Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B4F5A22DA6911EFA0F4E580762E951A.roa
File: 8B4F5A22DA6911EFA0F4E580762E951A.roa (raw, json)
Hash identifier: BYJXUSkBWJT//RSxcHxwLDhh+vtM5yaB3m9RLrFbeCI=
Subject key identifier: 69:4E:85:BD:50:D1:6D:21:82:A9:3A:44:4C:A0:8E:74:44:07:62:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B4F5A22DA6911EFA0F4E580762E951A.roa
Signing time: Fri 24 Jan 2025 15:40:32 +0000
ROA not before: Fri 24 Jan 2025 15:40:28 +0000
ROA not after: Mon 03 Mar 2025 15:40:28 +0000
asID: 203020
IP address blocks: 154.223.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84153 (0x148b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 15:40:28 2025 GMT
Not After : Mar 3 15:40:28 2025 GMT
Subject: CN=6793b46f-b6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dd:8f:20:b6:0e:14:5b:ed:6b:8a:bb:7f:8d:
13:c3:4b:c8:b1:4d:d9:07:81:43:5d:11:9a:03:63:
46:60:35:1c:5e:c2:93:26:ac:18:f8:f4:b2:31:71:
93:19:ed:21:89:cb:06:80:a8:6c:61:68:26:f6:7f:
70:1c:6c:21:b1:0e:b4:c0:f3:ef:90:09:ae:9d:da:
f0:01:28:43:a0:48:66:27:99:a7:ed:0e:84:b8:29:
81:7b:20:49:99:8f:a9:08:71:01:45:42:9d:e7:60:
3f:63:b3:99:80:8b:1f:77:41:8c:6d:ab:99:59:64:
30:3c:bf:75:c5:02:31:15:ce:8d:b4:20:22:0c:40:
13:bf:6c:5e:67:7b:80:9e:f7:7a:6e:74:e6:1e:a5:
26:76:c7:d8:8f:4f:c0:b6:6c:a8:bd:6e:80:f7:7d:
d9:f7:70:71:58:71:c7:86:f6:70:3d:f8:ee:63:03:
7b:b0:d8:09:ce:83:88:bb:17:a1:7a:78:b7:ca:c9:
a8:a5:88:a6:a7:20:18:e2:f0:92:fd:0e:30:b4:bf:
8f:e2:1f:da:33:06:8a:ad:a7:9c:e8:a9:f4:d9:a9:
cd:b0:d5:5b:d1:4f:67:23:7e:91:8d:8f:cd:6a:62:
1e:15:36:73:25:b7:cc:3d:d2:fa:1d:f4:53:30:9a:
a6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4E:85:BD:50:D1:6D:21:82:A9:3A:44:4C:A0:8E:74:44:07:62:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B4F5A22DA6911EFA0F4E580762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.187.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:56:a4:e0:57:f5:1d:6a:6c:ce:42:11:96:7b:8e:dc:72:9e:
d9:b9:06:01:9a:51:70:62:8f:3e:b5:ab:5c:66:71:7b:cc:ff:
e0:10:a9:d9:c0:af:85:30:0e:02:db:9a:23:ca:d8:ee:18:7b:
03:96:41:33:cc:9c:c5:8e:ae:3d:38:19:53:15:83:e8:0d:42:
dd:90:c2:21:8f:3c:2e:b6:1e:17:5c:40:67:b6:8a:f0:76:c6:
8c:1c:d7:cb:54:ce:a0:26:96:ac:4a:9f:fd:6b:55:f1:a9:3a:
7c:e7:df:a6:c6:5f:6b:df:ff:29:c0:64:f5:11:93:4b:2c:68:
6e:51:c7:83:ff:4c:5f:9f:a9:0c:30:29:61:eb:4e:bc:3c:75:
0a:bd:a5:f1:c8:39:5e:6a:fb:24:2d:b2:22:c2:00:37:34:ec:
68:d1:b2:93:fa:46:17:4d:55:c4:43:0e:a0:a4:e5:aa:6d:47:
ad:c1:a1:74:64:9f:26:1f:7b:24:2e:63:89:4d:1a:63:d2:f4:
8c:f9:56:4f:d9:39:93:d5:8b:23:08:83:45:ae:36:5c:ae:00:
fd:1f:73:37:ff:70:53:c2:39:dd:e7:c6:30:65:e5:94:7e:7c:
3a:5d:0c:01:53:0a:68:a1:2d:8b:16:0a:51:3e:c7:f4:cf:b1:
1f:1b:29:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUi5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTU0MDI4WhcNMjUwMzAzMTU0MDI4WjAYMRYw
FAYDVQQDEw02NzkzYjQ2Zi1iNmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5t2PILYOFFvta4q7f40Tw0vIsU3ZB4FDXRGaA2NGYDUcXsKTJqwY+PSy
MXGTGe0hicsGgKhsYWgm9n9wHGwhsQ60wPPvkAmundrwAShDoEhmJ5mn7Q6EuCmB
eyBJmY+pCHEBRUKd52A/Y7OZgIsfd0GMbauZWWQwPL91xQIxFc6NtCAiDEATv2xe
Z3uAnvd6bnTmHqUmdsfYj0/AtmyovW6A933Z93BxWHHHhvZwPfjuYwN7sNgJzoOI
uxeheni3ysmopYimpyAY4vCS/Q4wtL+P4h/aMwaKraec6Kn02anNsNVb0U9nI36R
jY/NamIeFTZzJbfMPdL6HfRTMJqmYQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGlO
hb1Q0W0hgqk6REygjnREB2I/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QjRGNUEyMkRBNjkxMUVGQTBGNEU1ODA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt+7MA0GCSqGSIb3DQEB
CwUAA4IBAQA8VqTgV/UdamzOQhGWe47ccp7ZuQYBmlFwYo8+tatcZnF7zP/gEKnZ
wK+FMA4C25ojytjuGHsDlkEzzJzFjq49OBlTFYPoDULdkMIhjzwuth4XXEBntorw
dsaMHNfLVM6gJpasSp/9a1XxqTp859+mxl9r3/8pwGT1EZNLLGhuUceD/0xfn6kM
MClh6068PHUKvaXxyDleavskLbIiwgA3NOxo0bKT+kYXTVXEQw6gpOWqbUetwaF0
ZJ8mH3skLmOJTRpj0vSM+VZP2TmT1YsjCINFrjZcrgD9H3M3/3BTwjnd58YwZeWU
fnw6XQwBUwpooS2LFgpRPsf0z7EfGyno
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:15:49 2025 by rpki-client