Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E561CCA0F2D011EFB8684573762E951A.roa
File: E561CCA0F2D011EFB8684573762E951A.roa (raw, json)
Hash identifier: ci9rI4K+DwU+W2O2WGbRWxWhEksbr3WaaxQD0JN1wAc=
Subject key identifier: 84:2A:32:D5:72:89:A7:D2:B5:89:4A:48:38:B4:C0:31:4B:D8:C1:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E561CCA0F2D011EFB8684573762E951A.roa
Signing time: Mon 24 Feb 2025 17:00:49 +0000
ROA not before: Mon 24 Feb 2025 17:00:45 +0000
ROA not after: Sat 29 Mar 2025 17:00:45 +0000
asID: 203020
IP address blocks: 154.223.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89228 (0x15c8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 17:00:45 2025 GMT
Not After : Mar 29 17:00:45 2025 GMT
Subject: CN=67bca5c1-d03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:96:a5:f1:ef:56:61:0c:db:f2:ce:12:20:
09:2a:0a:4f:14:36:d3:99:df:05:c1:a3:07:e7:e2:
04:1e:51:9a:51:a1:17:f0:e4:db:8b:db:9a:ab:7c:
42:af:40:c7:b9:e8:44:e5:c5:bb:87:27:a8:18:f3:
3c:3b:10:0d:74:20:04:fa:98:6c:17:95:56:bf:ca:
a1:a2:c4:f0:16:da:17:1d:51:19:27:82:9d:7e:b2:
a0:90:0a:2e:70:81:82:57:01:c6:46:be:8d:04:90:
d6:29:f8:a1:75:c3:b5:b2:ff:69:a8:e8:85:a5:e0:
18:1b:ae:04:4b:c9:08:0f:85:a2:88:87:ec:3e:ff:
15:c3:f2:e6:50:4a:03:a0:4b:e1:53:d2:82:25:ec:
36:d8:6c:cc:be:2a:00:09:51:6a:9e:1a:47:b5:ec:
29:5c:fc:5d:b8:5c:7d:eb:6a:42:28:4b:2a:21:b7:
25:e2:f6:82:c5:48:c3:62:ed:b3:c8:43:49:5c:4a:
fd:dd:6b:13:9f:20:93:ed:79:f2:d9:0a:af:cd:4b:
b4:2e:37:c5:cc:1e:39:80:0c:f1:5d:2e:cb:7b:e4:
cc:90:34:a5:e4:ae:81:4b:ec:13:84:01:43:32:43:
9b:69:85:6c:b7:db:4e:70:5d:45:95:65:f8:20:6f:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2A:32:D5:72:89:A7:D2:B5:89:4A:48:38:B4:C0:31:4B:D8:C1:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E561CCA0F2D011EFB8684573762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.185.0/24
Signature Algorithm: sha256WithRSAEncryption
63:3c:fa:e5:ef:ed:2a:3c:26:45:0f:6c:6b:c6:f3:55:ef:82:
99:76:ef:90:35:93:39:a2:7e:e0:2d:6c:5b:ef:5a:eb:90:f9:
02:64:82:96:fb:17:62:72:53:dc:ad:05:a9:ab:a3:07:15:71:
03:f1:cb:86:c7:2f:fa:f1:8d:78:5e:92:03:a4:37:60:27:cf:
9e:a5:84:41:1d:22:cb:3d:d3:6f:8e:42:e7:2e:3e:31:90:c7:
34:e7:11:45:49:e3:54:dc:8c:21:ca:0d:ab:f1:a3:2e:e0:56:
c4:49:2b:51:80:a4:32:7a:64:ac:db:29:35:a1:e8:f9:90:23:
40:85:76:0c:18:62:64:c7:41:51:f6:1a:fe:ef:1e:a5:b1:90:
dd:15:ba:07:af:8c:97:9d:7f:a8:5c:22:90:da:27:e6:a1:27:
f2:7d:60:69:9e:22:bc:b2:94:34:14:2c:29:d6:3a:bd:ed:5f:
c5:1e:7b:ee:93:ef:c4:b9:b2:33:8f:b3:4f:27:3b:59:10:26:
31:be:bd:64:46:b8:1e:0c:87:27:17:cc:93:c5:94:6b:a8:b5:
3e:11:4e:ab:c1:9a:c6:f6:30:5a:a0:50:7e:9a:d7:bb:10:57:
e8:8a:4f:d0:93:2a:82:32:1a:e2:70:e4:ca:cc:44:26:67:b1:
c9:2e:fb:30
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVyMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI0MTcwMDQ1WhcNMjUwMzI5MTcwMDQ1WjAYMRYw
FAYDVQQDEw02N2JjYTVjMS1kMDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArXmWpfHvVmEM2/LOEiAJKgpPFDbTmd8FwaMH5+IEHlGaUaEX8OTbi9ua
q3xCr0DHuehE5cW7hyeoGPM8OxANdCAE+phsF5VWv8qhosTwFtoXHVEZJ4KdfrKg
kAoucIGCVwHGRr6NBJDWKfihdcO1sv9pqOiFpeAYG64ES8kID4WiiIfsPv8Vw/Lm
UEoDoEvhU9KCJew22GzMvioACVFqnhpHtewpXPxduFx962pCKEsqIbcl4vaCxUjD
Yu2zyENJXEr93WsTnyCT7Xny2QqvzUu0LjfFzB45gAzxXS7Le+TMkDSl5K6BS+wT
hAFDMkObaYVst9tOcF1FlWX4IG8hQQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIQq
MtVyiafStYlKSDi0wDFL2MFNMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNTYxQ0NBMEYyRDAxMUVGQjg2ODQ1NzM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt+5MA0GCSqGSIb3DQEB
CwUAA4IBAQBjPPrl7+0qPCZFD2xrxvNV74KZdu+QNZM5on7gLWxb71rrkPkCZIKW
+xdiclPcrQWpq6MHFXED8cuGxy/68Y14XpIDpDdgJ8+epYRBHSLLPdNvjkLnLj4x
kMc05xFFSeNU3Iwhyg2r8aMu4FbESStRgKQyemSs2yk1oej5kCNAhXYMGGJkx0FR
9hr+7x6lsZDdFboHr4yXnX+oXCKQ2ifmoSfyfWBpniK8spQ0FCwp1jq97V/FHnvu
k+/EubIzj7NPJztZECYxvr1kRrgeDIcnF8yTxZRrqLU+EU6rwZrG9jBaoFB+mte7
EFfoik/QkyqCMhricOTKzEQmZ7HJLvsw
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:03:46 2025 by rpki-client