Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBF6A91CD98A11EF9FA7619E762E951A.roa
File: BBF6A91CD98A11EF9FA7619E762E951A.roa (raw, json)
Hash identifier: 40hUaFfF3sHyVRNnXQ807sjNxKUWUz2EpUE21iEz/8c=
Subject key identifier: 31:48:27:E3:72:75:93:A3:D2:57:0F:C9:23:A4:83:15:3B:82:11:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014260
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBF6A91CD98A11EF9FA7619E762E951A.roa
Signing time: Thu 23 Jan 2025 13:05:36 +0000
ROA not before: Thu 23 Jan 2025 13:05:31 +0000
ROA not after: Fri 28 Feb 2025 13:05:31 +0000
asID: 62240
IP address blocks: 154.195.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82528 (0x14260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 13:05:31 2025 GMT
Not After : Feb 28 13:05:31 2025 GMT
Subject: CN=67923e9f-b752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:ca:d5:3c:9e:28:70:8a:7a:08:62:b2:59:
6b:db:ff:18:1d:54:b7:83:b6:f5:8b:62:32:fb:d9:
40:9d:3a:19:5b:10:b7:45:7b:17:46:aa:ce:cb:5a:
7f:08:f3:96:5e:de:86:10:df:44:19:12:aa:09:6c:
16:86:e7:82:44:ce:4d:d0:7b:6a:a3:31:68:23:d3:
5c:1f:02:77:c0:f4:ba:ba:12:49:b0:ac:b4:2e:08:
1c:f1:e0:0e:17:9f:5a:76:6b:d7:71:96:f7:fd:5f:
26:40:80:6c:1d:07:3f:64:7d:e6:e7:62:ea:7b:66:
13:da:c6:5e:22:98:2f:d6:ee:6d:4b:b4:49:91:05:
7b:4d:99:21:a0:d0:6f:a0:93:36:ab:20:e5:60:8b:
f8:74:35:a3:28:fe:74:33:6b:4e:05:09:13:d3:c1:
f3:9a:22:41:ab:0e:9a:15:e5:3c:6d:41:e7:ca:d5:
3c:c1:0d:9f:ee:0c:b3:30:38:f5:46:63:89:b2:e0:
1c:3e:f5:9b:24:36:c1:8b:bb:36:aa:75:18:16:6c:
3e:3e:54:9f:c2:75:6f:4f:14:d1:e8:bd:fa:86:92:
87:05:58:97:29:d6:3b:06:a4:15:f9:25:e7:75:4e:
06:5d:72:6f:17:cb:98:79:ed:ff:a2:c0:ed:44:de:
cb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:48:27:E3:72:75:93:A3:D2:57:0F:C9:23:A4:83:15:3B:82:11:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBF6A91CD98A11EF9FA7619E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.103.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b9:a9:c1:71:05:1f:ac:e7:3d:41:f0:9b:56:94:d0:ba:6f:
58:2f:9b:b6:4e:46:87:d3:f2:b2:bc:53:b2:0a:39:f2:19:6a:
ab:d0:e5:30:ef:b8:54:d9:c4:b6:1a:58:f4:e7:38:b4:d6:20:
fb:fe:51:14:4b:8c:92:df:3d:e6:d1:af:73:95:53:a0:df:87:
f3:8b:04:f0:2d:4b:90:28:1d:49:1e:20:ad:fa:95:f8:64:2e:
c1:fd:06:63:68:91:51:70:bc:10:38:c9:fb:50:21:9b:7b:a5:
4c:04:3d:e2:cd:94:bc:91:ab:01:05:d6:54:49:2e:75:c7:c5:
71:51:c5:af:fc:d2:c0:80:4b:fc:54:9d:c7:8c:5a:84:64:10:
f1:90:dc:20:d2:02:15:4c:8f:9d:e0:ab:9a:06:78:28:15:d8:
1b:f6:49:83:87:ee:75:db:84:7c:5d:53:3d:7e:21:f5:bd:7b:
e1:46:ae:37:57:b5:ab:80:2c:6d:b7:ac:8c:5b:45:ef:de:2d:
7e:e0:2c:26:23:1e:e9:eb:76:5a:81:6e:3f:c7:00:25:8d:bd:
23:21:d5:41:77:a5:7c:01:44:9f:e9:a3:46:9d:03:61:08:94:
8d:1e:30:ef:a8:b6:9f:87:f8:b8:12:2c:f0:de:05:b3:83:79:
6a:35:ea:6f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUJgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTMwNTMxWhcNMjUwMjI4MTMwNTMxWjAYMRYw
FAYDVQQDEw02NzkyM2U5Zi1iNzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApXLK1TyeKHCKeghisllr2/8YHVS3g7b1i2Iy+9lAnToZWxC3RXsXRqrO
y1p/CPOWXt6GEN9EGRKqCWwWhueCRM5N0HtqozFoI9NcHwJ3wPS6uhJJsKy0Lggc
8eAOF59admvXcZb3/V8mQIBsHQc/ZH3m52Lqe2YT2sZeIpgv1u5tS7RJkQV7TZkh
oNBvoJM2qyDlYIv4dDWjKP50M2tOBQkT08HzmiJBqw6aFeU8bUHnytU8wQ2f7gyz
MDj1RmOJsuAcPvWbJDbBi7s2qnUYFmw+PlSfwnVvTxTR6L36hpKHBViXKdY7BqQV
+SXndU4GXXJvF8uYee3/osDtRN7LowIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDFI
J+NydZOj0lcPySOkgxU7ghFxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQkY2QTkxQ0Q5OEExMUVGOUZBNzYxOUU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsNnMA0GCSqGSIb3DQEB
CwUAA4IBAQCEuanBcQUfrOc9QfCbVpTQum9YL5u2TkaH0/KyvFOyCjnyGWqr0OUw
77hU2cS2Glj05zi01iD7/lEUS4yS3z3m0a9zlVOg34fziwTwLUuQKB1JHiCt+pX4
ZC7B/QZjaJFRcLwQOMn7UCGbe6VMBD3izZS8kasBBdZUSS51x8VxUcWv/NLAgEv8
VJ3HjFqEZBDxkNwg0gIVTI+d4KuaBngoFdgb9kmDh+5124R8XVM9fiH1vXvhRq43
V7WrgCxtt6yMW0Xv3i1+4CwmIx7p63ZagW4/xwAljb0jIdVBd6V8AUSf6aNGnQNh
CJSNHjDvqLafh/i4Eizw3gWzg3lqNepv
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:20 2025 by rpki-client