Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAC1365ACBEA11EF87362C4B762E951A.roa
File: BAC1365ACBEA11EF87362C4B762E951A.roa (raw, json)
Hash identifier: 9XlLfuUga0mK2KXdo91T1zvz5h1g9/NDiK/v4ltW21c=
Subject key identifier: D0:F9:99:4B:07:88:49:D4:56:E6:1A:D1:C6:5D:EB:2C:CE:D6:FB:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0135A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAC1365ACBEA11EF87362C4B762E951A.roa
Signing time: Mon 06 Jan 2025 04:57:29 +0000
ROA not before: Mon 06 Jan 2025 04:57:25 +0000
ROA not after: Tue 04 Feb 2025 04:57:25 +0000
asID: 5065
IP address blocks: 154.84.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79272 (0x135a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 04:57:25 2025 GMT
Not After : Feb 4 04:57:25 2025 GMT
Subject: CN=677b62b9-5750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:35:60:b6:e7:a8:f5:45:83:7a:d0:c9:11:
42:3a:03:4f:8e:67:11:c6:63:2a:55:a3:7f:e3:c5:
1a:4a:77:aa:47:bf:1b:91:0f:b1:85:f0:1f:ee:e1:
b0:d7:b7:06:87:a0:e9:32:6d:88:d4:f2:c1:0c:2f:
21:f9:7a:e2:97:66:0c:30:88:d1:6c:44:a7:ee:f5:
f4:b2:11:f0:d0:2b:a4:3e:54:85:63:99:79:bc:e6:
2c:cc:90:f6:3f:b3:e4:46:aa:26:5b:de:04:ad:5a:
6f:61:6a:a2:5a:2d:01:05:90:9b:30:97:81:8c:90:
8a:01:9b:a6:47:44:7a:38:17:dd:1c:46:d7:13:83:
fb:9a:45:6e:08:06:d6:b0:95:b1:44:40:14:85:04:
5c:32:4a:78:6d:e1:dc:be:33:80:3a:61:28:9a:b6:
33:1a:4c:ee:1f:4a:cf:b0:5b:c5:ea:bb:c1:f0:d2:
32:28:e6:e1:e3:69:28:13:13:b4:fc:f4:48:ae:2a:
fd:73:93:e3:59:2d:9a:e5:a6:52:25:be:e1:0d:06:
e6:56:c6:6f:bf:5b:08:65:6c:59:5e:ad:5a:f1:a5:
85:35:ac:78:26:ea:90:e3:e7:52:72:25:04:df:9a:
59:bf:88:ff:dd:60:88:a6:c6:bc:1c:86:d9:f8:d0:
86:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F9:99:4B:07:88:49:D4:56:E6:1A:D1:C6:5D:EB:2C:CE:D6:FB:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAC1365ACBEA11EF87362C4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.144.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:9b:96:c9:4f:7e:0e:03:81:e7:ca:07:81:75:58:0c:51:e2:
9b:aa:fb:c0:18:32:8f:01:4d:bf:80:82:d7:a7:34:60:c4:0d:
0d:e6:ee:11:60:ea:4f:3b:1f:c8:74:72:3e:3f:09:8d:32:b7:
7a:96:d5:a8:5b:ad:8a:07:e8:4a:19:da:89:22:34:62:7f:46:
80:d8:2c:7b:7b:d4:a7:6b:68:19:e3:cb:67:cd:a3:81:47:ec:
ad:12:8f:87:17:88:0c:14:09:d0:62:4a:af:31:19:9b:42:2a:
37:61:47:9b:f9:8e:87:6a:1d:1b:d1:5c:ab:13:80:37:11:cc:
57:fe:d9:37:04:19:13:21:b3:2b:a0:d6:ee:59:47:6b:9e:b4:
d3:57:9c:20:39:26:f6:f1:a1:70:e5:1a:f9:ed:67:1b:f6:f3:
ed:d5:ee:73:e6:31:70:b3:1d:b8:ee:32:fe:7b:3e:95:a8:92:
41:22:f3:f0:3a:a1:fa:50:df:dc:21:41:f9:f1:ef:85:71:a9:
16:d2:4c:95:fd:0b:b2:84:49:01:7d:7c:0f:e6:34:2c:c7:c7:
46:ff:6e:c1:cb:22:0c:f6:40:c8:f4:2f:ab:28:a4:22:5f:ed:
9d:a5:4d:0d:fc:53:32:bd:41:2c:f9:8d:cf:56:5a:93:70:c0:
ea:29:d9:bd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATWoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA2MDQ1NzI1WhcNMjUwMjA0MDQ1NzI1WjAYMRYw
FAYDVQQDEw02NzdiNjJiOS01NzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsHE1YLbnqPVFg3rQyRFCOgNPjmcRxmMqVaN/48UaSneqR78bkQ+xhfAf
7uGw17cGh6DpMm2I1PLBDC8h+Xril2YMMIjRbESn7vX0shHw0CukPlSFY5l5vOYs
zJD2P7PkRqomW94ErVpvYWqiWi0BBZCbMJeBjJCKAZumR0R6OBfdHEbXE4P7mkVu
CAbWsJWxREAUhQRcMkp4beHcvjOAOmEomrYzGkzuH0rPsFvF6rvB8NIyKObh42ko
ExO0/PRIrir9c5PjWS2a5aZSJb7hDQbmVsZvv1sIZWxZXq1a8aWFNax4JuqQ4+dS
ciUE35pZv4j/3WCIpsa8HIbZ+NCGAQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFND5
mUsHiEnUVuYa0cZd6yzO1vsDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQUMxMzY1QUNCRUExMUVGODczNjJDNEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlSQMA0GCSqGSIb3DQEB
CwUAA4IBAQANm5bJT34OA4HnygeBdVgMUeKbqvvAGDKPAU2/gILXpzRgxA0N5u4R
YOpPOx/IdHI+PwmNMrd6ltWoW62KB+hKGdqJIjRif0aA2Cx7e9Sna2gZ48tnzaOB
R+ytEo+HF4gMFAnQYkqvMRmbQio3YUeb+Y6Hah0b0VyrE4A3EcxX/tk3BBkTIbMr
oNbuWUdrnrTTV5wgOSb28aFw5Rr57Wcb9vPt1e5z5jFwsx247jL+ez6VqJJBIvPw
OqH6UN/cIUH58e+FcakW0kyV/QuyhEkBfXwP5jQsx8dG/27ByyIM9kDI9C+rKKQi
X+2dpU0N/FMyvUEs+Y3PVlqTcMDqKdm9
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:12:18 2025 by rpki-client