Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3FE48C0F2E011EF85F1DB5F762E951A.roa
File: D3FE48C0F2E011EF85F1DB5F762E951A.roa (raw, json)
Hash identifier: 6LhkSXAvN0sWEA9rP4eY5ROlH88G2q2bj5pBFA2dpT0=
Subject key identifier: 4C:73:0C:21:C0:38:BC:49:66:5C:58:60:C2:89:62:66:32:DA:2E:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015CC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3FE48C0F2E011EF85F1DB5F762E951A.roa
Signing time: Mon 24 Feb 2025 18:54:51 +0000
ROA not before: Mon 24 Feb 2025 18:54:48 +0000
ROA not after: Mon 07 Apr 2025 18:54:48 +0000
asID: 63139
IP address blocks: 154.223.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89280 (0x15cc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 18:54:48 2025 GMT
Not After : Apr 7 18:54:48 2025 GMT
Subject: CN=67bcc07b-ec75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9c:35:cb:a7:86:31:9c:ea:c1:e2:54:6a:b6:
e8:df:3d:a6:ce:29:77:ec:4a:25:5d:fc:d5:74:75:
47:7b:6e:7d:00:58:c8:47:00:09:4c:82:a5:9b:bd:
9b:c9:fc:58:c3:af:34:39:c4:19:14:b0:f8:35:dd:
e0:5b:08:8d:aa:4f:88:07:63:ec:66:b9:bc:4d:d3:
d0:d7:67:be:64:75:20:e8:78:1a:de:39:b8:b8:b0:
2b:86:2c:de:bf:b9:db:7c:52:47:36:a4:b2:f5:29:
88:d3:a3:10:60:dc:db:66:1a:98:15:f8:56:08:fb:
4e:af:33:1d:60:4a:50:9c:6d:87:ec:c3:55:f9:5d:
1f:07:85:22:87:1c:b4:4d:79:67:22:c6:54:1f:cf:
ce:6a:39:ea:b0:4f:2a:07:6c:01:7f:85:5f:40:e8:
ea:5d:45:41:cd:a4:1b:46:72:fc:68:1c:1a:47:c9:
83:70:69:2e:07:eb:0c:48:4b:9c:22:fe:df:35:15:
4e:73:f2:97:a2:eb:71:48:28:d5:29:07:51:8f:bd:
87:4d:9d:e0:d0:0e:71:82:88:33:70:23:7d:a8:91:
51:a6:5a:0e:65:f6:66:d1:58:fb:99:55:73:2a:ff:
98:0b:84:62:68:f6:22:f9:22:b0:0f:fb:28:2d:8b:
3b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:73:0C:21:C0:38:BC:49:66:5C:58:60:C2:89:62:66:32:DA:2E:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3FE48C0F2E011EF85F1DB5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.31.0/24
Signature Algorithm: sha256WithRSAEncryption
04:96:54:14:43:fc:3c:a9:c6:d5:63:93:45:05:10:ac:6d:2e:
25:ad:68:97:0b:02:01:4f:1e:60:87:8d:d5:a1:a9:f4:4a:a5:
23:03:4a:af:3f:e5:10:69:fd:b8:c3:99:a0:bf:04:d0:92:bc:
fd:29:22:e0:7b:af:cd:97:e8:d5:87:86:60:68:30:69:aa:75:
ab:24:fa:e0:48:0f:87:15:32:8b:d1:f2:1f:92:fa:46:a0:fc:
b5:ef:5e:e5:08:4c:be:39:19:cc:67:43:55:15:48:a6:63:b1:
fa:0f:7c:9d:81:26:36:6e:2d:de:0d:29:54:08:71:05:f2:63:
e6:38:55:14:c9:af:e2:81:fe:52:23:84:6a:c8:e9:97:c5:3d:
a2:b9:a0:0c:72:05:ff:0e:06:ee:d0:1c:03:59:7e:90:91:ed:
1c:a9:6d:00:fe:74:c7:73:37:a1:17:9f:9e:6c:16:f5:b9:c5:
4a:ec:b6:53:20:12:fa:24:ca:31:e0:af:67:a1:a6:af:91:0f:
59:3f:fa:0a:03:9d:86:d5:87:5b:e9:fd:a2:cd:15:8a:8a:b2:
6e:f6:92:88:30:db:97:e0:d3:77:89:8e:14:92:60:26:0d:f3:
e4:0b:4f:80:96:3f:8b:89:ad:2c:5c:97:d8:7d:b2:31:49:2f:
c9:f5:e4:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVzAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI0MTg1NDQ4WhcNMjUwNDA3MTg1NDQ4WjAYMRYw
FAYDVQQDEw02N2JjYzA3Yi1lYzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2pw1y6eGMZzqweJUarbo3z2mzil37EolXfzVdHVHe259AFjIRwAJTIKl
m72byfxYw680OcQZFLD4Nd3gWwiNqk+IB2PsZrm8TdPQ12e+ZHUg6Hga3jm4uLAr
hizev7nbfFJHNqSy9SmI06MQYNzbZhqYFfhWCPtOrzMdYEpQnG2H7MNV+V0fB4Ui
hxy0TXlnIsZUH8/OajnqsE8qB2wBf4VfQOjqXUVBzaQbRnL8aBwaR8mDcGkuB+sM
SEucIv7fNRVOc/KXoutxSCjVKQdRj72HTZ3g0A5xgogzcCN9qJFRploOZfZm0Vj7
mVVzKv+YC4RiaPYi+SKwD/soLYs7lwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFExz
DCHAOLxJZlxYYMKJYmYy2i5qMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EM0ZFNDhDMEYyRTAxMUVGODVGMURCNUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8fMA0GCSqGSIb3DQEB
CwUAA4IBAQAEllQUQ/w8qcbVY5NFBRCsbS4lrWiXCwIBTx5gh43Voan0SqUjA0qv
P+UQaf24w5mgvwTQkrz9KSLge6/Nl+jVh4ZgaDBpqnWrJPrgSA+HFTKL0fIfkvpG
oPy1717lCEy+ORnMZ0NVFUimY7H6D3ydgSY2bi3eDSlUCHEF8mPmOFUUya/igf5S
I4RqyOmXxT2iuaAMcgX/Dgbu0BwDWX6Qke0cqW0A/nTHczehF5+ebBb1ucVK7LZT
IBL6JMox4K9noaavkQ9ZP/oKA52G1Ydb6f2izRWKirJu9pKIMNuX4NN3iY4UkmAm
DfPkC0+Alj+Lia0sXJfYfbIxSS/J9eR7
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:08:55 2025 by rpki-client