Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19C200EAC81611EF8EDBB763762E951A.roa
File: 19C200EAC81611EF8EDBB763762E951A.roa (raw, json)
Hash identifier: 0RdkJMRexIsYzugV2+0DmH53dGON8moOc63pwpzuSio=
Subject key identifier: 4D:BD:D1:77:A7:48:A5:11:FE:04:02:72:DF:C5:27:50:1D:62:5C:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01310E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19C200EAC81611EF8EDBB763762E951A.roa
Signing time: Wed 01 Jan 2025 07:57:52 +0000
ROA not before: Wed 01 Jan 2025 07:57:48 +0000
ROA not after: Fri 07 Feb 2025 07:57:48 +0000
asID: 205125
IP address blocks: 154.203.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78094 (0x1310e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 1 07:57:48 2025 GMT
Not After : Feb 7 07:57:48 2025 GMT
Subject: CN=6774f580-e05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:c6:60:e4:50:e6:38:94:16:21:f0:c6:10:
d8:fa:ef:1c:24:54:27:4d:c5:47:16:41:4e:e7:18:
6f:a8:ef:be:58:c8:50:28:a6:6d:ea:72:2f:d8:d2:
89:e0:b6:eb:74:76:91:4c:27:76:9b:c8:d3:78:83:
6a:d1:82:46:69:df:4c:4d:25:d4:5e:81:ff:06:e6:
f7:e0:71:0f:08:03:ce:6a:07:5d:51:92:f9:11:1c:
1d:8c:d0:7d:95:b6:dd:f1:67:04:2e:33:04:b7:c2:
47:3e:5f:b2:c3:c8:13:52:06:de:62:b0:a1:e5:16:
ef:3c:09:9d:53:a6:ff:07:b3:9b:3b:ec:8b:6c:24:
b7:1f:de:cf:ad:5d:67:9c:3f:9d:65:4f:62:69:e1:
2c:2f:15:48:1f:2c:f7:b1:70:9c:f5:91:ab:70:85:
bd:b1:9e:df:a6:2a:20:b1:16:e0:99:cb:e3:ac:e6:
f2:38:49:fc:e2:17:af:2a:a8:b2:66:da:59:a8:9b:
f3:2c:fe:28:da:ed:31:a4:20:ca:5e:0f:f6:fa:bc:
2b:d4:74:1e:fb:4e:af:34:d8:ff:a0:53:68:3b:68:
18:20:1e:9b:5b:7b:bd:59:a0:75:a6:67:ec:97:9b:
94:c4:f2:fd:2c:d9:69:60:72:83:27:df:f3:1b:f4:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BD:D1:77:A7:48:A5:11:FE:04:02:72:DF:C5:27:50:1D:62:5C:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19C200EAC81611EF8EDBB763762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.192.0/22
Signature Algorithm: sha256WithRSAEncryption
04:f6:99:45:43:9f:74:ea:2c:12:22:19:7e:15:ff:e3:b7:bc:
ee:bf:9e:ef:a9:4b:18:19:33:fc:1c:f4:50:3a:cc:d4:6c:b6:
ff:2d:26:0e:71:1a:46:1d:58:16:6b:22:7f:f5:8e:1e:13:03:
58:6b:62:f5:e1:e2:33:e5:a4:f8:68:29:66:0d:d3:2a:9e:cc:
16:b8:a5:ea:b3:1e:4b:a7:30:af:89:5d:8a:d0:70:89:06:5d:
01:41:f6:03:8a:93:67:6f:1b:a8:c6:88:9d:05:29:40:d9:f7:
e0:88:ed:14:be:50:54:dc:dc:23:72:a1:d8:10:2b:ec:64:a7:
34:1d:06:7d:d0:c0:fc:c7:78:04:b3:ea:21:cb:f7:4a:fd:d6:
fd:ba:53:8e:de:0a:5a:49:61:e6:05:1e:e9:0c:a4:de:a6:02:
40:5e:e1:90:c0:f6:f1:4a:20:b6:7d:fe:80:f0:55:f2:b7:e6:
72:8c:61:85:83:65:32:7b:d5:0b:06:ca:14:90:8b:97:94:80:
84:07:3e:c1:73:60:2f:a6:c7:93:02:96:69:e7:e3:33:1f:8c:
40:d7:38:6c:4a:3a:f3:8f:4f:de:13:6a:e8:f6:8d:2f:a6:3a:
40:c8:a6:07:21:8d:82:54:6b:89:7e:46:a5:a7:34:63:80:09:
3f:14:50:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATEOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTAxMDc1NzQ4WhcNMjUwMjA3MDc1NzQ4WjAYMRYw
FAYDVQQDEw02Nzc0ZjU4MC1lMDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs1DGYORQ5jiUFiHwxhDY+u8cJFQnTcVHFkFO5xhvqO++WMhQKKZt6nIv
2NKJ4LbrdHaRTCd2m8jTeINq0YJGad9MTSXUXoH/Bub34HEPCAPOagddUZL5ERwd
jNB9lbbd8WcELjMEt8JHPl+yw8gTUgbeYrCh5RbvPAmdU6b/B7ObO+yLbCS3H97P
rV1nnD+dZU9iaeEsLxVIHyz3sXCc9ZGrcIW9sZ7fpiogsRbgmcvjrObyOEn84hev
KqiyZtpZqJvzLP4o2u0xpCDKXg/2+rwr1HQe+06vNNj/oFNoO2gYIB6bW3u9WaB1
pmfsl5uUxPL9LNlpYHKDJ9/zG/TJ1wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE29
0XenSKUR/gQCct/FJ1AdYlxeMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xOUMyMDBFQUM4MTYxMUVGOEVEQkI3NjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsvAMA0GCSqGSIb3DQEB
CwUAA4IBAQAE9plFQ5906iwSIhl+Ff/jt7zuv57vqUsYGTP8HPRQOszUbLb/LSYO
cRpGHVgWayJ/9Y4eEwNYa2L14eIz5aT4aClmDdMqnswWuKXqsx5LpzCviV2K0HCJ
Bl0BQfYDipNnbxuoxoidBSlA2ffgiO0UvlBU3NwjcqHYECvsZKc0HQZ90MD8x3gE
s+ohy/dK/db9ulOO3gpaSWHmBR7pDKTepgJAXuGQwPbxSiC2ff6A8FXyt+ZyjGGF
g2Uye9ULBsoUkIuXlICEBz7Bc2AvpseTApZp5+MzH4xA1zhsSjrzj0/eE2ro9o0v
pjpAyKYHIY2CVGuJfkalpzRjgAk/FFAj
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:13 2025 by rpki-client