Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62D33F22F2BB11EF8F26AB63762E951A.roa
File: 62D33F22F2BB11EF8F26AB63762E951A.roa (raw, json)
Hash identifier: l4P1nkS++IPVppYuRzxKsVvlIyyWO4FfMAZCaM/sMLI=
Subject key identifier: 42:03:43:DD:F0:0F:62:40:FA:AD:DF:1F:E1:BA:C3:05:81:FB:D8:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62D33F22F2BB11EF8F26AB63762E951A.roa
Signing time: Mon 24 Feb 2025 14:26:50 +0000
ROA not before: Mon 24 Feb 2025 14:26:47 +0000
ROA not after: Sat 29 Mar 2025 14:26:47 +0000
asID: 203020
IP address blocks: 154.223.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89130 (0x15c2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 14:26:47 2025 GMT
Not After : Mar 29 14:26:47 2025 GMT
Subject: CN=67bc81aa-0f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:35:18:49:35:43:84:d4:b8:49:aa:c9:1a:6f:
55:ae:4e:12:58:44:ca:87:87:c6:5c:b6:7c:11:fb:
c7:f4:66:29:ba:88:96:5d:6c:f7:b5:d6:c8:c9:3e:
e1:a9:ea:89:4a:b7:d2:e0:36:01:b2:13:17:af:dc:
9f:d2:36:5d:70:b5:34:e1:20:6e:f3:69:d3:9a:0a:
91:af:63:a2:9a:6b:45:6c:54:bf:fe:21:93:9e:cd:
61:95:ee:88:dd:ff:1a:6f:34:60:7e:1b:87:29:89:
61:6a:bf:08:c6:11:f7:9e:a9:e2:b8:69:a4:4c:c3:
da:ed:7e:0a:06:61:fc:b4:dd:b5:3a:ca:0e:c2:79:
3c:00:21:99:25:d8:97:bd:57:e9:40:14:d8:d2:4e:
5d:f2:6e:f3:94:a7:40:18:b6:f9:c3:de:6d:1d:a0:
b6:40:58:b3:2a:1c:f0:af:e7:7e:51:ff:6d:4b:50:
c8:62:c8:b1:14:dc:3e:eb:66:07:0c:e2:39:75:29:
90:03:3e:b1:fc:01:a7:ed:55:0e:5a:9f:3e:a8:c9:
2e:c7:5e:15:82:1b:76:fc:0e:34:93:0e:57:e0:66:
92:a5:85:88:0a:0d:7a:44:a1:d8:67:d8:4f:2a:80:
7e:45:49:53:dd:72:f4:e6:ef:10:6b:34:92:ec:da:
54:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:03:43:DD:F0:0F:62:40:FA:AD:DF:1F:E1:BA:C3:05:81:FB:D8:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62D33F22F2BB11EF8F26AB63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.141.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:d7:31:a8:50:aa:50:ef:f3:06:b8:80:d1:57:04:ef:a9:75:
12:92:5f:5d:65:ce:b1:23:d1:b2:88:1c:3a:21:73:6a:0c:af:
9d:90:a6:08:26:2b:01:7d:aa:1e:e1:81:a4:21:0f:ca:1b:2b:
79:9a:30:8c:0f:c2:ce:17:c0:2b:51:01:49:62:46:35:81:04:
fb:b3:17:6a:cb:ee:95:73:c6:ee:ee:ec:de:b5:14:cb:71:ef:
6e:d9:8b:82:92:bc:cc:3d:56:2c:d2:f5:e8:1a:8e:93:a6:c8:
ec:a3:08:89:53:79:06:48:ee:fa:4a:fe:ef:fe:98:ee:a4:4e:
5b:2c:e0:20:57:9e:96:4a:e5:0c:b5:f5:73:16:b0:f7:79:fc:
23:99:2b:4e:c2:7a:2b:b0:90:bc:0d:2d:63:d7:dc:c5:d1:ab:
03:fe:14:cf:33:b8:c2:de:9f:b9:dc:32:9d:39:4d:0b:7b:58:
34:ab:1e:9c:ab:28:32:ec:8b:b4:ad:5e:ed:b2:4a:62:60:c0:
df:f9:0d:60:d2:98:08:69:55:ae:c2:29:89:60:ce:cb:f9:8e:
de:4c:5c:fc:dc:a4:d7:cd:ae:9d:ae:ad:40:11:2c:59:b0:2e:
39:6f:0a:4d:e8:92:1d:1b:f8:c9:ac:fb:6b:d5:a5:e4:1d:58:
08:2e:b4:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVwqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI0MTQyNjQ3WhcNMjUwMzI5MTQyNjQ3WjAYMRYw
FAYDVQQDEw02N2JjODFhYS0wZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3TUYSTVDhNS4SarJGm9Vrk4SWETKh4fGXLZ8EfvH9GYpuoiWXWz3tdbI
yT7hqeqJSrfS4DYBshMXr9yf0jZdcLU04SBu82nTmgqRr2OimmtFbFS//iGTns1h
le6I3f8abzRgfhuHKYlhar8IxhH3nqniuGmkTMPa7X4KBmH8tN21OsoOwnk8ACGZ
JdiXvVfpQBTY0k5d8m7zlKdAGLb5w95tHaC2QFizKhzwr+d+Uf9tS1DIYsixFNw+
62YHDOI5dSmQAz6x/AGn7VUOWp8+qMkux14Vght2/A40kw5X4GaSpYWICg16RKHY
Z9hPKoB+RUlT3XL05u8QazSS7NpUYwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEID
Q93wD2JA+q3fH+G6wwWB+9i2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MkQzM0YyMkYyQkIxMUVGOEYyNkFCNjM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt+NMA0GCSqGSIb3DQEB
CwUAA4IBAQDA1zGoUKpQ7/MGuIDRVwTvqXUSkl9dZc6xI9GyiBw6IXNqDK+dkKYI
JisBfaoe4YGkIQ/KGyt5mjCMD8LOF8ArUQFJYkY1gQT7sxdqy+6Vc8bu7uzetRTL
ce9u2YuCkrzMPVYs0vXoGo6TpsjsowiJU3kGSO76Sv7v/pjupE5bLOAgV56WSuUM
tfVzFrD3efwjmStOwnorsJC8DS1j19zF0asD/hTPM7jC3p+53DKdOU0Le1g0qx6c
qygy7Iu0rV7tskpiYMDf+Q1g0pgIaVWuwimJYM7L+Y7eTFz83KTXza6drq1AESxZ
sC45bwpN6JIdG/jJrPtr1aXkHVgILrS5
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:08:35 2025 by rpki-client