Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/689B027ADA6311EF8C104158762E951A.roa
File: 689B027ADA6311EF8C104158762E951A.roa (raw, json)
Hash identifier: AbwMEQwDcjJY1meNhiV2/WDi6OqBMJVBksPVW4u+82A=
Subject key identifier: 2E:90:C5:F9:10:39:BB:E3:07:74:C8:2B:4E:1D:AA:16:93:38:03:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014880
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/689B027ADA6311EF8C104158762E951A.roa
Signing time: Fri 24 Jan 2025 14:56:36 +0000
ROA not before: Fri 24 Jan 2025 14:56:33 +0000
ROA not after: Sat 01 Mar 2025 14:56:33 +0000
asID: 44559
IP address blocks: 154.203.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84096 (0x14880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:56:33 2025 GMT
Not After : Mar 1 14:56:33 2025 GMT
Subject: CN=6793aa24-f597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b4:29:d3:b2:9b:0b:3e:ff:3b:a7:9a:d8:04:
5f:04:91:b6:32:d4:54:41:5b:12:0e:b6:d6:34:8c:
aa:c7:57:8b:9c:34:d3:66:b1:4a:bc:da:94:b2:fa:
3e:35:82:ec:18:b4:f3:a2:e9:3c:72:8c:13:2d:6e:
d2:06:b1:5c:f0:a2:9f:57:2b:8c:8b:11:53:25:9f:
5c:c5:af:85:d0:7f:17:27:c7:48:49:c0:a8:60:67:
4b:82:0a:d0:2c:c5:b6:b3:91:18:54:01:dc:40:e1:
bc:79:da:a5:90:08:75:e4:ad:2a:ad:e0:92:bb:cb:
a7:2b:bd:3b:62:78:91:22:de:5d:e1:d3:5e:bb:af:
a7:28:1c:68:9b:cc:f0:6f:3c:b5:2c:96:a9:7e:2e:
25:60:59:d0:77:8e:9d:e2:7c:1a:41:cd:15:cb:a4:
d3:71:1d:70:7f:95:08:9e:60:e6:10:69:80:3a:11:
0f:47:79:f9:90:74:f2:58:ba:ac:c7:ce:f7:9c:37:
b6:63:ff:71:4f:b6:d6:19:75:fe:83:95:c7:0e:44:
0f:e8:5f:62:c8:4d:65:84:fd:f3:ab:04:e9:f9:5f:
33:20:57:b2:5d:67:4d:70:0a:81:6a:c1:18:4c:ce:
37:00:11:ba:40:2a:c1:7e:a7:7f:2d:c4:49:57:81:
80:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:90:C5:F9:10:39:BB:E3:07:74:C8:2B:4E:1D:AA:16:93:38:03:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/689B027ADA6311EF8C104158762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.222.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d5:3d:3f:13:b9:db:c1:04:1f:95:c5:e9:28:81:f4:8e:62:
cd:79:39:43:2d:93:20:05:88:e7:5b:d2:f5:cc:8d:f6:a7:fe:
f0:3e:96:91:a9:c7:27:97:ae:a3:12:a1:b0:be:1f:ac:fc:eb:
d5:6b:65:f4:ea:a0:04:1c:d4:0c:68:fe:ee:54:8c:f9:23:70:
2e:c4:e3:99:32:6b:b3:c0:75:5b:ab:c6:4f:5c:d0:56:37:1b:
07:d8:c9:f1:0f:13:f0:85:99:f8:98:c4:9b:78:08:0c:19:d4:
3a:14:97:0e:ce:10:e0:fb:6f:77:32:6a:e4:56:c3:c4:f8:ab:
66:44:80:2b:b5:1d:95:e1:54:f2:cc:c2:fc:62:c3:f7:90:76:
37:60:87:34:c6:5f:35:1b:ac:9e:d9:60:7f:74:69:19:f7:4f:
f6:bf:c2:30:73:da:6b:2e:70:ed:45:65:6e:36:b7:5c:b3:2c:
9c:fe:0b:31:aa:2d:80:de:ad:5c:15:10:98:ad:8b:b3:d7:bd:
15:b2:8a:35:c7:83:85:dc:93:d6:7d:c6:3c:62:7e:a0:1b:f4:
f9:67:dd:98:55:be:e9:42:36:8c:57:61:77:0c:57:07:84:be:
3d:89:de:b0:09:7b:3c:48:8b:b9:55:02:88:bc:39:eb:fc:c3:
32:bb:f4:20
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUiAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTQ1NjMzWhcNMjUwMzAxMTQ1NjMzWjAYMRYw
FAYDVQQDEw02NzkzYWEyNC1mNTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArbQp07KbCz7/O6ea2ARfBJG2MtRUQVsSDrbWNIyqx1eLnDTTZrFKvNqU
svo+NYLsGLTzouk8cowTLW7SBrFc8KKfVyuMixFTJZ9cxa+F0H8XJ8dIScCoYGdL
ggrQLMW2s5EYVAHcQOG8edqlkAh15K0qreCSu8unK707YniRIt5d4dNeu6+nKBxo
m8zwbzy1LJapfi4lYFnQd46d4nwaQc0Vy6TTcR1wf5UInmDmEGmAOhEPR3n5kHTy
WLqsx873nDe2Y/9xT7bWGXX+g5XHDkQP6F9iyE1lhP3zqwTp+V8zIFeyXWdNcAqB
asEYTM43ABG6QCrBfqd/LcRJV4GAfwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFC6Q
xfkQObvjB3TIK04dqhaTOAMeMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82ODlCMDI3QURBNjMxMUVGOEMxMDQxNTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsveMA0GCSqGSIb3DQEB
CwUAA4IBAQCP1T0/E7nbwQQflcXpKIH0jmLNeTlDLZMgBYjnW9L1zI32p/7wPpaR
qccnl66jEqGwvh+s/OvVa2X06qAEHNQMaP7uVIz5I3AuxOOZMmuzwHVbq8ZPXNBW
NxsH2MnxDxPwhZn4mMSbeAgMGdQ6FJcOzhDg+293MmrkVsPE+KtmRIArtR2V4VTy
zML8YsP3kHY3YIc0xl81G6ye2WB/dGkZ90/2v8Iwc9prLnDtRWVuNrdcsyyc/gsx
qi2A3q1cFRCYrYuz170Vsoo1x4OF3JPWfcY8Yn6gG/T5Z92YVb7pQjaMV2F3DFcH
hL49id6wCXs8SIu5VQKIvDnr/MMyu/Qg
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:14:52 2025 by rpki-client