Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAF567B2F86211EF9301CE8E762E951A.roa
File: DAF567B2F86211EF9301CE8E762E951A.roa (raw, json)
Hash identifier: fJtGqwD+BHiR/0iB+2x9QdYjkQmtmttJ/xlutckVgfI=
Subject key identifier: AD:07:67:3C:D5:DB:50:06:00:9C:61:5E:66:13:A5:45:E3:AC:51:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017119
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAF567B2F86211EF9301CE8E762E951A.roa
Signing time: Mon 03 Mar 2025 19:08:14 +0000
ROA not before: Mon 03 Mar 2025 19:08:10 +0000
ROA not after: Mon 31 Mar 2025 19:08:10 +0000
asID: 48031
IP address blocks: 154.218.20.0/24 maxlen: 24
154.218.21.0/24 maxlen: 24
154.218.23.0/24 maxlen: 24
154.218.24.0/24 maxlen: 24
154.222.208.0/24 maxlen: 24
154.222.209.0/24 maxlen: 24
154.222.210.0/24 maxlen: 24
154.222.211.0/24 maxlen: 24
154.222.212.0/24 maxlen: 24
154.222.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94489 (0x17119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 19:08:10 2025 GMT
Not After : Mar 31 19:08:10 2025 GMT
Subject: CN=67c5fe1d-9ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:59:3a:86:8d:6b:2a:05:38:36:de:f2:b1:
68:78:df:20:07:b9:95:3b:a4:43:f5:7c:7f:eb:7a:
05:c2:e1:e8:98:0b:3e:68:85:f3:a7:96:4b:1e:78:
76:42:7b:9c:cb:65:70:a3:f6:1f:02:a6:25:af:cb:
5f:c3:85:78:cb:66:4c:2d:8f:5a:e6:82:d2:d3:66:
73:9b:36:17:02:75:43:7f:7b:83:43:e8:e5:0c:a1:
a8:de:01:f3:ed:fb:9d:18:76:76:c7:29:7f:61:0c:
72:96:30:68:81:b9:0c:76:74:ca:a8:a5:d6:ce:9d:
52:a6:63:68:b9:42:92:ba:db:5e:03:cb:3f:eb:c4:
13:db:de:fd:79:ed:cf:77:84:07:a9:cd:7f:2c:8e:
bf:68:a0:42:80:41:77:95:c3:41:7e:59:fe:a3:5d:
37:26:8b:d5:15:b8:8a:df:19:1e:80:08:da:84:94:
81:3b:bd:16:f0:06:25:0e:78:17:0b:62:a7:43:5f:
32:1c:2a:92:81:64:bf:3f:b6:01:ac:0e:f2:8a:cb:
b8:53:de:a7:b0:35:3b:28:55:16:0c:60:aa:52:bb:
f8:d3:54:c9:63:d7:79:b7:92:d1:11:9e:dd:87:6c:
21:1e:70:76:4c:95:9b:67:c2:ab:db:8a:26:19:83:
53:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:07:67:3C:D5:DB:50:06:00:9C:61:5E:66:13:A5:45:E3:AC:51:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAF567B2F86211EF9301CE8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.20.0/23
154.218.23.0-154.218.24.255
154.222.208.0-154.222.213.255
Signature Algorithm: sha256WithRSAEncryption
0e:92:ef:04:68:e1:20:a6:75:85:21:d9:ce:e3:1d:db:4f:4e:
21:f7:36:8e:e5:5d:f0:0b:dd:9a:65:23:63:99:bb:41:35:1b:
d9:e5:bb:96:0e:72:dc:4f:3b:29:4e:70:5a:61:9c:ae:75:b3:
f8:5a:a1:c3:c3:34:53:da:8a:6d:d6:d7:e9:e3:60:38:90:b5:
47:83:bf:c1:e6:98:21:2d:68:9c:0f:1d:99:bf:15:d7:9f:28:
b4:9a:f4:99:d8:05:a5:47:b3:03:95:f5:31:da:3d:e8:04:1f:
0f:9d:d7:c8:da:b8:2b:00:81:db:49:5e:45:68:06:1f:cb:77:
09:e8:33:87:ad:8a:77:27:99:4a:8c:63:b4:c4:ec:d2:57:53:
64:6d:aa:e0:ea:8b:98:f6:5a:ba:db:71:11:65:9f:f1:3d:ed:
fd:3c:97:42:50:ba:b6:c2:76:8e:23:ac:eb:25:ac:ee:37:b1:
db:93:fd:a7:35:99:be:14:b3:18:7c:9a:6f:3d:11:03:2f:e2:
74:39:31:77:63:c4:8b:ca:b0:df:1c:43:7b:00:bc:d3:e5:47:
25:1d:a6:0a:72:31:7f:b9:36:35:36:cf:53:b2:0d:1c:4e:7d:
b5:c3:09:e4:db:38:c9:11:fb:43:2c:8a:1c:4d:66:99:90:6e:
a5:61:c0:0f
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIDAXEZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAzMTkwODEwWhcNMjUwMzMxMTkwODEwWjAYMRYw
FAYDVQQDEw02N2M1ZmUxZC05ZWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1gxZOoaNayoFODbe8rFoeN8gB7mVO6RD9Xx/63oFwuHomAs+aIXzp5ZL
Hnh2Qnucy2Vwo/YfAqYlr8tfw4V4y2ZMLY9a5oLS02ZzmzYXAnVDf3uDQ+jlDKGo
3gHz7fudGHZ2xyl/YQxyljBogbkMdnTKqKXWzp1SpmNouUKSutteA8s/68QT2979
ee3Pd4QHqc1/LI6/aKBCgEF3lcNBfln+o103JovVFbiK3xkegAjahJSBO70W8AYl
DngXC2KnQ18yHCqSgWS/P7YBrA7yisu4U96nsDU7KFUWDGCqUrv401TJY9d5t5LR
EZ7dh2whHnB2TJWbZ8Kr24omGYNTFwIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFK0H
ZzzV21AGAJxhXmYTpUXjrFHrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQUY1NjdCMkY4NjIxMUVGOTMwMUNFOEU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQBmtoUMAwDBACa2hcDBACa
2hgwDAMEBJre0AMEAZre1DANBgkqhkiG9w0BAQsFAAOCAQEADpLvBGjhIKZ1hSHZ
zuMd209OIfc2juVd8AvdmmUjY5m7QTUb2eW7lg5y3E87KU5wWmGcrnWz+Fqhw8M0
U9qKbdbX6eNgOJC1R4O/weaYIS1onA8dmb8V158otJr0mdgFpUezA5X1Mdo96AQf
D53XyNq4KwCB20leRWgGH8t3Cegzh62KdyeZSoxjtMTs0ldTZG2q4OqLmPZauttx
EWWf8T3t/TyXQlC6tsJ2jiOs6yWs7jex25P9pzWZvhSzGHyabz0RAy/idDkxd2PE
i8qw3xxDewC80+VHJR2mCnIxf7k2NTbPU7INHE59tcMJ5Ns4yRH7QyyKHE1mmZBu
pWHADw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:14:11 2025 by rpki-client