Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69D4338CDE2811EFBE1A404D762E951A.roa
File: 69D4338CDE2811EFBE1A404D762E951A.roa (raw, json)
Hash identifier: 425NwME5WXcbabGMb8WBV63zApvLCFDHNScukmyZkV8=
Subject key identifier: 85:7D:44:9D:7C:69:DE:07:89:0A:43:88:E5:49:72:E3:AE:A2:07:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69D4338CDE2811EFBE1A404D762E951A.roa
Signing time: Wed 29 Jan 2025 10:04:23 +0000
ROA not before: Wed 29 Jan 2025 10:04:19 +0000
ROA not after: Wed 05 Mar 2025 10:04:19 +0000
asID: 203020
IP address blocks: 154.207.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85382 (0x14d86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 10:04:19 2025 GMT
Not After : Mar 5 10:04:19 2025 GMT
Subject: CN=6799fd27-7a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4f:9f:dd:c4:c2:21:82:bf:10:3c:34:be:42:
85:a3:cd:b5:fe:88:64:cb:cb:60:75:3b:70:99:17:
ad:75:73:a8:38:6b:4d:91:80:00:20:31:ca:06:e8:
f7:89:1d:b2:53:7a:47:ce:d1:89:95:90:11:b2:7c:
db:9b:8c:e3:49:6a:fe:a6:fa:ee:31:a5:8a:40:65:
28:68:b6:da:4c:2c:a9:cc:c9:d0:a1:d5:fb:dd:2e:
2e:0d:d1:6e:72:49:78:aa:44:65:73:c5:a3:47:5c:
e7:68:76:05:74:c5:65:c9:2c:ee:4a:04:74:86:6a:
07:c4:32:d8:0f:ff:c7:29:ca:bd:08:92:c9:b2:ff:
b9:40:dd:a7:4e:e6:b5:f5:3f:50:f0:76:92:c6:ea:
65:de:94:6c:aa:1e:b4:ce:f9:a4:0d:42:c4:b1:33:
18:46:e4:e9:fc:e7:18:bf:f9:91:f9:dd:d6:13:c0:
2b:6b:57:52:e1:1a:19:ae:6b:1d:83:77:44:6f:18:
b6:0f:f5:d6:91:54:1f:f6:16:bf:56:ba:c5:86:16:
f5:8d:f5:06:4a:3a:cb:d9:e5:90:83:20:64:01:f3:
ab:7a:b6:a0:35:5b:7b:e8:a6:bf:fb:61:2b:8f:55:
5f:8b:c3:ae:ea:52:29:c5:38:04:9d:cd:bc:ed:3c:
66:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7D:44:9D:7C:69:DE:07:89:0A:43:88:E5:49:72:E3:AE:A2:07:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69D4338CDE2811EFBE1A404D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.254.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:b3:3f:4b:a7:2a:12:da:a3:22:2d:dd:87:2d:81:99:51:4a:
7b:85:10:f2:19:39:6d:fe:53:7a:b8:85:36:2b:57:cd:2c:aa:
40:25:5b:ee:bb:d6:fc:4c:89:ec:cf:84:25:c9:4a:3f:54:f1:
66:f4:20:43:54:2f:de:12:eb:d5:dc:62:bd:e9:2e:f0:92:2c:
b2:28:74:36:8b:b7:91:80:12:33:61:72:b7:82:bd:ee:21:1d:
06:ff:8a:1a:d5:2b:0b:a9:c8:36:db:74:59:17:80:e1:67:26:
08:ee:94:c2:5a:33:ef:e2:b8:41:76:62:e7:6a:48:35:4b:38:
88:7d:13:18:1a:bc:4a:96:d2:bb:4c:1b:2c:9d:b3:71:a7:06:
ee:0c:2d:1c:55:af:8e:49:73:81:26:ad:bb:9b:b4:04:2d:75:
78:8e:ed:02:a2:e6:c9:ac:10:3b:68:a3:8a:59:14:13:51:4c:
1d:91:dc:e7:8b:bc:18:3c:14:f4:4f:8e:ad:a6:f6:36:8a:ed:
14:8f:6c:f6:d7:14:f0:53:40:5a:77:ac:ce:29:32:d7:26:3d:
a8:54:fd:39:59:ef:3d:e3:be:e4:0a:38:0f:07:a1:ab:96:b1:
7a:7d:9c:84:c0:31:03:13:e1:66:df:cc:dc:b5:9d:21:3c:9c:
19:0f:78:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAU2GMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI5MTAwNDE5WhcNMjUwMzA1MTAwNDE5WjAYMRYw
FAYDVQQDEw02Nzk5ZmQyNy03YThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA70+f3cTCIYK/EDw0vkKFo821/ohky8tgdTtwmRetdXOoOGtNkYAAIDHK
Buj3iR2yU3pHztGJlZARsnzbm4zjSWr+pvruMaWKQGUoaLbaTCypzMnQodX73S4u
DdFuckl4qkRlc8WjR1znaHYFdMVlySzuSgR0hmoHxDLYD//HKcq9CJLJsv+5QN2n
Tua19T9Q8HaSxupl3pRsqh60zvmkDULEsTMYRuTp/OcYv/mR+d3WE8Ara1dS4RoZ
rmsdg3dEbxi2D/XWkVQf9ha/VrrFhhb1jfUGSjrL2eWQgyBkAfOreragNVt76Ka/
+2Erj1Vfi8Ou6lIpxTgEnc287TxmywIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIV9
RJ18ad4HiQpDiOVJcuOuogdWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82OUQ0MzM4Q0RFMjgxMUVGQkUxQTQwNEQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms/+MA0GCSqGSIb3DQEB
CwUAA4IBAQBfsz9LpyoS2qMiLd2HLYGZUUp7hRDyGTlt/lN6uIU2K1fNLKpAJVvu
u9b8TInsz4QlyUo/VPFm9CBDVC/eEuvV3GK96S7wkiyyKHQ2i7eRgBIzYXK3gr3u
IR0G/4oa1SsLqcg223RZF4DhZyYI7pTCWjPv4rhBdmLnakg1SziIfRMYGrxKltK7
TBssnbNxpwbuDC0cVa+OSXOBJq27m7QELXV4ju0CoubJrBA7aKOKWRQTUUwdkdzn
i7wYPBT0T46tpvY2iu0Uj2z21xTwU0Bad6zOKTLXJj2oVP05We89477kCjgPB6Gr
lrF6fZyEwDEDE+Fm38zctZ0hPJwZD3gD
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:03:04 2025 by rpki-client