Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2483C53E070B11F08681CB43762E951A.roa
File: 2483C53E070B11F08681CB43762E951A.roa (raw, json)
Hash identifier: kWFZQ9UslkY8RzrPqQ7TsmQqZtMgosYUKClO24h7BBw=
Subject key identifier: CC:C4:AF:71:53:24:BB:56:E2:9A:16:44:DF:31:B6:08:75:56:A1:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01759C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2483C53E070B11F08681CB43762E951A.roa
Signing time: Sat 22 Mar 2025 10:48:09 +0000
ROA not before: Sat 22 Mar 2025 10:48:05 +0000
ROA not after: Sun 30 Mar 2025 10:48:05 +0000
asID: 136970
IP address blocks: 154.92.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95644 (0x1759c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 22 10:48:05 2025 GMT
Not After : Mar 30 10:48:05 2025 GMT
Subject: CN=67de9569-5f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:e8:81:a2:c4:ca:f6:ad:6d:45:0d:91:fc:
9e:35:69:f0:5d:d6:90:ce:04:3e:33:5d:c9:bd:77:
5d:d1:e2:8b:97:c7:0c:7e:93:89:97:07:ce:94:9f:
b4:77:c2:3f:d2:86:fe:d6:a0:43:fb:9d:71:71:62:
10:15:00:04:ef:8a:c6:d7:60:cf:33:83:3b:41:76:
18:93:a4:4f:08:5c:9a:01:09:fb:66:7a:38:4e:aa:
e2:8a:d3:e0:5a:4d:f7:4c:fe:c5:8f:2b:67:0a:17:
b1:28:b2:fe:ae:3e:a5:f3:1b:da:eb:06:7f:88:20:
94:c3:dd:75:f0:f1:cc:d3:56:96:46:92:4f:56:39:
58:fa:e8:78:ea:d1:4d:f3:0b:70:25:14:bf:fe:77:
25:e2:4f:c7:9d:04:cc:93:18:f9:05:47:94:12:b8:
92:cb:2c:40:bd:f1:bb:99:2c:25:f2:61:0a:9b:85:
0a:f5:4a:0f:6f:e4:82:b9:e8:5f:3f:42:55:81:3f:
03:ae:7a:d6:61:0c:08:a5:6e:53:e7:3c:7d:5a:f3:
50:5d:aa:3c:33:dd:f2:55:6c:92:fd:26:88:9c:63:
dc:d4:12:81:80:e7:1c:eb:ff:de:b0:1d:04:93:d0:
97:90:f3:0b:b5:03:b3:ed:c1:77:f5:d9:f9:4c:56:
49:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C4:AF:71:53:24:BB:56:E2:9A:16:44:DF:31:B6:08:75:56:A1:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2483C53E070B11F08681CB43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.20.0/24
Signature Algorithm: sha256WithRSAEncryption
94:28:1e:6e:13:61:c0:1a:38:cc:97:31:1a:f7:81:93:59:25:
86:8b:a8:f1:2c:56:10:14:16:0a:93:0b:e5:6d:86:1f:b5:65:
e3:d6:9c:91:d2:ac:28:ab:c2:0b:3a:04:e9:aa:21:54:84:53:
db:4f:f4:3c:49:50:2e:32:ef:77:b2:f7:25:5d:53:3f:94:9d:
57:2c:99:0f:0b:60:c3:52:90:43:ac:cd:e7:4d:3d:03:e2:1a:
2e:e7:41:5b:96:cd:f3:dd:9f:04:8e:34:c1:6e:b3:92:5e:0f:
67:c9:61:8d:58:61:af:cc:07:9d:e0:09:ba:af:87:99:8e:25:
af:a8:5a:ce:57:dc:75:20:97:0f:9d:24:c5:6f:58:71:39:b2:
e1:cd:7a:c8:8b:98:d4:f0:b0:69:58:7d:16:91:c7:92:0b:96:
81:e2:9e:64:f1:60:8b:c1:5b:ac:73:5d:86:1a:05:53:59:ad:
14:d5:9c:94:9f:8a:1a:02:90:a0:03:1e:d9:e3:46:b1:d8:09:
49:0a:6f:62:7c:2b:c7:bc:85:f9:47:8a:af:9a:68:11:52:14:
58:77:00:db:ce:df:4a:f0:fc:2c:24:4e:56:02:6a:be:9c:be:
fa:c8:55:6d:8f:c5:f5:b6:a4:a8:0e:b5:b5:4c:54:b6:e3:47:
f1:f0:63:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXWcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzIyMTA0ODA1WhcNMjUwMzMwMTA0ODA1WjAYMRYw
FAYDVQQDEw02N2RlOTU2OS01ZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0S/ogaLEyvatbUUNkfyeNWnwXdaQzgQ+M13JvXdd0eKLl8cMfpOJlwfO
lJ+0d8I/0ob+1qBD+51xcWIQFQAE74rG12DPM4M7QXYYk6RPCFyaAQn7Zno4Tqri
itPgWk33TP7FjytnChexKLL+rj6l8xva6wZ/iCCUw9118PHM01aWRpJPVjlY+uh4
6tFN8wtwJRS//ncl4k/HnQTMkxj5BUeUEriSyyxAvfG7mSwl8mEKm4UK9UoPb+SC
uehfP0JVgT8DrnrWYQwIpW5T5zx9WvNQXao8M93yVWyS/SaInGPc1BKBgOcc6//e
sB0Ek9CXkPMLtQOz7cF39dn5TFZJ8wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMzE
r3FTJLtW4poWRN8xtgh1VqGtMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNDgzQzUzRTA3MEIxMUYwODY4MUNCNDM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlwUMA0GCSqGSIb3DQEB
CwUAA4IBAQCUKB5uE2HAGjjMlzEa94GTWSWGi6jxLFYQFBYKkwvlbYYftWXj1pyR
0qwoq8ILOgTpqiFUhFPbT/Q8SVAuMu93svclXVM/lJ1XLJkPC2DDUpBDrM3nTT0D
4hou50Fbls3z3Z8EjjTBbrOSXg9nyWGNWGGvzAed4Am6r4eZjiWvqFrOV9x1IJcP
nSTFb1hxObLhzXrIi5jU8LBpWH0WkceSC5aB4p5k8WCLwVusc12GGgVTWa0U1ZyU
n4oaApCgAx7Z40ax2AlJCm9ifCvHvIX5R4qvmmgRUhRYdwDbzt9K8PwsJE5WAmq+
nL76yFVtj8X1tqSoDrW1TFS240fx8GN+
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:44:33 2025 by rpki-client