Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A68F97CD40111EF93EF8EAC762E951A.roa
File: 5A68F97CD40111EF93EF8EAC762E951A.roa (raw, json)
Hash identifier: Ut9Haa4/NzVwTJjIzIGKM1VraprN9P+/n1MEIZXD1uo=
Subject key identifier: 62:54:A7:E5:42:1C:71:9D:F9:0A:A5:14:28:A4:58:A9:1F:91:71:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A68F97CD40111EF93EF8EAC762E951A.roa
Signing time: Thu 16 Jan 2025 11:59:35 +0000
ROA not before: Thu 16 Jan 2025 11:59:31 +0000
ROA not after: Sun 16 Mar 2025 11:59:31 +0000
asID: 17561
IP address blocks: 154.206.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80914 (0x13c12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 11:59:31 2025 GMT
Not After : Mar 16 11:59:31 2025 GMT
Subject: CN=6788f4a7-e146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d0:fa:32:f9:55:f6:9d:e8:69:67:32:80:6b:
0d:93:53:08:21:cd:70:e9:1e:0d:d3:5b:24:85:10:
9b:8b:fb:2e:06:7b:a1:8e:f6:00:9c:e4:49:db:46:
a1:97:5a:50:ea:69:17:71:01:bb:85:81:a6:31:29:
45:2c:db:5d:92:1e:65:42:bb:1e:a5:2e:09:73:11:
e9:7c:50:ec:e6:2c:24:22:ea:e6:44:05:e5:b1:36:
58:5e:f6:7d:e4:c6:fb:c0:81:7c:e8:30:a7:eb:9b:
c6:c0:d9:67:fe:9b:a4:38:1d:75:0b:3c:08:c2:2a:
cf:15:39:f4:93:fb:0f:67:2d:77:b7:95:be:f6:8c:
b4:cb:82:02:84:f7:c7:67:89:b5:2e:c0:59:c6:1e:
95:ca:8f:46:e5:88:41:39:ec:34:a2:7f:fc:fe:2f:
51:d7:10:d8:06:17:7e:99:36:61:45:7c:c2:c4:95:
41:51:b8:ea:fb:18:c8:8f:3e:25:d7:c3:e9:94:e1:
53:76:04:fd:36:54:c8:a5:c6:31:0f:6c:36:d7:c0:
4c:94:cd:b4:d8:e1:2a:54:b0:ac:80:7d:27:0c:10:
3f:6c:ca:69:d8:31:4d:85:14:7e:99:ef:07:c6:ed:
c4:16:a7:bd:0f:d1:a0:7e:fd:53:f6:17:0e:fe:fc:
02:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:54:A7:E5:42:1C:71:9D:F9:0A:A5:14:28:A4:58:A9:1F:91:71:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A68F97CD40111EF93EF8EAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.203.0/24
Signature Algorithm: sha256WithRSAEncryption
11:08:a9:76:56:da:96:ee:17:51:34:e4:25:25:55:d9:9c:14:
5d:51:d0:e6:fe:0c:ca:14:56:d1:00:14:e6:a2:f8:d4:4c:ab:
d8:32:de:74:b7:6f:b2:bc:4d:e6:b9:c6:7a:3c:5e:97:43:9d:
16:fc:b4:c2:ff:36:50:ee:0a:16:60:3d:2f:dd:c9:b1:e9:92:
35:17:a9:5e:2a:ce:17:5c:9b:5a:dc:3c:6b:19:15:4f:dd:3a:
6b:66:21:6f:17:78:5a:82:ba:c9:5f:a1:57:59:eb:8d:b4:d7:
0b:24:3f:7b:37:f1:ca:b7:20:f2:7d:0e:92:a5:de:b3:9d:df:
eb:1e:7a:4f:29:20:57:8e:e8:c1:01:b4:52:89:45:25:3b:b7:
3a:3a:a3:bd:07:2a:a8:28:19:67:72:0d:9b:b9:c8:01:8b:e7:
9c:08:71:c6:5e:01:80:20:4d:4a:d7:aa:93:e6:59:0f:81:6b:
fc:4d:f8:1e:c4:df:b2:21:ec:8f:b7:0e:f6:a1:19:37:86:8c:
6f:0b:dd:27:5a:5b:47:c4:44:82:a5:e6:b6:c1:6f:10:9c:d9:
0c:df:f0:5e:56:9d:9d:24:dc:d9:36:aa:ed:86:e2:0d:a7:d2:
aa:a5:a1:be:e9:97:26:b2:03:0f:a8:6b:5f:3d:63:33:ec:30:
9b:fc:d0:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATwSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTE2MTE1OTMxWhcNMjUwMzE2MTE1OTMxWjAYMRYw
FAYDVQQDEw02Nzg4ZjRhNy1lMTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6tD6MvlV9p3oaWcygGsNk1MIIc1w6R4N01skhRCbi/suBnuhjvYAnORJ
20ahl1pQ6mkXcQG7hYGmMSlFLNtdkh5lQrsepS4JcxHpfFDs5iwkIurmRAXlsTZY
XvZ95Mb7wIF86DCn65vGwNln/pukOB11CzwIwirPFTn0k/sPZy13t5W+9oy0y4IC
hPfHZ4m1LsBZxh6Vyo9G5YhBOew0on/8/i9R1xDYBhd+mTZhRXzCxJVBUbjq+xjI
jz4l18PplOFTdgT9NlTIpcYxD2w218BMlM202OEqVLCsgH0nDBA/bMpp2DFNhRR+
me8Hxu3EFqe9D9Ggfv1T9hcO/vwCVQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGJU
p+VCHHGd+QqlFCikWKkfkXF2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81QTY4Rjk3Q0Q0MDExMUVGOTNFRjhFQUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms7LMA0GCSqGSIb3DQEB
CwUAA4IBAQARCKl2VtqW7hdRNOQlJVXZnBRdUdDm/gzKFFbRABTmovjUTKvYMt50
t2+yvE3mucZ6PF6XQ50W/LTC/zZQ7goWYD0v3cmx6ZI1F6leKs4XXJta3DxrGRVP
3TprZiFvF3hagrrJX6FXWeuNtNcLJD97N/HKtyDyfQ6Spd6znd/rHnpPKSBXjujB
AbRSiUUlO7c6OqO9ByqoKBlncg2bucgBi+ecCHHGXgGAIE1K16qT5lkPgWv8Tfge
xN+yIeyPtw72oRk3hoxvC90nWltHxESCpea2wW8QnNkM3/BeVp2dJNzZNqrthuIN
p9KqpaG+6ZcmsgMPqGtfPWMz7DCb/NAB
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:52 2025 by rpki-client