Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA2BCD14BEA711EF9BF0119F762E951A.roa
File: FA2BCD14BEA711EF9BF0119F762E951A.roa (raw, json)
Hash identifier: Qc93BBMdx4F712XLVJ0CxXoUH6YpTBN7SsnSdbhO7cA=
Subject key identifier: 4F:6B:2B:3E:10:6A:B1:9F:B3:D7:DF:37:67:82:3B:1C:CF:92:6B:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C6A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA2BCD14BEA711EF9BF0119F762E951A.roa
Signing time: Fri 20 Dec 2024 07:56:54 +0000
ROA not before: Fri 20 Dec 2024 07:56:50 +0000
ROA not after: Thu 20 Mar 2025 07:56:50 +0000
asID: 2914
IP address blocks: 154.214.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72810 (0x11c6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 07:56:50 2024 GMT
Not After : Mar 20 07:56:50 2025 GMT
Subject: CN=67652346-1dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c5:36:ba:c4:a3:f5:7c:cb:ea:47:6f:cd:30:
04:a5:9c:2a:4f:4b:45:d7:09:68:68:ad:07:18:1f:
22:13:a6:e9:59:d3:58:88:55:ca:24:99:58:e3:6e:
53:8e:1e:65:49:b9:f2:2a:53:34:1b:b2:2b:ff:2f:
f8:4c:50:6b:e8:03:0c:3f:06:bb:ca:6b:cd:db:6d:
aa:87:f4:a6:8a:e3:ac:89:50:38:30:d8:f2:53:8c:
13:0e:dd:5a:7b:cd:57:93:1c:5a:91:51:8e:00:3e:
cc:34:51:b4:67:6d:db:2f:ff:b8:3a:18:06:27:e7:
bb:e0:df:ee:35:c6:6f:35:ff:f2:22:2a:b7:e0:bd:
b4:d2:fa:87:75:24:16:35:1f:a9:50:8a:87:0a:19:
dc:3a:7d:06:ce:08:a5:6d:3b:9f:02:5c:4b:6a:ea:
49:f2:fb:d3:e4:2e:b4:31:6f:a4:b2:43:bd:46:da:
ae:5b:40:e6:24:a9:2c:b0:0a:34:b2:bf:ed:fb:f5:
ec:cf:c3:83:33:0e:73:31:4f:8d:45:78:3a:40:e3:
34:e4:19:11:65:f4:2d:b6:0a:5f:eb:a9:e7:26:17:
9d:6b:40:17:c5:0e:91:7f:0e:ba:68:aa:1d:83:5b:
22:52:5d:0b:b4:78:e0:10:3c:3b:64:e1:57:61:92:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6B:2B:3E:10:6A:B1:9F:B3:D7:DF:37:67:82:3B:1C:CF:92:6B:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA2BCD14BEA711EF9BF0119F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.223.0/24
Signature Algorithm: sha256WithRSAEncryption
21:61:57:7f:42:b8:02:c2:85:75:87:5f:07:28:b7:08:35:c3:
dc:77:59:86:b6:86:84:02:c9:cc:88:37:6e:88:80:f8:5a:03:
bd:d4:2b:ff:44:0b:e7:8e:5c:c5:37:12:f1:87:09:85:98:a0:
75:43:9a:17:e3:bf:c7:1b:61:0a:2c:ab:3a:f9:7b:a0:03:69:
38:9b:1a:49:09:7d:fe:8c:3f:c1:83:55:f1:91:7d:4a:e4:97:
86:8e:a2:81:22:b3:d8:d7:a5:10:a4:d7:4a:27:4d:00:8c:72:
5d:ae:9d:69:d1:e0:36:bc:5c:fb:f2:23:99:aa:f7:be:59:13:
e4:e8:23:35:ae:b9:ba:d9:17:9e:6f:e8:b6:07:1d:47:d2:70:
9f:60:c6:23:87:cd:4d:a0:76:66:ab:6c:77:34:60:d8:9a:25:
e7:e6:9d:af:f0:c0:89:32:a4:cd:78:95:06:4b:66:02:47:b3:
fb:e0:cb:01:53:b1:dd:fb:cd:c1:03:29:b7:a1:6e:d2:32:f4:
48:e8:67:76:b7:20:2e:eb:8f:7d:b7:81:0e:f0:4c:b4:06:bc:
b3:dd:56:81:d6:48:50:45:95:e3:ba:f1:88:36:ec:fb:ac:19:
88:59:83:98:46:1e:c8:9d:d3:df:bf:c7:40:c2:23:dd:3a:23:
54:c5:36:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARxqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMjIwMDc1NjUwWhcNMjUwMzIwMDc1NjUwWjAYMRYw
FAYDVQQDEw02NzY1MjM0Ni0xZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0MU2usSj9XzL6kdvzTAEpZwqT0tF1wloaK0HGB8iE6bpWdNYiFXKJJlY
425Tjh5lSbnyKlM0G7Ir/y/4TFBr6AMMPwa7ymvN222qh/SmiuOsiVA4MNjyU4wT
Dt1ae81XkxxakVGOAD7MNFG0Z23bL/+4OhgGJ+e74N/uNcZvNf/yIiq34L200vqH
dSQWNR+pUIqHChncOn0GzgilbTufAlxLaupJ8vvT5C60MW+kskO9RtquW0DmJKks
sAo0sr/t+/Xsz8ODMw5zMU+NRXg6QOM05BkRZfQttgpf66nnJheda0AXxQ6Rfw66
aKodg1siUl0LtHjgEDw7ZOFXYZLX8QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE9r
Kz4QarGfs9ffN2eCOxzPkmuRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQTJCQ0QxNEJFQTcxMUVGOUJGMDExOUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtbfMA0GCSqGSIb3DQEB
CwUAA4IBAQAhYVd/QrgCwoV1h18HKLcINcPcd1mGtoaEAsnMiDduiID4WgO91Cv/
RAvnjlzFNxLxhwmFmKB1Q5oX47/HG2EKLKs6+XugA2k4mxpJCX3+jD/Bg1XxkX1K
5JeGjqKBIrPY16UQpNdKJ00AjHJdrp1p0eA2vFz78iOZqve+WRPk6CM1rrm62Ree
b+i2Bx1H0nCfYMYjh81NoHZmq2x3NGDYmiXn5p2v8MCJMqTNeJUGS2YCR7P74MsB
U7Hd+83BAym3oW7SMvRI6Gd2tyAu6499t4EO8Ey0Bryz3VaB1khQRZXjuvGINuz7
rBmIWYOYRh7IndPfv8dAwiPdOiNUxTZ+
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:25:08 2025 by rpki-client