Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B89E8B8DA6111EF9FC8254C762E951A.roa
File: 6B89E8B8DA6111EF9FC8254C762E951A.roa (raw, json)
Hash identifier: 3/7iU5Pc2xPhf/0v1M4fVIMydvJX9NJAIFqKnc3VAAI=
Subject key identifier: C8:E2:EE:39:33:C6:FC:46:0C:20:A5:EA:EB:34:3C:BE:FA:F0:BC:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014854
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B89E8B8DA6111EF9FC8254C762E951A.roa
Signing time: Fri 24 Jan 2025 14:42:22 +0000
ROA not before: Fri 24 Jan 2025 14:42:19 +0000
ROA not after: Wed 05 Mar 2025 14:42:19 +0000
asID: 202656
IP address blocks: 154.221.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84052 (0x14854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:42:19 2025 GMT
Not After : Mar 5 14:42:19 2025 GMT
Subject: CN=6793a6ce-37b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:eb:aa:31:6a:f1:03:74:e5:1a:ea:b8:5d:
d1:76:f1:ae:32:5d:1a:8a:f2:c9:af:87:97:db:48:
84:2d:de:08:da:9d:d6:8b:81:5f:37:5c:3d:48:ae:
89:9c:63:30:c9:22:fd:a8:a5:84:a7:ab:90:cc:af:
b5:66:47:47:db:fe:c0:03:87:25:6e:c3:a2:e6:40:
91:c5:74:a6:e5:c0:3f:b4:57:aa:35:48:5c:51:9e:
a1:32:d2:29:23:a6:36:5a:7d:08:e8:88:06:e4:b6:
ac:cc:e0:f7:ec:94:83:73:94:11:83:67:16:d2:05:
1c:91:71:10:04:9f:e0:17:86:14:86:6d:75:a6:23:
da:79:bb:aa:96:b2:6c:1f:46:0a:5e:a8:83:cb:c4:
5e:1f:e6:7a:91:f5:02:c8:3b:43:97:5c:d8:ab:6a:
f3:29:f4:dd:e5:ed:dc:0b:1b:98:03:b8:f6:d1:93:
e6:4b:34:71:46:d7:c2:c9:06:6a:c7:69:b2:79:b2:
11:59:ee:3d:cf:70:6b:dc:89:88:15:37:64:04:ff:
9d:01:a2:8d:84:09:4a:e1:29:12:ae:d9:70:7c:1c:
91:7c:fa:5c:5d:fa:f8:41:b4:84:f9:e3:56:83:14:
0c:d5:d4:bc:2b:d3:fe:79:73:84:7f:c8:90:68:b4:
7b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E2:EE:39:33:C6:FC:46:0C:20:A5:EA:EB:34:3C:BE:FA:F0:BC:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B89E8B8DA6111EF9FC8254C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.50.0/24
Signature Algorithm: sha256WithRSAEncryption
57:1c:fe:8a:9e:80:1d:15:00:a8:1e:2e:0c:1d:14:9d:6e:38:
e7:8c:30:2f:25:34:c6:39:69:c0:12:56:2d:3f:0e:9d:2a:0b:
11:1a:bd:66:ee:53:44:ed:19:04:74:18:72:49:88:12:8d:39:
5c:58:e4:47:6f:24:6f:e3:70:9b:37:79:6d:95:8c:e6:55:53:
be:ea:e3:cf:1f:07:5e:f3:b7:26:3d:c0:28:67:87:82:e9:15:
90:d6:49:9d:10:b8:ee:80:6f:37:93:04:d6:7a:71:f3:73:15:
58:3c:b4:62:2a:e0:54:1f:a6:50:4e:db:54:38:b6:78:9d:ca:
07:4b:cb:33:3e:c6:99:81:d1:bf:4e:9a:51:6d:a5:c3:dd:6d:
77:63:24:4b:f4:7c:fd:0c:75:c9:f1:ef:5e:a7:26:2f:c2:2c:
9a:34:39:c6:e4:e4:ad:9e:40:56:7b:d2:07:17:1b:52:c6:36:
65:c7:33:2c:c2:2e:4e:3f:aa:8f:ff:77:7a:66:b6:b9:9e:73:
21:51:a9:25:c0:90:81:0a:57:82:82:6c:1a:bb:ab:88:c9:0e:
86:19:80:47:dc:3c:12:aa:aa:1e:03:28:b4:c7:08:33:8b:30:
e8:23:9e:c7:3c:66:49:7b:12:a0:66:a6:3d:1b:e1:0c:cb:fc:
61:52:15:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUhUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTQ0MjE5WhcNMjUwMzA1MTQ0MjE5WjAYMRYw
FAYDVQQDEw02NzkzYTZjZS0zN2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuy7rqjFq8QN05RrquF3RdvGuMl0aivLJr4eX20iELd4I2p3Wi4FfN1w9
SK6JnGMwySL9qKWEp6uQzK+1ZkdH2/7AA4clbsOi5kCRxXSm5cA/tFeqNUhcUZ6h
MtIpI6Y2Wn0I6IgG5LaszOD37JSDc5QRg2cW0gUckXEQBJ/gF4YUhm11piPaebuq
lrJsH0YKXqiDy8ReH+Z6kfUCyDtDl1zYq2rzKfTd5e3cCxuYA7j20ZPmSzRxRtfC
yQZqx2myebIRWe49z3Br3ImIFTdkBP+dAaKNhAlK4SkSrtlwfByRfPpcXfr4QbSE
+eNWgxQM1dS8K9P+eXOEf8iQaLR7QQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMji
7jkzxvxGDCCl6us0PL768LxfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82Qjg5RThCOERBNjExMUVGOUZDODI1NEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt0yMA0GCSqGSIb3DQEB
CwUAA4IBAQBXHP6KnoAdFQCoHi4MHRSdbjjnjDAvJTTGOWnAElYtPw6dKgsRGr1m
7lNE7RkEdBhySYgSjTlcWORHbyRv43CbN3ltlYzmVVO+6uPPHwde87cmPcAoZ4eC
6RWQ1kmdELjugG83kwTWenHzcxVYPLRiKuBUH6ZQTttUOLZ4ncoHS8szPsaZgdG/
TppRbaXD3W13YyRL9Hz9DHXJ8e9epyYvwiyaNDnG5OStnkBWe9IHFxtSxjZlxzMs
wi5OP6qP/3d6Zra5nnMhUaklwJCBCleCgmwau6uIyQ6GGYBH3DwSqqoeAyi0xwgz
izDoI57HPGZJexKgZqY9G+EMy/xhUhXW
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:02:04 2025 by rpki-client