA5611EF83D15580762E951A.roa
Signing time: Fri 24 Jan 2025 13:24:15 +0000
ROA not before: Fri 24 Jan 2025 13:24:11 +0000
ROA not after: Sat 01 Mar 2025 13:24:11 +0000
asID: 44559
IP address blocks: 154.205.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83819 (0x1476b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:24:11 2025 GMT
Not After : Mar 1 13:24:11 2025 GMT
Subject: CN=6793947f-0c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:70:8f:85:75:eb:8f:21:e1:11:6d:a2:cc:
7d:27:68:0d:b4:b5:6d:0f:cd:85:23:21:fe:0a:66:
9b:99:bb:75:77:de:e2:21:9f:d9:bc:b8:a5:6c:90:
9a:de:ab:6f:be:37:28:e4:20:2b:4f:69:1b:04:6c:
91:51:1c:a1:76:8d:17:d8:50:96:85:fa:13:b0:01:
d7:b3:24:e4:66:83:16:5c:8b:b7:e1:3a:a3:45:d6:
58:dc:94:dc:d7:1c:6d:24:72:0c:cb:8a:49:48:02:
c2:69:66:0f:6f:8f:55:d6:ee:06:94:ca:e6:dc:12:
4c:f2:62:5e:bd:8d:61:9f:2e:9b:a3:34:f2:39:c2:
80:39:29:0d:c8:d3:58:e6:67:4d:d0:9e:21:18:ef:
3a:42:1e:e4:bf:e5:67:88:e3:48:f0:2d:ee:89:eb:
22:cf:03:5f:e3:1c:70:ac:c5:14:e7:f0:46:6e:5c:
63:0d:34:a0:0a:c4:2b:5c:6b:35:c0:df:4d:9e:54:
56:fc:55:7a:8d:1a:3f:26:d4:d8:38:8e:40:fb:cc:
8e:2e:78:a1:58:9e:d8:60:fa:55:c0:9a:f8:f8:4b:
ca:0c:4c:5f:12:e4:bf:65:79:a1:f1:03:09:ab:63:
c3:07:76:65:08:90:ce:38:64:cd:9e:63:6b:26:6c:
5d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DC:28:59:E9:1B:B7:3D:B2:30:1D:7A:E9:33:AA:2C:E6:A8:C3:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81BB247CDA5611EF83D15580762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.28.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:ee:37:cb:11:44:9d:55:8f:b1:d1:ef:c4:74:13:92:59:17:
f9:bc:d3:0f:cf:44:3c:38:8f:30:13:2c:ce:fe:4e:54:ea:37:
58:cb:49:96:a4:db:39:19:58:56:33:31:7b:d4:a6:e0:f0:85:
2c:f1:56:07:dc:9c:0b:3a:9f:c3:e2:b4:70:e6:20:50:5a:3f:
49:0f:b8:97:da:00:80:d4:1f:0c:7d:40:39:22:c1:0d:56:71:
f4:09:d3:95:62:7e:1e:9a:4e:73:11:43:7e:f6:9e:69:fa:31:
bc:92:a7:40:6f:8d:c5:0f:e8:50:14:6d:a1:20:f5:6c:04:65:
3a:4f:f4:4f:97:b7:c8:f5:04:c2:11:f8:e1:66:05:cb:15:3d:
cc:5c:0f:2c:db:c8:18:f3:21:80:61:91:4e:36:58:06:8c:13:
a8:8b:2a:3d:98:59:ca:c0:97:a0:79:bf:28:a3:1d:f8:1d:be:
1a:d8:c6:3f:9b:6a:3f:b4:04:84:1a:0c:ab:95:e9:82:0d:95:
a1:d3:7e:4a:f8:23:46:6c:2e:0e:40:68:9e:92:0b:cc:44:f2:
a9:29:b2:a1:c8:4b:2f:44:c3:c0:1f:e7:f5:d0:90:1d:5e:ba:
2d:00:22:4d:a7:1f:45:a7:72:e3:af:5c:81:5e:64:94:c1:42:
64:37:6c:fe
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUdrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTMyNDExWhcNMjUwMzAxMTMyNDExWjAYMRYw
FAYDVQQDEw02NzkzOTQ3Zi0wYzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqjBwj4V1648h4RFtosx9J2gNtLVtD82FIyH+Cmabmbt1d97iIZ/ZvLil
bJCa3qtvvjco5CArT2kbBGyRURyhdo0X2FCWhfoTsAHXsyTkZoMWXIu34TqjRdZY
3JTc1xxtJHIMy4pJSALCaWYPb49V1u4GlMrm3BJM8mJevY1hny6bozTyOcKAOSkN
yNNY5mdN0J4hGO86Qh7kv+VniONI8C3uiesizwNf4xxwrMUU5/BGblxjDTSgCsQr
XGs1wN9NnlRW/FV6jRo/JtTYOI5A+8yOLnihWJ7YYPpVwJr4+EvKDExfEuS/ZXmh
8QMJq2PDB3ZlCJDOOGTNnmNrJmxdtQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLvc
KFnpG7c9sjAdeukzqizmqMORMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MUJCMjQ3Q0RBNTYxMUVGODNEMTU1ODA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms0cMA0GCSqGSIb3DQEB
CwUAA4IBAQDB7jfLEUSdVY+x0e/EdBOSWRf5vNMPz0Q8OI8wEyzO/k5U6jdYy0mW
pNs5GVhWMzF71Kbg8IUs8VYH3JwLOp/D4rRw5iBQWj9JD7iX2gCA1B8MfUA5IsEN
VnH0CdOVYn4emk5zEUN+9p5p+jG8kqdAb43FD+hQFG2hIPVsBGU6T/RPl7fI9QTC
EfjhZgXLFT3MXA8s28gY8yGAYZFONlgGjBOoiyo9mFnKwJegeb8oox34Hb4a2MY/
m2o/tASEGgyrlemCDZWh035K+CNGbC4OQGiekgvMRPKpKbKhyEsvRMPAH+f10JAd
XrotACJNpx9Fp3Ljr1yBXmSUwUJkN2z+
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:06:35 2025 by rpki-client