Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4225EEDADC9211EF9BFB5495762E951A.roa
File: 4225EEDADC9211EF9BFB5495762E951A.roa (raw, json)
Hash identifier: ZxrAGlkJYctCpq9/bYfp6euVLv3rqkMpVV+Dob+DlGc=
Subject key identifier: FC:16:5A:B6:B9:DF:3C:30:63:45:A1:94:DD:4A:FA:C4:67:11:37:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B8F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4225EEDADC9211EF9BFB5495762E951A.roa
Signing time: Mon 27 Jan 2025 09:37:00 +0000
ROA not before: Mon 27 Jan 2025 09:36:57 +0000
ROA not after: Sat 08 Feb 2025 09:36:57 +0000
asID: 5065
IP address blocks: 154.83.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84879 (0x14b8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 09:36:57 2025 GMT
Not After : Feb 8 09:36:57 2025 GMT
Subject: CN=679753bc-e9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ee:eb:5a:53:cf:d8:af:d3:46:6a:ec:00:61:
db:10:13:fd:fb:85:2d:90:c5:86:9b:45:23:b1:2c:
bc:1f:c1:f1:7b:6c:00:94:65:9b:fa:91:25:bf:0d:
29:32:65:f0:a9:97:9a:f3:ab:85:39:74:08:ff:8c:
b1:ff:df:e8:e1:a8:2b:09:29:7f:f2:3f:9d:7a:2c:
fc:b1:51:90:1d:11:e8:1f:da:29:a4:fc:a6:d2:c1:
c7:d8:e9:90:28:0b:97:f8:c3:20:9a:fb:8c:6a:ef:
c6:fe:c3:c9:23:3e:5f:25:71:af:d7:65:2b:be:4d:
70:68:22:63:a2:19:50:53:fa:a0:da:d6:4c:d3:ef:
fc:55:25:4d:80:4f:ca:90:39:a1:dc:01:b8:07:34:
8c:ae:2e:11:9c:f5:7e:c2:03:92:d5:9f:42:40:4c:
f5:ee:fe:74:7b:54:b4:39:33:b7:9d:5b:9c:46:82:
49:52:ef:be:0d:32:b3:b7:0e:88:e5:dc:51:5b:8b:
97:47:2a:1d:86:2e:29:1b:7d:d1:ea:a2:9a:a0:5a:
13:4b:61:09:f2:58:06:53:49:dd:28:c8:c0:b1:5a:
d7:e8:e1:c2:bb:a6:fc:65:dc:d9:1f:15:2b:67:e8:
3a:36:d1:e6:59:c1:89:f9:92:18:3f:4f:58:60:b7:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:16:5A:B6:B9:DF:3C:30:63:45:A1:94:DD:4A:FA:C4:67:11:37:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4225EEDADC9211EF9BFB5495762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.203.0/24
Signature Algorithm: sha256WithRSAEncryption
96:60:53:91:7c:4d:99:40:11:3a:c0:0d:b9:fc:d9:73:ca:3a:
db:dd:44:99:85:20:bf:43:b0:cb:b2:60:7b:4a:65:5d:46:93:
7a:6d:9f:b3:2a:6d:4c:6f:40:f6:51:8d:ac:2a:d4:88:7b:07:
1d:e9:4e:9c:6c:24:65:57:19:81:ec:67:88:cd:a9:40:82:3b:
29:51:85:f6:7d:cf:38:bd:7c:00:2d:d4:96:bb:9d:90:ac:75:
71:59:b7:d9:95:3e:a0:cb:2d:98:83:c3:f6:cd:1c:fe:ac:f4:
a9:2a:25:ac:76:30:24:fb:59:43:12:6e:a5:34:39:dd:47:48:
c0:47:54:c3:2f:bd:ab:68:26:c4:2b:c0:72:d5:9a:44:ff:b7:
75:29:78:cb:aa:df:df:30:06:69:8c:e1:af:76:b7:d2:a2:c0:
b5:3b:a3:a7:5d:70:bc:21:29:27:30:c6:e7:ff:f7:48:7c:a6:
e9:8b:0c:b8:8a:f2:06:ad:fa:63:11:df:5c:a9:80:77:f5:fe:
96:df:8c:5d:6a:75:56:67:b0:b5:a8:63:1d:9d:04:44:b2:8c:
66:cf:ae:da:4c:ee:c4:ef:6b:45:71:e1:5c:ec:a2:86:b5:05:
78:d7:dd:40:77:77:e9:16:7e:7c:57:b7:d2:dc:69:75:d0:c3:
de:d8:39:46
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUuPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI3MDkzNjU3WhcNMjUwMjA4MDkzNjU3WjAYMRYw
FAYDVQQDEw02Nzk3NTNiYy1lOWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyu7rWlPP2K/TRmrsAGHbEBP9+4UtkMWGm0UjsSy8H8Hxe2wAlGWb+pEl
vw0pMmXwqZea86uFOXQI/4yx/9/o4agrCSl/8j+deiz8sVGQHRHoH9oppPym0sHH
2OmQKAuX+MMgmvuMau/G/sPJIz5fJXGv12Urvk1waCJjohlQU/qg2tZM0+/8VSVN
gE/KkDmh3AG4BzSMri4RnPV+wgOS1Z9CQEz17v50e1S0OTO3nVucRoJJUu++DTKz
tw6I5dxRW4uXRyodhi4pG33R6qKaoFoTS2EJ8lgGU0ndKMjAsVrX6OHCu6b8ZdzZ
HxUrZ+g6NtHmWcGJ+ZIYP09YYLc8QwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPwW
Wra53zwwY0WhlN1K+sRnETeoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MjI1RUVEQURDOTIxMUVGOUJGQjU0OTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlPLMA0GCSqGSIb3DQEB
CwUAA4IBAQCWYFORfE2ZQBE6wA25/Nlzyjrb3USZhSC/Q7DLsmB7SmVdRpN6bZ+z
Km1Mb0D2UY2sKtSIewcd6U6cbCRlVxmB7GeIzalAgjspUYX2fc84vXwALdSWu52Q
rHVxWbfZlT6gyy2Yg8P2zRz+rPSpKiWsdjAk+1lDEm6lNDndR0jAR1TDL72raCbE
K8By1ZpE/7d1KXjLqt/fMAZpjOGvdrfSosC1O6OnXXC8ISknMMbn//dIfKbpiwy4
ivIGrfpjEd9cqYB39f6W34xdanVWZ7C1qGMdnQREsoxmz67aTO7E72tFceFc7KKG
tQV4191Ad3fpFn58V7fS3Gl10MPe2DlG
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:17 2025 by rpki-client