Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/699EEAF2DCC411EFB2B91562762E951A.roa
File: 699EEAF2DCC411EFB2B91562762E951A.roa (raw, json)
Hash identifier: Y9c0OQXvvfT4Jgmn/2b1qgmaepC6fC8qYOL50xVKk2E=
Subject key identifier: 3A:FB:8A:DA:0B:0F:8D:28:76:38:44:CF:45:08:E4:61:79:16:AA:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C49
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/699EEAF2DCC411EFB2B91562762E951A.roa
Signing time: Mon 27 Jan 2025 15:36:02 +0000
ROA not before: Mon 27 Jan 2025 15:35:58 +0000
ROA not after: Thu 13 Feb 2025 15:35:58 +0000
asID: 5065
IP address blocks: 154.207.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85065 (0x14c49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 15:35:58 2025 GMT
Not After : Feb 13 15:35:58 2025 GMT
Subject: CN=6797a7e1-0de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:09:ed:f8:71:b2:69:e8:19:9e:0e:aa:84:
92:cd:11:fa:19:e0:d8:27:7e:82:90:45:bf:38:0e:
5a:66:68:b0:96:92:df:10:19:4a:2c:a9:97:21:b4:
0c:b1:ca:c2:ff:1f:05:da:b5:88:6c:ce:ba:8d:d2:
42:7e:85:09:9a:0c:e0:f5:7b:f9:83:2f:63:f1:e6:
61:01:1f:c6:c0:77:44:8c:d4:de:b9:4c:d2:92:d0:
38:ce:c3:5f:0d:02:c1:98:95:9c:8c:64:b5:28:f7:
52:2b:3c:aa:dd:4d:b2:2f:7a:25:3d:7d:03:b0:da:
45:13:4b:d9:e9:32:f9:a9:05:63:3a:f2:24:e6:7b:
e9:f3:dc:35:95:1d:88:80:cf:e9:b0:0e:1e:c0:d0:
57:46:04:00:db:06:3b:1f:b9:ee:33:b6:e4:f4:e4:
a9:5c:c5:ad:31:c5:a4:fa:c7:63:70:76:a5:28:06:
41:7b:e9:f7:8a:9b:36:57:f8:22:b3:18:fa:f2:4b:
0f:fe:29:f1:ab:60:04:62:45:8b:f5:fa:8d:c3:4a:
46:d7:58:11:e8:02:4b:03:2f:ef:ac:85:df:e2:27:
ff:c0:23:f2:9d:ae:8a:4a:13:6b:fa:ef:0a:ab:fc:
61:da:3e:b8:34:88:b1:38:72:b1:ee:a7:40:0b:98:
7e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FB:8A:DA:0B:0F:8D:28:76:38:44:CF:45:08:E4:61:79:16:AA:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/699EEAF2DCC411EFB2B91562762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.150.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:d0:42:b2:2d:bc:20:0d:ce:63:5e:f6:e9:27:65:cc:c5:58:
77:89:ae:f8:ac:a9:0b:aa:0e:6d:a1:17:76:54:db:e9:98:a7:
80:6b:dc:31:c8:69:6e:e0:82:9f:42:19:1c:33:97:5d:33:8b:
1f:d2:dd:0c:b0:52:70:ec:92:12:b2:c2:4e:66:6f:52:11:76:
47:f0:3d:5f:4b:a2:b9:dc:62:dd:5b:ff:ed:0c:a1:5d:d0:05:
0a:1e:7e:a6:7c:b4:3b:9b:f9:44:99:9a:a2:1b:88:b2:00:bf:
81:45:7a:e3:51:fc:a7:04:db:13:e1:85:cd:e6:06:af:7d:21:
4e:c1:8d:17:04:8d:e8:be:c6:50:fe:c8:27:1a:ce:75:01:57:
d9:0f:c0:be:a1:0e:49:e9:64:65:d4:b6:c9:c8:f0:68:25:08:
00:f7:6b:ad:6f:c1:c2:53:3a:cd:16:c6:7a:57:02:5b:4a:d0:
e1:bf:41:cc:ff:f5:01:51:2c:67:9b:73:92:ed:87:7c:ef:56:
f8:dd:0a:ed:a5:5a:38:ad:d8:d9:74:ff:7f:cc:c6:94:30:c4:
ba:8a:c9:c3:1c:8c:e1:89:ef:07:8f:54:c4:77:d1:b7:b5:1f:
88:d3:fd:39:a4:e6:f5:de:ee:0f:93:c5:76:4e:d5:b7:47:77:
bf:eb:9f:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUxJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI3MTUzNTU4WhcNMjUwMjEzMTUzNTU4WjAYMRYw
FAYDVQQDEw02Nzk3YTdlMS0wZGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsfgJ7fhxsmnoGZ4OqoSSzRH6GeDYJ36CkEW/OA5aZmiwlpLfEBlKLKmX
IbQMscrC/x8F2rWIbM66jdJCfoUJmgzg9Xv5gy9j8eZhAR/GwHdEjNTeuUzSktA4
zsNfDQLBmJWcjGS1KPdSKzyq3U2yL3olPX0DsNpFE0vZ6TL5qQVjOvIk5nvp89w1
lR2IgM/psA4ewNBXRgQA2wY7H7nuM7bk9OSpXMWtMcWk+sdjcHalKAZBe+n3ips2
V/gisxj68ksP/inxq2AEYkWL9fqNw0pG11gR6AJLAy/vrIXf4if/wCPyna6KShNr
+u8Kq/xh2j64NIixOHKx7qdAC5h+twIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDr7
itoLD40odjhEz0UI5GF5Fqo7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82OTlFRUFGMkRDQzQxMUVGQjJCOTE1NjI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms+WMA0GCSqGSIb3DQEB
CwUAA4IBAQDK0EKyLbwgDc5jXvbpJ2XMxVh3ia74rKkLqg5toRd2VNvpmKeAa9wx
yGlu4IKfQhkcM5ddM4sf0t0MsFJw7JISssJOZm9SEXZH8D1fS6K53GLdW//tDKFd
0AUKHn6mfLQ7m/lEmZqiG4iyAL+BRXrjUfynBNsT4YXN5gavfSFOwY0XBI3ovsZQ
/sgnGs51AVfZD8C+oQ5J6WRl1LbJyPBoJQgA92utb8HCUzrNFsZ6VwJbStDhv0HM
//UBUSxnm3OS7Yd871b43QrtpVo4rdjZdP9/zMaUMMS6isnDHIzhie8Hj1TEd9G3
tR+I0/05pOb13u4Pk8V2TtW3R3e/658b
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:36 2025 by rpki-client