Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB475AB2D8B711EF94031693762E951A.roa
File: BB475AB2D8B711EF94031693762E951A.roa (raw, json)
Hash identifier: /wiRCoA8nYHgKLYTMYGRsltcZ+e5IR3grhRDe2RnyPQ=
Subject key identifier: AC:21:C9:A1:5C:6C:00:E4:9D:15:2C:DB:AC:B1:37:A6:B0:33:10:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB475AB2D8B711EF94031693762E951A.roa
Signing time: Wed 22 Jan 2025 11:55:10 +0000
ROA not before: Wed 22 Jan 2025 11:55:07 +0000
ROA not after: Sat 08 Feb 2025 11:55:07 +0000
asID: 18229
IP address blocks: 154.210.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81690 (0x13f1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 11:55:07 2025 GMT
Not After : Feb 8 11:55:07 2025 GMT
Subject: CN=6790dc9e-2454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9b:fe:d0:7d:ef:c6:76:e2:2f:b4:b7:2a:96:
d8:ce:7b:9a:bb:37:58:c5:09:c3:f7:e3:15:12:3b:
47:9e:33:aa:a2:8b:59:40:a1:04:a7:88:e6:e7:49:
85:3b:ef:30:d9:05:d8:71:3b:d9:10:68:ad:2e:5f:
aa:6b:ee:2a:ea:d4:6a:93:a9:b7:4d:46:ac:2c:0a:
af:3d:e8:c3:6a:96:6c:0e:b3:1f:dd:8f:9a:8a:6a:
38:78:1f:56:5f:b9:90:08:b2:7f:0c:3c:28:49:b3:
2d:23:4d:21:99:c6:fe:6e:45:44:14:1a:d3:f6:85:
93:da:38:f2:8f:1f:37:cb:1b:9e:03:3a:14:34:ab:
71:86:04:25:c8:64:81:fd:c6:bd:f3:d0:b7:d6:98:
c0:68:f1:2f:ba:26:28:e6:9a:74:eb:af:3e:44:6e:
0a:9c:dd:5a:86:cc:f9:ed:36:b8:b6:51:c2:d4:57:
e5:10:85:4f:72:c5:a8:32:3b:cc:30:ab:58:7d:73:
06:ee:31:f4:f6:e9:2b:27:9d:76:46:1a:90:6d:a4:
3a:7f:7f:15:1f:e7:8a:1b:14:6c:79:0a:ca:cc:b7:
f5:c8:aa:d3:68:3f:d6:66:ac:ea:d8:c9:3e:be:ff:
1d:b3:d9:c5:88:bf:f1:36:99:8e:92:93:05:c7:df:
3e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:21:C9:A1:5C:6C:00:E4:9D:15:2C:DB:AC:B1:37:A6:B0:33:10:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB475AB2D8B711EF94031693762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.208.0/24
Signature Algorithm: sha256WithRSAEncryption
81:8b:e9:23:8a:e0:a0:56:0c:f8:c1:fe:86:18:1b:c7:fd:a4:
ad:59:f3:e3:b4:2b:60:cb:d0:28:8b:35:9b:1a:c3:0e:66:df:
39:2f:07:bc:ac:01:e4:82:82:6a:03:3a:6a:ea:cc:61:c0:9b:
de:8e:c7:a9:50:ce:3c:6a:08:d8:e2:5b:88:02:60:b3:d0:cd:
6b:6d:33:79:e0:11:32:ce:4a:f0:5e:cc:b5:2c:f6:f4:79:24:
3a:ec:d1:a4:6a:0e:25:ed:dd:95:eb:61:b1:b1:aa:c7:ca:72:
a1:79:11:9b:1a:7d:f9:a1:33:2d:1e:2b:31:da:af:b6:18:ad:
d2:5b:42:0a:8b:6a:66:6e:08:fa:9b:a8:3e:20:86:e1:8b:18:
db:cd:b4:62:2c:a2:4b:aa:4d:ae:dd:2e:19:8d:4d:cb:f5:20:
c8:0b:e3:ee:84:bd:cd:ee:16:d9:27:2c:96:0a:83:a4:3a:66:
23:10:f5:10:0d:7c:86:eb:26:5d:1d:c4:e9:b4:c0:ec:8d:77:
2f:c9:f0:7c:e0:5b:a2:4a:3c:9a:02:3a:16:6d:61:b8:65:23:
65:54:fc:f4:e4:f0:2f:9d:0c:7a:ba:eb:e8:eb:88:cc:76:30:
8e:5d:6f:ef:d8:b9:e0:9f:9a:61:92:9f:d3:19:c4:7b:95:fa:
d6:c5:f1:8e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAT8aMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIyMTE1NTA3WhcNMjUwMjA4MTE1NTA3WjAYMRYw
FAYDVQQDEw02NzkwZGM5ZS0yNDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA65v+0H3vxnbiL7S3KpbYznuauzdYxQnD9+MVEjtHnjOqootZQKEEp4jm
50mFO+8w2QXYcTvZEGitLl+qa+4q6tRqk6m3TUasLAqvPejDapZsDrMf3Y+aimo4
eB9WX7mQCLJ/DDwoSbMtI00hmcb+bkVEFBrT9oWT2jjyjx83yxueAzoUNKtxhgQl
yGSB/ca989C31pjAaPEvuiYo5pp0668+RG4KnN1ahsz57Ta4tlHC1FflEIVPcsWo
MjvMMKtYfXMG7jH09ukrJ512RhqQbaQ6f38VH+eKGxRseQrKzLf1yKrTaD/WZqzq
2Mk+vv8ds9nFiL/xNpmOkpMFx98+rwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKwh
yaFcbADknRUs26yxN6awMxAGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQjQ3NUFCMkQ4QjcxMUVGOTQwMzE2OTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtLQMA0GCSqGSIb3DQEB
CwUAA4IBAQCBi+kjiuCgVgz4wf6GGBvH/aStWfPjtCtgy9AoizWbGsMOZt85Lwe8
rAHkgoJqAzpq6sxhwJvejsepUM48agjY4luIAmCz0M1rbTN54BEyzkrwXsy1LPb0
eSQ67NGkag4l7d2V62GxsarHynKheRGbGn35oTMtHisx2q+2GK3SW0IKi2pmbgj6
m6g+IIbhixjbzbRiLKJLqk2u3S4ZjU3L9SDIC+PuhL3N7hbZJyyWCoOkOmYjEPUQ
DXyG6yZdHcTptMDsjXcvyfB84FuiSjyaAjoWbWG4ZSNlVPz05PAvnQx6uuvo64jM
djCOXW/v2Lngn5phkp/TGcR7lfrWxfGO
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:34 2025 by rpki-client