Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/799C23DA041911F08801A8B1762E951A.roa
File: 799C23DA041911F08801A8B1762E951A.roa (raw, json)
Hash identifier: Rf3DWP5d++raW8Ps9Ktd9mZ+RFUrNLpUbu9X4+pnZqA=
Subject key identifier: A9:AC:CC:97:75:A7:9D:29:EC:1C:FC:D8:06:CE:B8:76:FF:B4:2C:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/799C23DA041911F08801A8B1762E951A.roa
Signing time: Tue 18 Mar 2025 16:53:11 +0000
ROA not before: Tue 18 Mar 2025 16:53:06 +0000
ROA not after: Mon 05 May 2025 16:53:06 +0000
asID: 202656
IP address blocks: 154.219.22.0/24 maxlen: 24
154.219.23.0/24 maxlen: 24
154.219.25.0/24 maxlen: 24
154.219.26.0/24 maxlen: 24
154.219.27.0/24 maxlen: 24
154.222.40.0/24 maxlen: 24
154.222.41.0/24 maxlen: 24
154.222.42.0/24 maxlen: 24
154.222.198.0/24 maxlen: 24
154.222.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95440 (0x174d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 16:53:06 2025 GMT
Not After : May 5 16:53:06 2025 GMT
Subject: CN=67d9a4f7-589b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:f3:42:b5:f4:ac:eb:c3:aa:67:3e:eb:06:
4d:6f:ef:01:19:76:e6:6c:42:1c:b0:2f:23:c1:33:
16:b1:1c:ad:b7:38:aa:17:63:a1:26:3c:98:5a:60:
3e:1e:34:b9:44:8d:b7:96:b4:c8:fa:e8:1b:fd:35:
3b:24:bb:7a:41:b9:c4:59:72:bd:38:e1:a3:f4:db:
91:df:38:ca:2f:93:f9:d1:e6:06:b7:ff:14:01:83:
8f:7d:57:b0:51:6c:79:25:01:5a:13:eb:71:65:7f:
a0:12:33:1a:29:94:51:74:a3:8d:ba:65:a1:e3:ce:
b0:6f:b7:3c:61:c7:38:31:5d:79:d0:b8:9d:bb:62:
cc:62:8f:49:c8:ff:a4:25:10:81:46:44:ad:94:ba:
26:2d:fe:a1:de:be:cd:0f:a0:61:02:88:1d:be:de:
cb:35:d7:43:8b:19:ea:8a:0d:b4:4c:ec:ef:2a:4e:
82:85:f1:d3:21:d6:a4:5b:e7:9f:ae:d2:37:bd:30:
d8:33:eb:b1:87:74:98:45:b2:fc:e3:53:34:3e:27:
45:fc:9d:b6:22:28:b0:88:62:86:79:6c:dc:34:00:
87:bc:e7:e5:b1:90:20:52:f7:77:ed:c0:0f:6d:b4:
2f:d6:e9:4a:15:b0:9a:ed:6d:5b:2b:98:3d:b4:77:
63:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AC:CC:97:75:A7:9D:29:EC:1C:FC:D8:06:CE:B8:76:FF:B4:2C:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/799C23DA041911F08801A8B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.22.0/23
154.219.25.0-154.219.27.255
154.222.40.0-154.222.42.255
154.222.198.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:25:52:02:db:24:9d:66:00:7e:63:db:73:82:c1:c8:64:bd:
dc:8c:1e:2f:5a:eb:18:b0:94:51:bb:a9:f6:e9:89:2a:1b:c8:
32:59:f4:94:f4:c3:6e:ce:00:37:67:b8:f7:2a:5b:bb:b9:b2:
c3:76:2b:c2:dd:e8:78:16:d9:9c:c7:d8:93:4b:ec:bc:ae:ea:
26:19:7c:39:b2:23:d7:13:45:f5:ac:11:98:4d:f2:d6:ad:f9:
4f:7c:03:79:2c:f4:27:42:f7:bf:ed:cd:b0:93:a2:5d:06:06:
6e:0a:8f:3e:f9:ac:2b:12:08:74:ad:61:ce:ab:80:55:35:ed:
59:58:fb:a8:b7:2a:03:fb:dd:64:2a:a7:c9:98:70:11:f9:82:
8d:76:56:1a:fd:b2:db:99:73:52:e2:b6:e8:82:bc:c6:8d:a0:
71:1f:b9:4e:17:d5:1b:e5:cf:b4:0c:4a:78:21:ad:8a:41:0c:
7d:b9:1e:ac:ce:db:61:e0:8a:fb:2f:6e:01:5d:0f:53:1a:74:
49:5e:e7:c6:c4:df:80:53:05:0d:3a:70:66:0d:79:4e:5a:fc:
d4:4d:e6:d0:b9:48:24:ab:0a:ed:ea:d1:4a:92:79:b9:f7:50:
36:53:1d:1a:0e:6b:1b:e5:5a:ce:11:91:19:c4:d9:66:6a:66:
17:ce:ed:23
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAXTQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzE4MTY1MzA2WhcNMjUwNTA1MTY1MzA2WjAYMRYw
FAYDVQQDEw02N2Q5YTRmNy01ODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyrHzQrX0rOvDqmc+6wZNb+8BGXbmbEIcsC8jwTMWsRyttziqF2OhJjyY
WmA+HjS5RI23lrTI+ugb/TU7JLt6QbnEWXK9OOGj9NuR3zjKL5P50eYGt/8UAYOP
fVewUWx5JQFaE+txZX+gEjMaKZRRdKONumWh486wb7c8Ycc4MV150Lidu2LMYo9J
yP+kJRCBRkStlLomLf6h3r7ND6BhAogdvt7LNddDixnqig20TOzvKk6ChfHTIdak
W+efrtI3vTDYM+uxh3SYRbL841M0PidF/J22IiiwiGKGeWzcNACHvOflsZAgUvd3
7cAPbbQv1ulKFbCa7W1bK5g9tHdj8wIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFKms
zJd1p50p7Bz82AbOuHb/tCxYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OTlDMjNEQTA0MTkxMUYwODgwMUE4QjE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQBmtsWMAwDBACa2xkDBAKa
2xgwDAMEA5reKAMEAJreKgMEAZrexjANBgkqhkiG9w0BAQsFAAOCAQEAWiVSAtsk
nWYAfmPbc4LByGS93IweL1rrGLCUUbup9umJKhvIMln0lPTDbs4AN2e49ypbu7my
w3Yrwt3oeBbZnMfYk0vsvK7qJhl8ObIj1xNF9awRmE3y1q35T3wDeSz0J0L3v+3N
sJOiXQYGbgqPPvmsKxIIdK1hzquAVTXtWVj7qLcqA/vdZCqnyZhwEfmCjXZWGv2y
25lzUuK26IK8xo2gcR+5ThfVG+XPtAxKeCGtikEMfbkerM7bYeCK+y9uAV0PUxp0
SV7nxsTfgFMFDTpwZg15Tlr81E3m0LlIJKsK7erRSpJ5ufdQNlMdGg5rG+VazhGR
GcTZZmpmF87tIw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:54 2025 by rpki-client