Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB4D5A56D97611EFAD1F279A762E951A.roa
File: BB4D5A56D97611EFAD1F279A762E951A.roa (raw, json)
Hash identifier: 9Xn+ozRzBuJwjJjapWHgDu8yPgzK310ykamgs/NZ9QA=
Subject key identifier: 5D:A6:65:9E:8C:BC:5E:50:E1:0E:A4:14:D3:9C:91:B4:EC:FD:43:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014141
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB4D5A56D97611EFAD1F279A762E951A.roa
Signing time: Thu 23 Jan 2025 10:42:24 +0000
ROA not before: Thu 23 Jan 2025 10:42:21 +0000
ROA not after: Fri 28 Feb 2025 10:42:21 +0000
asID: 62240
IP address blocks: 154.195.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82241 (0x14141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:42:21 2025 GMT
Not After : Feb 28 10:42:21 2025 GMT
Subject: CN=67921d10-0581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:52:4b:cd:d0:f0:52:98:22:24:2a:c0:53:
11:2e:10:95:42:e2:f3:8b:2b:88:a2:94:74:a2:65:
c9:03:79:93:f1:92:1e:d1:75:f2:b3:11:05:83:15:
be:50:0d:b4:78:33:31:8a:4c:ec:17:e2:8d:ce:20:
d8:0b:d6:02:21:26:1c:37:5c:60:00:24:83:5c:b1:
1a:02:50:04:7d:f6:88:57:5a:dd:b9:61:a8:39:f0:
21:b3:d1:97:17:72:94:86:e6:e3:a5:cb:a1:0b:82:
bc:ac:dc:f5:9d:c5:69:a9:98:26:ee:3a:4a:42:84:
1f:0a:8b:c4:93:0a:72:dd:28:7c:73:5a:97:8b:c4:
b3:e5:7f:53:5a:4c:f5:19:5e:1f:86:12:40:16:3e:
e2:6f:e4:e4:7e:0b:5a:f5:1f:4a:7e:97:43:48:e7:
e4:3d:53:50:60:b4:46:ec:01:ee:19:0d:bb:6e:c7:
62:69:ee:bc:3d:f9:6b:4e:92:3c:07:21:6b:e3:2e:
52:f4:b2:7e:dc:64:f1:16:42:eb:7f:3c:b7:7e:07:
bc:6c:d0:1e:13:cb:13:bc:45:b1:c5:eb:48:da:a2:
5d:d1:e5:41:ff:23:ce:02:47:6c:21:59:6d:70:3b:
35:92:45:03:f1:73:94:04:c4:5d:b6:9d:e3:87:eb:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A6:65:9E:8C:BC:5E:50:E1:0E:A4:14:D3:9C:91:B4:EC:FD:43:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB4D5A56D97611EFAD1F279A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.133.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:87:83:d6:b6:bc:dd:24:1b:1b:4e:01:e2:e9:b0:ca:f2:85:
87:c5:4b:a1:41:86:9d:e7:84:81:0e:3d:ff:3e:50:10:20:33:
64:83:73:0c:72:fa:54:29:5f:dd:e7:40:32:de:93:71:e5:7b:
22:fc:6e:1b:dd:5d:4a:fb:13:36:0c:4a:af:6f:6d:87:00:9f:
1d:f1:4e:53:9a:bc:3c:11:2b:c6:2c:49:cd:05:8d:4d:d8:de:
37:d7:7c:c3:72:aa:02:56:7a:de:ab:34:2d:b5:9d:69:6c:5f:
04:a4:0a:c5:34:53:80:c7:c9:48:a7:26:05:c6:11:cc:25:a0:
e5:53:4a:6b:8f:9c:65:3c:21:da:f7:3c:a1:5e:e2:e8:2d:8d:
83:92:a0:e7:57:c1:c1:14:b4:99:3a:97:89:4a:ed:31:f9:13:
ed:be:e0:10:d3:99:db:04:a1:99:08:5f:97:e7:e4:1f:8c:04:
8f:97:dd:15:82:78:79:80:1f:36:7c:97:78:55:69:1d:a4:89:
59:6f:3f:4a:c0:d5:1b:17:f8:70:45:75:a8:1e:51:a7:50:ed:
7f:92:dc:38:4a:16:00:16:88:72:8c:05:31:30:4e:0d:49:4d:
d8:40:be:50:d8:cf:b1:90:09:ff:da:b7:99:0e:f9:61:57:8d:
24:05:18:e3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUFBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTA0MjIxWhcNMjUwMjI4MTA0MjIxWjAYMRYw
FAYDVQQDEw02NzkyMWQxMC0wNTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmp5SS83Q8FKYIiQqwFMRLhCVQuLziyuIopR0omXJA3mT8ZIe0XXysxEF
gxW+UA20eDMxikzsF+KNziDYC9YCISYcN1xgACSDXLEaAlAEffaIV1rduWGoOfAh
s9GXF3KUhubjpcuhC4K8rNz1ncVpqZgm7jpKQoQfCovEkwpy3Sh8c1qXi8Sz5X9T
Wkz1GV4fhhJAFj7ib+Tkfgta9R9KfpdDSOfkPVNQYLRG7AHuGQ27bsdiae68Pflr
TpI8ByFr4y5S9LJ+3GTxFkLrfzy3fge8bNAeE8sTvEWxxetI2qJd0eVB/yPOAkds
IVltcDs1kkUD8XOUBMRdtp3jh+shKwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF2m
ZZ6MvF5Q4Q6kFNOckbTs/UNLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQjRENUE1NkQ5NzYxMUVGQUQxRjI3OUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsOFMA0GCSqGSIb3DQEB
CwUAA4IBAQCfh4PWtrzdJBsbTgHi6bDK8oWHxUuhQYad54SBDj3/PlAQIDNkg3MM
cvpUKV/d50Ay3pNx5Xsi/G4b3V1K+xM2DEqvb22HAJ8d8U5Tmrw8ESvGLEnNBY1N
2N4313zDcqoCVnreqzQttZ1pbF8EpArFNFOAx8lIpyYFxhHMJaDlU0prj5xlPCHa
9zyhXuLoLY2DkqDnV8HBFLSZOpeJSu0x+RPtvuAQ05nbBKGZCF+X5+QfjASPl90V
gnh5gB82fJd4VWkdpIlZbz9KwNUbF/hwRXWoHlGnUO1/ktw4ShYAFohyjAUxME4N
SU3YQL5Q2M+xkAn/2reZDvlhV40kBRjj
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:53:24 2025 by rpki-client