Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22D592FADA1811EFA9EB905C762E951A.roa
File: 22D592FADA1811EFA9EB905C762E951A.roa (raw, json)
Hash identifier: l9ke66aXWI7/7/d+J2cOS7atmtJtuFxeNW0ejINB8PU=
Subject key identifier: BA:B8:A4:2E:C8:74:F2:1E:52:34:08:CC:C4:BC:F7:CA:35:6E:F2:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22D592FADA1811EFA9EB905C762E951A.roa
Signing time: Fri 24 Jan 2025 05:57:47 +0000
ROA not before: Fri 24 Jan 2025 05:57:43 +0000
ROA not after: Sat 01 Mar 2025 05:57:43 +0000
asID: 44559
IP address blocks: 154.203.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82922 (0x143ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 05:57:43 2025 GMT
Not After : Mar 1 05:57:43 2025 GMT
Subject: CN=67932bdb-3ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:ea:2f:d3:7f:97:38:76:db:24:67:5e:fc:
9e:ee:58:fa:30:0d:62:64:f3:c0:d8:51:5d:d2:70:
31:23:7f:ba:51:f9:81:6a:ba:af:d9:d9:84:58:fb:
0b:28:93:71:62:66:d0:ee:0d:a1:d1:f9:ed:dc:15:
80:41:77:62:46:8c:33:b1:56:a3:20:d1:97:49:25:
6e:e2:54:c0:74:77:d8:40:0d:0f:d5:53:82:cd:35:
0f:da:1d:9e:d0:94:12:ca:6b:7e:65:9e:57:5c:72:
46:3c:e1:4a:86:47:1f:6a:4d:db:34:14:21:58:71:
55:23:93:99:5e:d8:f1:b5:5f:ab:92:63:99:f5:55:
b4:12:8e:07:ea:71:e9:5c:ff:3f:83:aa:7b:d9:40:
f0:55:32:ec:4d:59:73:68:ef:97:5b:33:7c:b3:50:
68:53:ce:55:e9:b2:e9:f2:b5:70:28:5b:57:12:8e:
d4:b0:08:e6:a6:24:f6:76:27:64:86:88:de:cf:67:
ab:1c:8c:d9:8a:4a:60:78:05:79:42:c0:6b:33:35:
82:e1:31:ea:0e:76:3d:70:24:1d:20:30:53:2a:32:
14:43:0d:ac:5e:e6:1f:b3:ff:30:d3:29:7b:64:15:
2b:73:2f:54:d5:20:c2:8a:87:39:44:a4:08:01:d6:
cc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B8:A4:2E:C8:74:F2:1E:52:34:08:CC:C4:BC:F7:CA:35:6E:F2:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22D592FADA1811EFA9EB905C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.225.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:7e:c0:39:4b:0d:51:e8:02:a6:03:5c:d5:af:e9:58:e9:0f:
a5:b8:a9:28:53:f2:61:01:16:da:82:80:bc:f4:0b:7f:44:d3:
41:50:e5:84:4e:d3:9d:74:9a:de:ca:c6:93:d8:64:e3:e9:a6:
75:b7:36:2f:e1:01:7d:82:38:21:78:c0:ce:dc:06:80:e7:6a:
f4:fb:34:8f:5a:cd:bb:31:08:c1:14:8f:cf:f4:a4:ad:e1:b2:
6b:fa:47:37:8d:8d:a6:09:54:15:15:14:0b:b3:d2:fd:89:64:
5a:46:c7:2a:22:8c:94:11:ed:99:d5:5b:57:2a:cd:5d:a7:50:
c5:cd:04:e2:d3:d6:de:36:75:74:47:c3:6f:03:58:bf:d2:40:
32:7f:7b:b7:24:24:51:6c:b7:11:b9:90:2e:ee:cd:11:12:ac:
3a:5f:c7:bf:62:94:8b:fc:c0:b7:7e:de:78:18:a9:d8:99:0e:
ab:e1:16:69:57:b4:ea:47:a2:b6:00:b7:9b:74:a6:e3:3d:68:
fe:c4:0a:20:2e:aa:73:80:27:72:23:a1:71:d0:75:15:48:e9:
d5:a8:ff:b7:7f:a5:5f:e9:5c:16:53:b6:89:1b:d0:4f:61:4a:
4a:b2:ce:a5:ad:9c:cf:dc:75:b9:5b:8b:13:73:b8:fa:7b:b3:
e8:a5:4a:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUPqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MDU1NzQzWhcNMjUwMzAxMDU1NzQzWjAYMRYw
FAYDVQQDEw02NzkzMmJkYi0zYWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwwvqL9N/lzh22yRnXvye7lj6MA1iZPPA2FFd0nAxI3+6UfmBarqv2dmE
WPsLKJNxYmbQ7g2h0fnt3BWAQXdiRowzsVajINGXSSVu4lTAdHfYQA0P1VOCzTUP
2h2e0JQSymt+ZZ5XXHJGPOFKhkcfak3bNBQhWHFVI5OZXtjxtV+rkmOZ9VW0Eo4H
6nHpXP8/g6p72UDwVTLsTVlzaO+XWzN8s1BoU85V6bLp8rVwKFtXEo7UsAjmpiT2
didkhojez2erHIzZikpgeAV5QsBrMzWC4THqDnY9cCQdIDBTKjIUQw2sXuYfs/8w
0yl7ZBUrcy9U1SDCioc5RKQIAdbMsQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLq4
pC7IdPIeUjQIzMS898o1bvKBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMkQ1OTJGQURBMTgxMUVGQTlFQjkwNUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsvhMA0GCSqGSIb3DQEB
CwUAA4IBAQClfsA5Sw1R6AKmA1zVr+lY6Q+luKkoU/JhARbagoC89At/RNNBUOWE
TtOddJreysaT2GTj6aZ1tzYv4QF9gjgheMDO3AaA52r0+zSPWs27MQjBFI/P9KSt
4bJr+kc3jY2mCVQVFRQLs9L9iWRaRscqIoyUEe2Z1VtXKs1dp1DFzQTi09beNnV0
R8NvA1i/0kAyf3u3JCRRbLcRuZAu7s0REqw6X8e/YpSL/MC3ft54GKnYmQ6r4RZp
V7TqR6K2ALebdKbjPWj+xAogLqpzgCdyI6Fx0HUVSOnVqP+3f6Vf6VwWU7aJG9BP
YUpKss6lrZzP3HW5W4sTc7j6e7PopUo2
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:00:32 2025 by rpki-client