Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/725CCADCDA4511EF9976908B762E951A.roa
File: 725CCADCDA4511EF9976908B762E951A.roa (raw, json)
Hash identifier: FVVpTYWwnagilLY/qjK9y+9btV1NpCoEmNci5ZeoH2g=
Subject key identifier: 51:47:FA:CE:16:D8:0A:9B:CE:1C:19:0B:1D:4A:9C:B1:C7:DE:1F:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014604
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/725CCADCDA4511EF9976908B762E951A.roa
Signing time: Fri 24 Jan 2025 11:22:08 +0000
ROA not before: Fri 24 Jan 2025 11:22:04 +0000
ROA not after: Wed 05 Mar 2025 11:22:04 +0000
asID: 202656
IP address blocks: 154.218.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83460 (0x14604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:22:04 2025 GMT
Not After : Mar 5 11:22:04 2025 GMT
Subject: CN=679377e0-96c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:8e:3e:b2:3b:ca:22:b6:f4:9e:d6:6e:35:
27:3f:82:dc:0c:b7:84:2f:91:65:24:5d:15:f7:0c:
83:3b:27:85:9e:03:3f:ad:52:07:59:90:a7:bb:55:
8f:fe:58:50:52:4f:22:5d:df:c8:8d:89:7c:44:74:
ec:72:f3:67:9c:cd:ea:cc:9b:ea:94:54:a9:e1:0a:
54:25:c0:4b:69:04:e8:90:e8:63:88:36:09:e3:6a:
35:d9:a1:d4:4d:be:1c:be:b1:5b:58:d3:85:d2:1b:
76:b6:8a:f1:f0:9a:65:36:4e:b7:ec:51:07:50:5e:
af:bb:02:03:86:3d:3e:f5:7b:14:e1:09:0c:ce:72:
d2:e3:8d:e1:ae:62:d2:f8:b7:79:a6:a6:93:00:f6:
67:09:d4:02:81:fe:4d:82:0a:c0:e9:3b:26:12:b4:
ba:6e:2f:3e:6f:e4:a3:ec:22:3f:fb:0a:b7:0c:db:
d2:c2:77:9d:cc:a0:38:c3:1e:96:7d:59:f8:d2:06:
7b:26:d4:47:f4:9f:0c:b2:b3:8f:ed:d2:a2:14:07:
db:0e:71:dd:85:b5:28:4b:25:fb:ac:e0:06:67:a7:
08:d7:27:8e:47:5f:5b:aa:9b:7a:05:b4:3b:74:c8:
10:3e:3c:9a:c9:dc:51:8a:d0:f7:11:d6:d9:c4:ff:
36:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:47:FA:CE:16:D8:0A:9B:CE:1C:19:0B:1D:4A:9C:B1:C7:DE:1F:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/725CCADCDA4511EF9976908B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.27.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:3b:81:53:13:09:6f:6d:52:43:93:6d:ff:89:c0:2b:28:11:
ed:cf:8c:df:0f:2a:e5:6a:b8:90:6e:3e:a4:e6:3e:af:3b:b8:
7b:83:48:f6:c7:da:94:e7:75:be:99:ca:8f:a8:ef:bf:91:b3:
f5:6b:95:cd:f9:00:55:a2:4f:9d:f9:c5:3d:bf:76:b5:23:a2:
00:b3:22:ad:a8:37:81:12:18:1c:3b:82:1b:50:a6:5c:50:f7:
4b:8f:44:eb:f2:08:33:38:71:58:63:ef:d2:2e:dd:8a:27:d3:
7d:e6:97:42:b4:09:e7:a1:ca:b6:4b:ac:61:50:fa:b9:ac:cb:
41:ed:72:42:6b:95:ff:07:40:01:e4:8f:ac:1a:cf:71:18:21:
47:dc:d4:71:bc:3f:56:5b:91:65:ea:b6:eb:91:23:34:60:ee:
c2:94:4d:49:41:2b:9c:9d:90:cb:0d:be:e0:87:58:e0:56:c3:
f3:84:70:f8:3d:67:df:29:62:ee:2b:de:77:63:a1:b2:c9:bc:
f5:5a:a5:5d:63:bd:00:5b:4c:1b:b4:7c:5e:47:a8:0d:01:c4:
31:a6:94:0e:d0:a3:44:19:ca:52:5f:eb:f2:5d:2a:4c:70:21:
2a:fb:c6:0b:c2:b2:b8:ce:fa:06:fa:38:79:95:28:53:31:44:
71:d5:95:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUYEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTEyMjA0WhcNMjUwMzA1MTEyMjA0WjAYMRYw
FAYDVQQDEw02NzkzNzdlMC05NmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3AqOPrI7yiK29J7WbjUnP4LcDLeEL5FlJF0V9wyDOyeFngM/rVIHWZCn
u1WP/lhQUk8iXd/IjYl8RHTscvNnnM3qzJvqlFSp4QpUJcBLaQTokOhjiDYJ42o1
2aHUTb4cvrFbWNOF0ht2torx8JplNk637FEHUF6vuwIDhj0+9XsU4QkMznLS443h
rmLS+Ld5pqaTAPZnCdQCgf5NggrA6TsmErS6bi8+b+Sj7CI/+wq3DNvSwnedzKA4
wx6WfVn40gZ7JtRH9J8MsrOP7dKiFAfbDnHdhbUoSyX7rOAGZ6cI1yeOR19bqpt6
BbQ7dMgQPjyaydxRitD3EdbZxP82mwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFFH
+s4W2AqbzhwZCx1KnLHH3h/AMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MjVDQ0FEQ0RBNDUxMUVGOTk3NjkwOEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtobMA0GCSqGSIb3DQEB
CwUAA4IBAQCfO4FTEwlvbVJDk23/icArKBHtz4zfDyrlariQbj6k5j6vO7h7g0j2
x9qU53W+mcqPqO+/kbP1a5XN+QBVok+d+cU9v3a1I6IAsyKtqDeBEhgcO4IbUKZc
UPdLj0Tr8ggzOHFYY+/SLt2KJ9N95pdCtAnnocq2S6xhUPq5rMtB7XJCa5X/B0AB
5I+sGs9xGCFH3NRxvD9WW5Fl6rbrkSM0YO7ClE1JQSucnZDLDb7gh1jgVsPzhHD4
PWffKWLuK953Y6Gyybz1WqVdY70AW0wbtHxeR6gNAcQxppQO0KNEGcpSX+vyXSpM
cCEq+8YLwrK4zvoG+jh5lShTMURx1ZXg
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:50:33 2025 by rpki-client