Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F59D1E6CDA4811EFA4927FA4762E951A.roa
File: F59D1E6CDA4811EFA4927FA4762E951A.roa (raw, json)
Hash identifier: beyS8TGwbQ4b+21ydJohiZkQQqs7KtYDvhj5Yqzdag4=
Subject key identifier: 52:85:23:06:F3:54:5F:47:79:B8:D7:2F:79:79:02:EB:03:6E:B5:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014644
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F59D1E6CDA4811EFA4927FA4762E951A.roa
Signing time: Fri 24 Jan 2025 11:47:17 +0000
ROA not before: Fri 24 Jan 2025 11:47:13 +0000
ROA not after: Wed 05 Mar 2025 11:47:13 +0000
asID: 202656
IP address blocks: 154.222.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83524 (0x14644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:47:13 2025 GMT
Not After : Mar 5 11:47:13 2025 GMT
Subject: CN=67937dc5-c46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:47:2e:49:0c:d3:56:c5:80:f2:0c:f1:b5:
57:13:4a:e8:c4:f0:9f:5f:20:b7:29:74:e7:af:16:
9d:ab:b3:d0:3c:2e:49:f7:5b:a2:11:30:51:c2:4f:
c4:7c:d7:59:55:c5:a9:25:4f:61:f7:cd:41:15:24:
90:91:06:d8:c8:b1:23:68:68:79:b2:10:86:73:a5:
f7:09:03:6e:a5:9e:4b:4d:9b:d9:8b:9e:a0:d1:64:
68:a0:ae:0a:a0:4b:b8:7c:9b:51:a8:6a:1a:b5:47:
0a:30:e3:30:39:18:16:ca:90:75:a9:96:b1:31:5d:
36:35:80:50:56:7e:0b:9d:3a:72:0d:3c:c2:52:87:
da:e5:79:66:64:49:25:e8:72:2b:51:e2:a5:21:e4:
82:ce:09:a9:de:61:05:c9:25:f3:f8:39:25:c3:34:
14:f1:47:c4:aa:e6:71:7e:1f:79:63:f8:3a:1f:20:
d1:11:27:69:c6:35:6f:f9:7e:35:cf:52:36:c9:fc:
6b:90:f8:dd:90:be:22:01:cd:a3:94:5e:93:ff:61:
12:cb:42:60:63:6f:3f:c1:73:4d:40:35:57:03:3e:
91:69:e7:aa:64:7b:ac:12:13:76:49:1b:15:29:d5:
e2:13:51:13:ff:39:39:0c:01:18:e6:40:9a:42:0c:
a7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:85:23:06:F3:54:5F:47:79:B8:D7:2F:79:79:02:EB:03:6E:B5:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F59D1E6CDA4811EFA4927FA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.200.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:0e:34:93:7c:d0:bc:12:72:ec:be:f5:70:0c:c2:01:90:11:
99:6e:46:29:18:76:ab:7b:a4:91:55:1c:d5:4e:73:93:55:63:
ee:18:b3:15:9f:d9:c4:99:b6:26:e5:53:09:cf:1b:59:80:94:
a9:c7:67:86:51:3c:7d:fa:38:0c:8b:e7:bc:65:18:a6:f8:39:
00:f6:84:8c:24:ed:de:af:eb:ed:76:04:74:97:b0:64:66:26:
c3:c0:8f:13:6b:ce:9c:19:b0:69:f0:25:6e:b1:be:bb:f2:49:
58:2a:57:6c:b8:b9:27:40:fe:7f:4a:41:e4:f6:57:c7:61:74:
e3:0d:22:0c:65:1e:7a:aa:d5:f8:3d:78:c4:48:d4:21:9a:86:
d5:c5:68:d4:70:1f:e7:4c:58:c9:b0:5c:ed:6a:7b:f0:74:64:
50:8b:90:43:1d:ab:dc:a7:83:45:44:0a:b8:83:24:73:ec:50:
68:c5:d6:f9:e9:30:15:45:68:a7:b6:28:ec:bb:7c:7d:47:6f:
0a:8a:d1:88:7c:16:09:2b:39:cb:6a:cd:3b:e0:cc:27:dc:42:
b1:76:2e:b8:ac:fb:12:b3:35:60:9f:48:39:a7:63:d5:ef:a2:
4c:2b:5b:39:90:c7:7d:a5:07:a5:bf:2f:45:c4:68:19:69:7d:
dc:6f:fe:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUZEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTE0NzEzWhcNMjUwMzA1MTE0NzEzWjAYMRYw
FAYDVQQDEw02NzkzN2RjNS1jNDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs/dHLkkM01bFgPIM8bVXE0roxPCfXyC3KXTnrxadq7PQPC5J91uiETBR
wk/EfNdZVcWpJU9h981BFSSQkQbYyLEjaGh5shCGc6X3CQNupZ5LTZvZi56g0WRo
oK4KoEu4fJtRqGoatUcKMOMwORgWypB1qZaxMV02NYBQVn4LnTpyDTzCUofa5Xlm
ZEkl6HIrUeKlIeSCzgmp3mEFySXz+DklwzQU8UfEquZxfh95Y/g6HyDRESdpxjVv
+X41z1I2yfxrkPjdkL4iAc2jlF6T/2ESy0JgY28/wXNNQDVXAz6RaeeqZHusEhN2
SRsVKdXiE1ET/zk5DAEY5kCaQgyn/wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFKF
IwbzVF9HebjXL3l5AusDbrV9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNTlEMUU2Q0RBNDgxMUVGQTQ5MjdGQTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt7IMA0GCSqGSIb3DQEB
CwUAA4IBAQBMDjSTfNC8EnLsvvVwDMIBkBGZbkYpGHare6SRVRzVTnOTVWPuGLMV
n9nEmbYm5VMJzxtZgJSpx2eGUTx9+jgMi+e8ZRim+DkA9oSMJO3er+vtdgR0l7Bk
ZibDwI8Ta86cGbBp8CVusb678klYKldsuLknQP5/SkHk9lfHYXTjDSIMZR56qtX4
PXjESNQhmobVxWjUcB/nTFjJsFztanvwdGRQi5BDHavcp4NFRAq4gyRz7FBoxdb5
6TAVRWintijsu3x9R28KitGIfBYJKznLas074Mwn3EKxdi64rPsSszVgn0g5p2PV
76JMK1s5kMd9pQelvy9FxGgZaX3cb/5k
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:27:16 2025 by rpki-client