Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82A9242EDFF611EFA0288072762E951A.roa
File: 82A9242EDFF611EFA0288072762E951A.roa (raw, json)
Hash identifier: 7vvRrKbDKUcuZaOjzRZWmoMuBHMMYfAo1Mrck91dKuc=
Subject key identifier: B3:82:48:33:97:07:80:5E:37:02:A8:9F:2A:56:98:5C:5F:6E:70:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E25
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82A9242EDFF611EFA0288072762E951A.roa
Signing time: Fri 31 Jan 2025 17:12:12 +0000
ROA not before: Fri 31 Jan 2025 17:12:08 +0000
ROA not after: Mon 03 Mar 2025 17:12:08 +0000
asID: 398823
IP address blocks: 154.213.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85541 (0x14e25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 17:12:08 2025 GMT
Not After : Mar 3 17:12:08 2025 GMT
Subject: CN=679d046c-63bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:1d:24:9c:26:18:3f:40:0b:43:51:77:c5:
fd:75:c4:c3:a7:f0:a1:7e:af:c7:46:cb:ce:f3:ef:
49:e9:d8:a0:81:aa:37:b9:d7:49:5d:6e:9c:6d:b1:
34:82:92:57:e1:e5:d4:12:4a:db:73:bc:30:2b:8d:
70:1e:6a:9d:04:41:99:56:fb:d7:c9:95:0f:12:5a:
10:44:d1:02:f3:f1:fc:db:5b:ac:04:cf:9e:68:c3:
55:74:5d:c5:3e:3c:6e:7d:07:6a:19:58:22:72:fe:
8b:20:a4:b7:5b:c5:ec:83:53:cc:b4:0d:40:ef:c7:
ae:8e:37:2d:26:a1:bd:42:68:f4:b9:67:ce:0a:e2:
44:9a:7f:65:d7:16:e2:21:39:04:d4:a6:23:6c:4b:
d1:26:27:f5:fc:dc:0d:0e:58:92:4a:6d:26:f8:4f:
62:ac:73:f6:e4:59:c6:db:c0:92:ac:4a:72:1e:25:
5d:00:8e:f1:9b:74:52:74:ce:64:62:6c:b4:9e:5d:
17:9c:3e:15:14:3e:96:fb:de:48:d2:87:98:50:59:
47:6c:e1:00:dc:8f:1c:f7:1e:f1:0a:c6:a7:84:a7:
92:44:de:7a:9d:5e:4b:a4:99:a3:aa:6b:57:0b:3b:
b3:70:78:4f:b2:fd:a5:68:df:95:18:3a:f9:82:7d:
84:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:82:48:33:97:07:80:5E:37:02:A8:9F:2A:56:98:5C:5F:6E:70:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82A9242EDFF611EFA0288072762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.168.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:0c:96:50:78:11:ad:ef:df:62:5d:d1:5f:07:ea:fd:a3:97:
1d:17:ed:14:2c:15:98:65:92:6f:5a:52:9a:bd:8e:47:d6:df:
51:18:19:3c:c2:1d:50:b6:4e:6c:83:1f:e1:10:e5:71:a5:9d:
9b:5e:36:36:e1:38:c4:6d:42:6b:32:f4:7a:b3:70:97:f9:75:
c0:09:ac:12:16:0f:59:25:ac:dc:56:7a:5b:9d:b3:31:21:c5:
1d:c5:58:22:14:21:e8:96:19:19:d0:d2:36:1a:de:37:ee:1e:
a4:19:68:96:d6:7b:2e:50:86:1f:ac:73:eb:c2:2e:87:11:2b:
3f:04:41:aa:52:df:35:db:d0:71:c9:3c:36:98:1f:ed:c4:49:
51:0f:28:40:66:16:04:53:1b:cd:3f:e0:0b:7c:8c:56:d2:89:
ed:b4:97:d2:82:6f:ed:28:f5:ab:58:ca:37:0e:12:0a:14:34:
97:09:8d:b2:69:f7:40:74:ad:0f:9d:7a:e3:a3:75:e6:ea:05:
3a:d2:e2:4f:1f:d2:91:ab:7d:f1:0d:4b:b0:79:5d:77:8d:40:
bc:52:8e:f6:ad:c9:c6:64:e8:26:7f:bc:62:5a:77:06:73:a1:
73:5e:f1:47:b1:06:74:9d:7e:97:c4:cf:96:8f:2e:44:29:8b:
59:32:4a:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU4lMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTMxMTcxMjA4WhcNMjUwMzAzMTcxMjA4WjAYMRYw
FAYDVQQDEw02NzlkMDQ2Yy02M2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArIsdJJwmGD9AC0NRd8X9dcTDp/Chfq/HRsvO8+9J6diggao3uddJXW6c
bbE0gpJX4eXUEkrbc7wwK41wHmqdBEGZVvvXyZUPEloQRNEC8/H821usBM+eaMNV
dF3FPjxufQdqGVgicv6LIKS3W8Xsg1PMtA1A78eujjctJqG9Qmj0uWfOCuJEmn9l
1xbiITkE1KYjbEvRJif1/NwNDliSSm0m+E9irHP25FnG28CSrEpyHiVdAI7xm3RS
dM5kYmy0nl0XnD4VFD6W+95I0oeYUFlHbOEA3I8c9x7xCsanhKeSRN56nV5LpJmj
qmtXCzuzcHhPsv2laN+VGDr5gn2E2QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLOC
SDOXB4BeNwKonypWmFxfbnCdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MkE5MjQyRURGRjYxMUVGQTAyODgwNzI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmtWoMA0GCSqGSIb3DQEB
CwUAA4IBAQAaDJZQeBGt799iXdFfB+r9o5cdF+0ULBWYZZJvWlKavY5H1t9RGBk8
wh1Qtk5sgx/hEOVxpZ2bXjY24TjEbUJrMvR6s3CX+XXACawSFg9ZJazcVnpbnbMx
IcUdxVgiFCHolhkZ0NI2Gt437h6kGWiW1nsuUIYfrHPrwi6HESs/BEGqUt8129Bx
yTw2mB/txElRDyhAZhYEUxvNP+ALfIxW0onttJfSgm/tKPWrWMo3DhIKFDSXCY2y
afdAdK0PnXrjo3Xm6gU60uJPH9KRq33xDUuweV13jUC8Uo72rcnGZOgmf7xiWncG
c6FzXvFHsQZ0nX6XxM+Wjy5EKYtZMkom
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:28:09 2025 by rpki-client