Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA5BE332DB3511EFA0441667762E951A.roa
File: FA5BE332DB3511EFA0441667762E951A.roa (raw, json)
Hash identifier: LbuofN2ygFU98PPT3P3yDBYU/7at2VvtuWHcaTIP6OA=
Subject key identifier: D9:16:FE:5C:8C:F5:E4:DA:B1:AD:D8:CC:EF:06:C7:4A:31:56:BA:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA5BE332DB3511EFA0441667762E951A.roa
Signing time: Sat 25 Jan 2025 16:03:55 +0000
ROA not before: Sat 25 Jan 2025 16:03:51 +0000
ROA not after: Fri 07 Mar 2025 16:03:51 +0000
asID: 138915
IP address blocks: 154.223.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84510 (0x14a1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 16:03:51 2025 GMT
Not After : Mar 7 16:03:51 2025 GMT
Subject: CN=67950b6b-1cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:26:4a:c7:04:45:88:fd:30:14:4b:81:f7:
b4:ae:fb:f9:11:71:34:67:05:37:d4:a7:47:43:3f:
0f:8d:c4:75:f1:d5:51:92:7c:9c:04:2f:0d:11:a8:
ae:23:a2:73:ca:cd:50:fe:d3:08:1a:76:8d:8a:58:
66:d3:25:46:74:8f:3d:7a:86:32:ad:b0:1d:f9:82:
94:d5:6a:d3:64:ee:b2:2b:95:97:08:03:9a:70:06:
7e:6c:a1:4e:be:f3:31:50:03:d9:52:63:29:b2:f1:
b7:2c:47:2a:4f:28:9c:e8:09:ca:47:4b:7e:b7:40:
a6:8a:87:6b:49:c1:89:f3:44:38:92:8a:61:55:0a:
44:90:ea:34:2f:20:53:2a:9c:dc:57:14:61:a7:eb:
99:9f:93:ef:36:a5:1f:75:33:6b:6f:d5:32:3c:43:
b5:45:7a:51:4b:11:27:9a:f1:67:c8:c3:9a:bb:61:
83:ff:0d:67:f1:2c:28:79:f8:21:45:2f:02:74:8e:
50:2d:ee:20:25:7e:9e:d2:92:a2:5f:9a:df:c7:d2:
5c:dc:4f:8d:8c:20:6d:0f:f9:bb:1e:c6:d8:01:3a:
50:c4:c2:2e:38:e4:54:c5:12:4d:8e:d5:57:4f:cf:
a8:ad:c1:69:2c:94:bd:09:df:cd:e8:5a:58:c4:a2:
b9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:16:FE:5C:8C:F5:E4:DA:B1:AD:D8:CC:EF:06:C7:4A:31:56:BA:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA5BE332DB3511EFA0441667762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.52.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:7b:41:38:3b:5d:e8:45:61:a5:0a:db:1b:cb:35:24:e9:49:
77:b3:00:7c:94:51:cd:4d:f9:84:8c:42:b1:cc:39:82:5c:c8:
7f:00:83:95:57:e2:63:94:2a:7a:7a:16:6e:f8:d6:c4:b9:23:
ba:d7:0c:dc:fe:d9:47:56:14:21:6c:a8:f5:a5:77:0f:cd:8c:
8d:b2:33:38:78:a6:d3:03:26:20:b9:a7:29:1c:92:d2:27:6c:
7c:de:1c:39:d0:80:a2:32:c2:4d:8d:3d:5a:94:0e:ff:bf:64:
4a:68:1a:e0:18:61:e7:48:c0:4d:d5:a8:ad:af:11:b6:3b:af:
ce:8e:1d:00:f3:b3:7a:73:0b:41:59:80:5b:c4:1e:ee:bd:69:
2b:4d:cc:5c:f8:82:44:77:ec:fc:04:f0:2e:e1:63:f4:94:7c:
a3:e0:8a:a0:6b:aa:45:37:46:d1:c2:9e:e8:f2:f2:3b:5e:84:
af:35:8f:15:33:b6:31:ee:27:24:79:4a:f8:06:c3:69:2e:c6:
1b:ff:62:43:db:cb:d1:05:d7:83:ea:11:71:56:f4:23:f9:94:
82:d4:fb:0f:12:e2:fd:f7:e8:ec:2a:87:08:45:7d:c4:74:cc:
22:b2:82:45:0c:9e:41:ba:6d:e2:64:39:32:88:64:64:09:73:
1b:0d:b6:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUoeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI1MTYwMzUxWhcNMjUwMzA3MTYwMzUxWjAYMRYw
FAYDVQQDEw02Nzk1MGI2Yi0xY2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3okmSscERYj9MBRLgfe0rvv5EXE0ZwU31KdHQz8PjcR18dVRknycBC8N
EaiuI6Jzys1Q/tMIGnaNilhm0yVGdI89eoYyrbAd+YKU1WrTZO6yK5WXCAOacAZ+
bKFOvvMxUAPZUmMpsvG3LEcqTyic6AnKR0t+t0CmiodrScGJ80Q4kophVQpEkOo0
LyBTKpzcVxRhp+uZn5PvNqUfdTNrb9UyPEO1RXpRSxEnmvFnyMOau2GD/w1n8Swo
efghRS8CdI5QLe4gJX6e0pKiX5rfx9Jc3E+NjCBtD/m7HsbYATpQxMIuOORUxRJN
jtVXT8+orcFpLJS9Cd/N6FpYxKK5CQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNkW
/lyM9eTasa3YzO8Gx0oxVroDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQTVCRTMzMkRCMzUxMUVGQTA0NDE2Njc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt80MA0GCSqGSIb3DQEB
CwUAA4IBAQCke0E4O13oRWGlCtsbyzUk6Ul3swB8lFHNTfmEjEKxzDmCXMh/AIOV
V+JjlCp6ehZu+NbEuSO61wzc/tlHVhQhbKj1pXcPzYyNsjM4eKbTAyYguacpHJLS
J2x83hw50ICiMsJNjT1alA7/v2RKaBrgGGHnSMBN1aitrxG2O6/Ojh0A87N6cwtB
WYBbxB7uvWkrTcxc+IJEd+z8BPAu4WP0lHyj4Iqga6pFN0bRwp7o8vI7XoSvNY8V
M7Yx7ickeUr4BsNpLsYb/2JD28vRBdeD6hFxVvQj+ZSC1PsPEuL99+jsKocIRX3E
dMwisoJFDJ5Bum3iZDkyiGRkCXMbDbb8
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:09:10 2025 by rpki-client