Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54231704D97511EFA69BF090762E951A.roa
File: 54231704D97511EFA69BF090762E951A.roa (raw, json)
Hash identifier: IOFGxz8Wdat3+leN27f//Zbf6ZuQGTn3cxgXF853Lck=
Subject key identifier: C6:8E:4A:F3:9C:61:8E:65:30:F9:4F:65:6F:1A:4A:55:04:8D:F9:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01412E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54231704D97511EFA69BF090762E951A.roa
Signing time: Thu 23 Jan 2025 10:32:22 +0000
ROA not before: Thu 23 Jan 2025 10:32:18 +0000
ROA not after: Thu 13 Mar 2025 10:32:18 +0000
asID: 138915
IP address blocks: 154.203.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82222 (0x1412e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:32:18 2025 GMT
Not After : Mar 13 10:32:18 2025 GMT
Subject: CN=67921ab6-56c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:c8:26:50:f7:2f:81:bc:c5:25:2f:8c:d0:
b3:aa:22:d8:fb:cd:b0:ec:0f:f6:c9:f7:9d:41:73:
58:83:a5:20:b5:19:16:5c:6b:8a:ec:e5:94:6c:40:
c1:aa:f2:06:a9:ce:02:09:e0:60:4e:73:19:37:79:
fb:01:a5:00:3b:0d:be:88:c9:e6:e6:6b:6c:68:39:
cc:9a:68:db:a9:c6:00:4a:e2:53:0b:fb:ff:55:d9:
1a:7f:09:f9:14:c2:a0:cd:8c:75:43:e0:41:59:67:
6b:e2:c1:47:35:d3:e5:82:c6:55:9f:9a:62:94:27:
04:4c:49:ec:01:81:0e:48:1e:f2:e9:ae:25:58:d7:
b5:45:a6:15:bc:db:e7:6b:eb:1f:8b:6b:f4:b3:c8:
83:17:e2:7d:a7:4a:ef:be:6c:1a:c3:4e:ef:51:5f:
05:d5:2e:72:ce:fe:3e:e4:19:2a:94:6d:ee:ec:f1:
95:88:69:37:08:78:2a:4e:d7:46:7e:a9:23:4b:1f:
61:31:9c:22:6d:02:ab:79:71:83:b4:b3:2a:d3:96:
9e:b9:2a:8b:dd:ea:80:60:24:4a:3c:7f:9a:78:a9:
ba:f4:90:f0:b4:e8:3d:78:fb:82:24:00:45:f4:10:
e5:96:af:b0:0a:73:42:69:42:e6:5c:fe:15:d6:1d:
be:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8E:4A:F3:9C:61:8E:65:30:F9:4F:65:6F:1A:4A:55:04:8D:F9:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54231704D97511EFA69BF090762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.151.0/24
Signature Algorithm: sha256WithRSAEncryption
90:7b:94:a7:64:15:34:0b:dc:43:49:76:69:b2:3b:42:36:68:
e4:ca:ac:1e:d6:c3:dd:d8:cf:a8:a6:f7:b1:0b:f8:d9:00:10:
dc:9e:d1:f2:21:56:6b:d2:c4:61:73:ab:4b:b7:74:0f:48:64:
43:34:71:a3:f2:91:e7:ce:9b:36:14:cf:a2:95:ae:2e:e8:cb:
0a:95:79:62:b7:fc:22:5b:a4:8d:92:9b:29:fb:c2:0d:84:f4:
c1:3a:fa:e1:79:44:0b:35:f3:84:18:fb:54:99:46:ca:06:c2:
b2:55:e7:8a:cd:e0:a9:b6:6e:c7:bd:07:47:eb:99:8d:1a:0c:
be:d9:2f:2e:36:17:16:e3:53:02:eb:5d:7c:1c:30:b6:fb:0a:
5b:65:b0:72:ef:8e:cf:88:98:81:86:a8:ab:c9:b9:ec:56:0a:
53:79:19:62:e8:72:10:a9:b7:5c:7d:1d:41:26:2e:e7:16:54:
9c:02:7a:a8:6d:59:f0:7b:16:9b:ed:1f:00:8b:93:b7:89:ff:
9a:b1:51:04:84:ad:e3:29:34:45:ed:48:f2:00:3e:e1:7a:8f:
a2:24:4a:7e:86:25:48:7c:bd:8f:2e:86:0c:87:91:cf:e2:ff:
b7:b8:58:51:a8:c4:6e:31:09:06:e8:87:e6:91:40:f0:89:57:
f3:a2:f2:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUEuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTIzMTAzMjE4WhcNMjUwMzEzMTAzMjE4WjAYMRYw
FAYDVQQDEw02NzkyMWFiNi01NmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApZDIJlD3L4G8xSUvjNCzqiLY+82w7A/2yfedQXNYg6UgtRkWXGuK7OWU
bEDBqvIGqc4CCeBgTnMZN3n7AaUAOw2+iMnm5mtsaDnMmmjbqcYASuJTC/v/Vdka
fwn5FMKgzYx1Q+BBWWdr4sFHNdPlgsZVn5pilCcETEnsAYEOSB7y6a4lWNe1RaYV
vNvna+sfi2v0s8iDF+J9p0rvvmwaw07vUV8F1S5yzv4+5BkqlG3u7PGViGk3CHgq
TtdGfqkjSx9hMZwibQKreXGDtLMq05aeuSqL3eqAYCRKPH+aeKm69JDwtOg9ePuC
JABF9BDllq+wCnNCaULmXP4V1h2++QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMaO
SvOcYY5lMPlPZW8aSlUEjfm+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NDIzMTcwNEQ5NzUxMUVGQTY5QkYwOTA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsuXMA0GCSqGSIb3DQEB
CwUAA4IBAQCQe5SnZBU0C9xDSXZpsjtCNmjkyqwe1sPd2M+opvexC/jZABDcntHy
IVZr0sRhc6tLt3QPSGRDNHGj8pHnzps2FM+ila4u6MsKlXlit/wiW6SNkpsp+8IN
hPTBOvrheUQLNfOEGPtUmUbKBsKyVeeKzeCptm7HvQdH65mNGgy+2S8uNhcW41MC
6118HDC2+wpbZbBy747PiJiBhqirybnsVgpTeRli6HIQqbdcfR1BJi7nFlScAnqo
bVnwexab7R8Ai5O3if+asVEEhK3jKTRF7UjyAD7heo+iJEp+hiVIfL2PLoYMh5HP
4v+3uFhRqMRuMQkG6IfmkUDwiVfzovK6
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:12:51 2025 by rpki-client