Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAD27E7A041311F08F0E0C90762E951A.roa
File: DAD27E7A041311F08F0E0C90762E951A.roa (raw, json)
Hash identifier: pVtbd4i5Tge/L/4P3J3Mvw53QfwQ8T0m8CN4meM/A1A=
Subject key identifier: C9:4B:0D:53:3F:7C:57:BF:46:09:6D:93:E1:09:7F:A2:0E:B3:AE:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAD27E7A041311F08F0E0C90762E951A.roa
Signing time: Tue 18 Mar 2025 16:12:57 +0000
ROA not before: Tue 18 Mar 2025 16:12:53 +0000
ROA not after: Thu 01 May 2025 16:12:53 +0000
asID: 44559
IP address blocks: 154.81.40.0/24 maxlen: 24
154.81.41.0/24 maxlen: 24
154.81.42.0/24 maxlen: 24
154.81.43.0/24 maxlen: 24
154.81.44.0/24 maxlen: 24
154.81.45.0/24 maxlen: 24
154.81.46.0/24 maxlen: 24
154.81.47.0/24 maxlen: 24
154.81.54.0/24 maxlen: 24
154.81.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95428 (0x174c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 16:12:53 2025 GMT
Not After : May 1 16:12:53 2025 GMT
Subject: CN=67d99b89-eb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c7:6e:66:08:c6:40:12:6f:19:cc:10:0d:3c:
37:03:07:0b:22:09:81:ad:9c:0f:45:df:3b:2a:b5:
a8:14:17:42:a2:2f:dc:15:7c:6c:e7:44:f2:5d:8d:
56:7d:1b:a7:8a:b0:aa:a6:83:84:4b:9b:65:5f:40:
35:61:a8:9f:35:dd:1f:76:7d:90:77:2e:a7:ae:b8:
7c:52:f5:71:b4:9d:7d:40:60:07:c4:98:2a:70:4b:
22:68:61:42:29:bf:05:9d:43:04:7f:d3:1d:4a:5e:
d5:8b:1f:bb:dd:dd:82:ab:46:38:87:bf:a1:8d:64:
02:3f:e0:14:be:c2:4c:e2:e5:b4:4c:38:85:fe:02:
0c:75:43:fe:9b:1a:43:95:a2:37:20:c0:de:6f:e6:
bf:65:8e:0a:1f:95:7d:a1:8e:b3:40:ea:90:17:3a:
03:57:a5:0e:84:62:8e:ef:d0:b6:a8:66:93:37:08:
fa:e5:76:02:70:aa:46:8c:b7:fd:ea:35:12:82:f7:
f8:ce:5b:8e:d4:cd:1f:7c:1a:2a:6c:a0:28:37:12:
a7:a4:01:38:a3:f8:4c:a3:42:17:28:d7:ce:15:54:
da:c6:61:1b:98:c6:da:0b:20:63:6f:ac:d9:62:92:
e8:29:98:e8:0b:da:75:d3:e0:f3:84:a6:a6:ea:41:
56:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4B:0D:53:3F:7C:57:BF:46:09:6D:93:E1:09:7F:A2:0E:B3:AE:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAD27E7A041311F08F0E0C90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.40.0/21
154.81.54.0/23
Signature Algorithm: sha256WithRSAEncryption
84:74:4e:3f:8d:06:b3:3c:ca:1b:06:e5:8d:8f:f8:89:c1:08:
d2:8f:b7:e8:10:71:d0:d3:c7:f4:01:48:97:d0:c3:9b:ed:2f:
c6:96:07:3c:f4:09:c6:85:09:72:e0:26:22:54:19:2d:28:8b:
c5:dd:c1:60:0a:3a:55:08:f0:9c:22:c8:c4:67:28:22:13:4a:
59:23:be:21:54:72:bf:dd:4c:25:0c:4e:b9:a7:79:f9:33:c8:
ca:16:7b:ef:48:e7:47:48:6e:07:b3:b0:32:2f:f6:bd:c1:0a:
86:a2:91:20:b4:b3:5d:68:01:f1:86:86:eb:12:43:6a:c4:d6:
1c:6d:a7:c1:f5:e0:4f:fd:24:96:1c:18:11:7a:6e:e2:2f:af:
01:38:5f:f6:e7:ae:51:86:cd:c6:36:c8:68:46:24:e5:36:ec:
76:48:37:72:eb:2f:8a:e2:48:66:4d:ac:be:5d:2c:da:3c:a8:
63:db:c9:ff:a0:4b:44:0e:c0:82:ab:ba:03:52:2d:a1:ad:d7:
6d:fb:82:97:19:91:7d:3a:fb:78:0a:d2:15:dc:4d:a2:d1:08:
0a:a9:58:a8:71:e8:22:6a:cd:b5:13:e8:d3:49:87:ea:2b:cf:
38:0c:1b:08:49:f8:91:d4:34:bf:02:24:c3:4f:cf:a2:ba:16:
11:b3:fa:6e
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAXTEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzE4MTYxMjUzWhcNMjUwNTAxMTYxMjUzWjAYMRYw
FAYDVQQDEw02N2Q5OWI4OS1lYjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7cduZgjGQBJvGcwQDTw3AwcLIgmBrZwPRd87KrWoFBdCoi/cFXxs50Ty
XY1WfRunirCqpoOES5tlX0A1YaifNd0fdn2Qdy6nrrh8UvVxtJ19QGAHxJgqcEsi
aGFCKb8FnUMEf9MdSl7Vix+73d2Cq0Y4h7+hjWQCP+AUvsJM4uW0TDiF/gIMdUP+
mxpDlaI3IMDeb+a/ZY4KH5V9oY6zQOqQFzoDV6UOhGKO79C2qGaTNwj65XYCcKpG
jLf96jUSgvf4zluO1M0ffBoqbKAoNxKnpAE4o/hMo0IXKNfOFVTaxmEbmMbaCyBj
b6zZYpLoKZjoC9p10+DzhKam6kFWUwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFMlL
DVM/fFe/Rgltk+EJf6IOs65GMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQUQyN0U3QTA0MTMxMUYwOEYwRTBDOTA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDmlEoAwQBmlE2MA0GCSqG
SIb3DQEBCwUAA4IBAQCEdE4/jQazPMobBuWNj/iJwQjSj7foEHHQ08f0AUiX0MOb
7S/Glgc89AnGhQly4CYiVBktKIvF3cFgCjpVCPCcIsjEZygiE0pZI74hVHK/3Uwl
DE65p3n5M8jKFnvvSOdHSG4Hs7AyL/a9wQqGopEgtLNdaAHxhobrEkNqxNYcbafB
9eBP/SSWHBgRem7iL68BOF/2565Rhs3GNshoRiTlNux2SDdy6y+K4khmTay+XSza
PKhj28n/oEtEDsCCq7oDUi2hrddt+4KXGZF9Ovt4CtIV3E2i0QgKqViocegias21
E+jTSYfqK884DBsISfiR1DS/AiTDT8+iuhYRs/pu
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:02:23 2025 by rpki-client