Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D528AAD0F35611EF9234A188762E951A.roa
File: D528AAD0F35611EF9234A188762E951A.roa (raw, json)
Hash identifier: lhpq6jixpg6aRx7I56Lk6FNmceSxgd0Ex1TmDm8XVKk=
Subject key identifier: 64:E7:DE:F0:AB:5B:2B:27:B1:FC:5C:38:9E:FE:DE:21:73:0F:EB:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015DD2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D528AAD0F35611EF9234A188762E951A.roa
Signing time: Tue 25 Feb 2025 08:59:34 +0000
ROA not before: Tue 25 Feb 2025 08:59:30 +0000
ROA not after: Mon 07 Apr 2025 08:59:30 +0000
asID: 138915
IP address blocks: 154.223.18.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89554 (0x15dd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 08:59:30 2025 GMT
Not After : Apr 7 08:59:30 2025 GMT
Subject: CN=67bd8676-102c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:87:d1:29:02:cd:7f:df:20:b7:d2:dd:da:
84:4a:4c:f1:e9:a9:04:16:04:a2:62:3a:57:a6:35:
4e:1e:1e:8b:97:e9:a9:a4:65:90:84:a8:1d:b5:8c:
14:49:c4:d8:93:e4:a1:a2:d7:4d:3e:95:81:ec:01:
30:06:19:c7:a4:9a:10:e9:f3:7c:0e:64:62:c9:d7:
3f:d5:1b:eb:47:6a:42:a9:05:1d:53:d4:6b:32:b3:
fc:58:67:68:75:93:26:c4:ae:2d:d6:39:1d:04:6f:
c0:86:78:5a:24:44:fa:2b:87:ca:ee:22:75:9d:d7:
33:57:84:48:eb:db:71:8e:1d:21:75:c6:c5:28:2f:
4d:b1:d6:e1:2b:44:86:19:2a:ac:08:04:a5:cb:a0:
92:c8:4b:e6:2d:e5:eb:b1:88:a5:08:0e:f0:0a:1b:
ef:95:a4:9a:1f:36:8a:a8:51:3e:e8:9e:21:27:3d:
55:d7:e6:27:03:c7:02:87:39:d6:5b:59:df:0e:59:
19:37:8f:52:4c:83:67:55:27:2b:3c:cd:32:fd:87:
82:83:de:c6:41:a3:a9:1d:4f:b5:38:60:00:ed:e3:
e7:ca:11:23:21:1b:2c:85:73:68:13:3a:bb:4f:45:
60:fe:29:70:1d:b4:3a:2d:89:81:58:99:45:7e:30:
74:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E7:DE:F0:AB:5B:2B:27:B1:FC:5C:38:9E:FE:DE:21:73:0F:EB:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D528AAD0F35611EF9234A188762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.18.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:0c:35:e4:b0:9e:57:7c:12:23:1b:e8:29:40:4d:7f:f2:ed:
e6:5e:91:ed:22:57:de:b3:aa:c0:48:d8:ed:e0:94:08:93:73:
aa:69:2d:d1:81:54:83:d4:b5:0c:89:61:24:93:89:54:a0:f9:
8f:f0:9d:9b:f5:0b:b1:6f:fb:d2:ab:68:2e:32:e1:27:8f:26:
79:e1:06:7d:97:2a:72:98:66:c5:5d:14:1a:31:2c:98:d3:96:
36:d4:0e:e2:59:33:35:aa:0a:e1:dd:bf:6a:0f:c9:84:59:6f:
31:0b:50:42:2d:84:36:d8:c8:dd:ac:07:7d:07:e3:91:10:04:
39:d7:44:48:b4:85:ae:bf:39:dd:b9:8c:f3:7c:4f:fc:47:8c:
4f:8b:93:8d:66:26:09:36:56:51:df:6c:a8:a8:8c:03:75:97:
e1:a9:98:df:56:ea:af:ed:db:af:1a:da:54:65:08:18:59:96:
67:d0:01:e2:e0:2d:62:d9:28:86:d2:ce:a3:71:41:7a:71:74:
8a:b3:4e:30:36:86:48:45:4c:a4:49:10:2c:2f:17:be:7f:c5:
a1:01:9e:2c:3f:8c:7d:2b:cc:e3:96:0f:5a:d1:43:71:6f:6f:
d3:50:43:9a:a7:07:6c:0a:ca:30:47:cc:6c:4e:94:0c:48:41:
e5:ba:40:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAV3SMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI1MDg1OTMwWhcNMjUwNDA3MDg1OTMwWjAYMRYw
FAYDVQQDEw02N2JkODY3Ni0xMDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp3WH0SkCzX/fILfS3dqESkzx6akEFgSiYjpXpjVOHh6Ll+mppGWQhKgd
tYwUScTYk+ShotdNPpWB7AEwBhnHpJoQ6fN8DmRiydc/1RvrR2pCqQUdU9RrMrP8
WGdodZMmxK4t1jkdBG/AhnhaJET6K4fK7iJ1ndczV4RI69txjh0hdcbFKC9Nsdbh
K0SGGSqsCASly6CSyEvmLeXrsYilCA7wChvvlaSaHzaKqFE+6J4hJz1V1+YnA8cC
hznWW1nfDlkZN49STINnVScrPM0y/YeCg97GQaOpHU+1OGAA7ePnyhEjIRsshXNo
Ezq7T0Vg/ilwHbQ6LYmBWJlFfjB0nQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGTn
3vCrWysnsfxcOJ7+3iFzD+s0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENTI4QUFEMEYzNTYxMUVGOTIzNEExODg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt8SMA0GCSqGSIb3DQEB
CwUAA4IBAQA6DDXksJ5XfBIjG+gpQE1/8u3mXpHtIlfes6rASNjt4JQIk3OqaS3R
gVSD1LUMiWEkk4lUoPmP8J2b9Quxb/vSq2guMuEnjyZ54QZ9lypymGbFXRQaMSyY
05Y21A7iWTM1qgrh3b9qD8mEWW8xC1BCLYQ22MjdrAd9B+OREAQ510RItIWuvznd
uYzzfE/8R4xPi5ONZiYJNlZR32yoqIwDdZfhqZjfVuqv7duvGtpUZQgYWZZn0AHi
4C1i2SiG0s6jcUF6cXSKs04wNoZIRUykSRAsLxe+f8WhAZ4sP4x9K8zjlg9a0UNx
b2/TUEOapwdsCsowR8xsTpQMSEHlukCe
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:12:54 2025 by rpki-client