Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE6825D2DA6611EF88291172762E951A.roa
File: FE6825D2DA6611EF88291172762E951A.roa (raw, json)
Hash identifier: Q19+KCsawPFaykn8S5wXGIhC7ZLDPfk1ebTVFr0hdmQ=
Subject key identifier: F6:1E:2C:4E:08:D7:E9:D0:EF:C0:15:B8:9F:61:DC:FF:6E:4A:63:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE6825D2DA6611EF88291172762E951A.roa
Signing time: Fri 24 Jan 2025 15:22:16 +0000
ROA not before: Fri 24 Jan 2025 15:22:13 +0000
ROA not after: Fri 28 Feb 2025 15:22:13 +0000
asID: 62240
IP address blocks: 154.195.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84128 (0x148a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 15:22:13 2025 GMT
Not After : Feb 28 15:22:13 2025 GMT
Subject: CN=6793b028-0466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:3d:b6:b4:73:9e:61:15:bf:18:40:b5:a7:
ec:60:15:9a:bf:55:4e:71:ec:b6:06:89:e0:a9:cf:
b9:a0:50:23:6b:f0:a7:4f:81:d1:53:15:3a:aa:1f:
41:95:91:83:88:b4:1f:1d:23:80:9d:19:09:fe:f3:
8d:7e:93:f5:38:2f:d6:7d:e4:8d:08:48:06:b5:d1:
8d:6b:f0:a7:64:d2:6e:da:09:e5:b6:41:67:0c:9a:
4a:ec:2b:b1:90:b8:d1:5f:83:07:c8:c0:9d:88:a7:
5a:65:c4:fd:c6:95:b3:3c:dc:58:71:f4:88:e3:b1:
13:c4:ef:40:ef:2f:eb:0c:09:5b:04:58:5b:78:87:
28:6e:8d:02:f4:08:90:22:a8:ae:54:c5:ff:a7:55:
fc:cc:03:da:c2:25:0a:9a:df:21:9f:8a:00:9c:3b:
c0:c8:cd:54:52:7f:d3:e6:83:d4:2e:4b:40:9b:e3:
b2:bf:03:31:51:51:0f:1d:8d:1a:72:5c:7f:cf:c3:
04:1a:cb:ff:d8:5e:76:63:e6:31:7d:ae:33:cc:15:
b1:fe:2e:d5:a4:ae:94:da:00:3b:9b:60:03:c7:0d:
7a:ca:7e:9b:fe:e3:60:75:e5:05:13:40:4e:9c:00:
37:7a:70:16:3b:2d:6e:02:b0:1f:fc:aa:a6:53:e3:
43:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1E:2C:4E:08:D7:E9:D0:EF:C0:15:B8:9F:61:DC:FF:6E:4A:63:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE6825D2DA6611EF88291172762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.108.0/24
Signature Algorithm: sha256WithRSAEncryption
25:95:76:b2:ab:02:c9:92:ee:0a:41:81:ae:45:da:79:b3:f3:
e9:ed:26:b2:bd:09:92:79:1d:32:fc:b1:57:ec:eb:04:25:71:
53:f7:ca:07:3d:c5:bb:16:0b:d5:cc:0a:fc:70:4d:f9:4f:f1:
15:ae:d9:1d:ba:bf:0e:cf:7a:56:88:22:3d:88:f3:e1:7f:45:
ce:df:96:b3:08:3c:56:c3:4e:b4:5d:94:a0:97:40:84:66:7b:
e0:7c:dc:7c:71:57:d8:3f:09:94:ee:28:e8:3f:97:34:d2:e8:
41:18:80:fe:26:3f:04:3b:b4:c5:1b:a7:c8:de:df:5c:d9:64:
a3:1c:0c:db:c5:a8:8c:d1:25:13:39:c6:bc:e9:10:ef:e7:b1:
df:ca:7a:bb:ea:e5:fa:0e:f5:19:2a:eb:34:a2:1e:b2:b0:19:
51:62:a2:8a:cd:89:c7:06:6d:1c:26:fd:9e:8c:5d:c6:e8:18:
d2:48:c6:7c:80:56:d2:e8:d3:65:df:e9:28:92:46:df:55:5d:
7a:7e:0f:94:b9:34:2a:02:cf:2f:44:00:a2:52:41:0e:62:9f:
42:40:57:c7:7c:a0:14:13:df:db:00:f3:62:fa:86:aa:24:d1:
ae:c9:c5:55:1b:46:8b:55:96:1e:c0:7c:5d:cc:4e:6a:91:5d:
a2:86:a5:52
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUigMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI0MTUyMjEzWhcNMjUwMjI4MTUyMjEzWjAYMRYw
FAYDVQQDEw02NzkzYjAyOC0wNDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0Lc9trRznmEVvxhAtafsYBWav1VOcey2Bongqc+5oFAja/CnT4HRUxU6
qh9BlZGDiLQfHSOAnRkJ/vONfpP1OC/WfeSNCEgGtdGNa/CnZNJu2gnltkFnDJpK
7CuxkLjRX4MHyMCdiKdaZcT9xpWzPNxYcfSI47ETxO9A7y/rDAlbBFhbeIcobo0C
9AiQIqiuVMX/p1X8zAPawiUKmt8hn4oAnDvAyM1UUn/T5oPULktAm+OyvwMxUVEP
HY0aclx/z8MEGsv/2F52Y+Yxfa4zzBWx/i7VpK6U2gA7m2ADxw16yn6b/uNgdeUF
E0BOnAA3enAWOy1uArAf/KqmU+ND6wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPYe
LE4I1+nQ78AVuJ9h3P9uSmN+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRTY4MjVEMkRBNjYxMUVGODgyOTExNzI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsNsMA0GCSqGSIb3DQEB
CwUAA4IBAQAllXayqwLJku4KQYGuRdp5s/Pp7SayvQmSeR0y/LFX7OsEJXFT98oH
PcW7FgvVzAr8cE35T/EVrtkdur8Oz3pWiCI9iPPhf0XO35azCDxWw060XZSgl0CE
ZnvgfNx8cVfYPwmU7ijoP5c00uhBGID+Jj8EO7TFG6fI3t9c2WSjHAzbxaiM0SUT
Oca86RDv57Hfynq76uX6DvUZKus0oh6ysBlRYqKKzYnHBm0cJv2ejF3G6BjSSMZ8
gFbS6NNl3+kokkbfVV16fg+UuTQqAs8vRACiUkEOYp9CQFfHfKAUE9/bAPNi+oaq
JNGuycVVG0aLVZYewHxdzE5qkV2ihqVS
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:17:41 2025 by rpki-client