Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27A5610ADFDD11EF89A4F846762E951A.roa
File: 27A5610ADFDD11EF89A4F846762E951A.roa (raw, json)
Hash identifier: xbGMCmj6+pcbLhIkH6mpzAlOvonb2EzmbEUBfaiYZb8=
Subject key identifier: DD:CB:D4:78:50:5C:C2:30:5E:91:33:E8:54:D5:67:34:59:33:93:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DAD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27A5610ADFDD11EF89A4F846762E951A.roa
Signing time: Fri 31 Jan 2025 14:10:42 +0000
ROA not before: Fri 31 Jan 2025 14:10:38 +0000
ROA not after: Mon 10 Feb 2025 14:10:38 +0000
asID: 135377
IP address blocks: 154.202.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85421 (0x14dad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 14:10:38 2025 GMT
Not After : Feb 10 14:10:38 2025 GMT
Subject: CN=679cd9e2-c3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:93:dc:15:b7:61:ed:74:9a:74:19:c3:d3:
02:ef:33:f3:97:3c:30:a7:af:bc:c4:fd:6f:a9:77:
fb:d0:21:b9:ab:0a:70:ea:60:25:c9:db:5e:c1:5b:
1f:f8:7b:05:ed:cb:65:06:c8:6f:0d:1e:30:05:08:
ec:18:d3:3a:0c:b0:ad:ca:61:3d:f2:93:9f:08:f0:
62:5f:00:25:32:ee:c2:f9:9a:c3:09:dc:be:80:1c:
22:d5:d3:af:c8:40:fa:e8:d5:3c:89:38:ad:fe:e6:
31:1c:4d:9a:e3:4a:ce:a7:1c:57:c7:3d:0c:67:7c:
09:1b:d5:1e:3a:6d:1e:5f:76:ff:85:cc:38:72:d1:
b8:b0:19:5b:73:bd:75:0d:38:e9:e6:5b:2f:f2:e4:
16:c5:f8:52:a7:16:c8:42:c8:2d:04:1e:f2:13:34:
f2:f2:c4:5b:95:1f:f8:3e:2c:fe:aa:a6:46:38:f7:
b9:2b:c3:84:3c:38:72:6c:d5:98:bd:c6:4f:4a:70:
b5:8a:ff:e2:d0:03:5e:ed:dd:fb:99:1f:e2:ac:34:
85:7c:84:65:46:a7:55:35:d3:07:6b:ce:26:c1:b5:
2a:b8:cd:19:37:3f:3f:f7:e8:93:92:78:bc:6f:f1:
4f:92:d8:fb:26:34:db:e6:6f:fc:a3:cb:f0:5b:c8:
6a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CB:D4:78:50:5C:C2:30:5E:91:33:E8:54:D5:67:34:59:33:93:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27A5610ADFDD11EF89A4F846762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.68.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:f7:d1:dd:d4:cc:12:c3:35:25:47:a0:f7:eb:cd:2c:f1:3c:
88:6c:ed:ee:d7:9b:61:b6:d6:9e:7f:7c:94:b0:38:06:c2:bd:
d0:28:e4:8b:d2:51:d8:5b:97:31:ce:a0:cc:c8:0c:12:66:b7:
34:b9:48:e5:6c:b2:b0:a3:02:ce:82:aa:a2:28:c2:32:48:47:
77:25:5a:14:ba:e4:2f:67:65:6f:8b:f0:f5:fd:54:7b:c8:63:
7c:94:db:97:6c:80:1b:ed:fc:f5:d5:23:f5:53:56:be:a7:b2:
87:25:ad:ff:b8:6e:71:96:8e:1c:af:7c:d7:d1:69:a2:65:13:
df:c5:77:ca:9c:ff:ab:d4:95:54:cc:05:7c:d9:10:97:8b:54:
09:f9:da:06:0e:3f:51:3c:4f:df:f6:71:8c:e7:0e:bc:86:b7:
47:b7:cf:51:c6:6e:21:60:3a:05:de:d5:27:59:9a:61:77:b7:
ae:7a:08:ec:1f:c5:eb:3d:ec:fb:30:0a:16:1c:f2:6c:44:9d:
04:4e:a6:77:52:4d:dc:d0:2a:3b:29:5d:2d:e5:80:68:0a:bc:
44:59:cb:a4:1e:e0:7b:b9:39:ef:65:b8:79:b7:95:aa:c5:20:
e5:20:d3:fc:c0:4c:2b:c5:08:8d:97:b9:eb:18:3f:54:7f:d3:
ca:d7:15:f3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU2tMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTMxMTQxMDM4WhcNMjUwMjEwMTQxMDM4WjAYMRYw
FAYDVQQDEw02NzljZDllMi1jM2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtjuT3BW3Ye10mnQZw9MC7zPzlzwwp6+8xP1vqXf70CG5qwpw6mAlydte
wVsf+HsF7ctlBshvDR4wBQjsGNM6DLCtymE98pOfCPBiXwAlMu7C+ZrDCdy+gBwi
1dOvyED66NU8iTit/uYxHE2a40rOpxxXxz0MZ3wJG9UeOm0eX3b/hcw4ctG4sBlb
c711DTjp5lsv8uQWxfhSpxbIQsgtBB7yEzTy8sRblR/4Piz+qqZGOPe5K8OEPDhy
bNWYvcZPSnC1iv/i0ANe7d37mR/irDSFfIRlRqdVNdMHa84mwbUquM0ZNz8/9+iT
kni8b/FPktj7JjTb5m/8o8vwW8hqoQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN3L
1HhQXMIwXpEz6FTVZzRZM5MBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yN0E1NjEwQURGREQxMUVGODlBNEY4NDY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmspEMA0GCSqGSIb3DQEB
CwUAA4IBAQCr99Hd1MwSwzUlR6D3680s8TyIbO3u15thttaef3yUsDgGwr3QKOSL
0lHYW5cxzqDMyAwSZrc0uUjlbLKwowLOgqqiKMIySEd3JVoUuuQvZ2Vvi/D1/VR7
yGN8lNuXbIAb7fz11SP1U1a+p7KHJa3/uG5xlo4cr3zX0WmiZRPfxXfKnP+r1JVU
zAV82RCXi1QJ+doGDj9RPE/f9nGM5w68hrdHt89Rxm4hYDoF3tUnWZphd7euegjs
H8XrPez7MAoWHPJsRJ0ETqZ3Uk3c0Co7KV0t5YBoCrxEWcukHuB7uTnvZbh5t5Wq
xSDlINP8wEwrxQiNl7nrGD9Uf9PK1xXz
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:37 2025 by rpki-client