Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEE4CF2AE23F11EF9EE49E5A762E951A.roa
File: FEE4CF2AE23F11EF9EE49E5A762E951A.roa (raw, json)
Hash identifier: wD3AW7Ezh7AlKVksa6razvU1CG99Fqi+ThAU81qxPcw=
Subject key identifier: 07:7E:1F:A0:DF:E2:B0:14:27:EF:F6:3F:00:D5:3E:8E:82:56:6B:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015029
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEE4CF2AE23F11EF9EE49E5A762E951A.roa
Signing time: Mon 03 Feb 2025 15:03:16 +0000
ROA not before: Mon 03 Feb 2025 15:03:12 +0000
ROA not after: Wed 30 Apr 2025 15:03:12 +0000
asID: 150008
IP address blocks: 154.210.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86057 (0x15029)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 15:03:12 2025 GMT
Not After : Apr 30 15:03:12 2025 GMT
Subject: CN=67a0dab4-c456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4d:93:b7:36:23:15:ce:d9:95:15:ad:38:62:
16:2b:9c:0a:31:1f:d6:79:cc:bb:d4:3b:8e:0b:10:
92:80:53:37:eb:8e:a1:b1:0d:45:ff:84:2f:a7:9d:
31:7f:82:90:92:63:44:86:04:26:f4:00:97:bf:13:
bb:33:b2:d0:d2:95:94:79:53:6b:1c:d7:8f:70:7d:
d3:65:03:eb:a6:1e:b3:dc:5a:54:33:b8:50:3f:08:
fd:b5:0b:76:76:f5:85:34:73:10:7a:1b:11:2e:8f:
a9:ab:63:84:41:2c:9f:6b:43:58:f2:68:0e:af:92:
18:04:0c:25:c9:cd:a5:05:25:29:ca:04:5c:56:b9:
33:de:d1:25:8a:30:e0:b1:d1:ca:92:16:44:93:9c:
75:c4:7a:e8:f2:a2:2f:48:b6:27:d5:35:46:41:82:
fc:c8:7b:27:2e:aa:f7:ac:c4:c7:01:c2:06:7b:ae:
1d:97:5e:7e:e3:69:01:3e:99:0d:19:71:f0:9f:8e:
60:51:85:ed:fd:10:0a:f5:29:14:43:bb:9c:37:49:
3b:2d:ef:02:96:78:e9:0a:52:ba:39:0e:08:ed:b7:
b9:d6:0d:c7:f3:d2:74:a3:88:36:6c:d3:2a:96:08:
04:13:ff:fc:33:ad:32:88:20:23:36:b7:76:f9:7d:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7E:1F:A0:DF:E2:B0:14:27:EF:F6:3F:00:D5:3E:8E:82:56:6B:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEE4CF2AE23F11EF9EE49E5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.233.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:0e:37:d1:39:07:29:82:52:f7:f6:1e:a6:81:c2:42:46:47:
c3:7f:c0:e3:69:9c:59:eb:21:5e:2a:58:27:e2:6a:45:e0:03:
9a:93:83:f6:d4:cf:7d:83:e0:e0:f4:87:1e:c7:b7:aa:2b:28:
6e:ae:3b:3c:53:59:b5:e1:6e:e4:93:9a:3e:e3:4c:41:a9:76:
f7:e5:8c:74:d3:45:6a:f6:e9:42:22:fc:42:1d:8e:71:91:97:
91:f6:9e:ed:00:67:21:dc:70:f4:e4:c8:b7:64:6e:48:d7:a4:
9f:49:71:1d:78:59:e0:bc:69:0d:b4:ee:18:07:28:96:38:01:
c0:85:2e:d1:a8:0d:6f:15:12:90:0d:61:5f:4a:1d:11:a5:7f:
19:3b:0c:7f:be:b4:be:28:1d:3f:4a:88:fc:86:61:d9:36:99:
be:12:d7:75:e6:4e:91:6b:ac:8d:fb:49:e3:a2:bc:89:d2:3f:
bb:34:69:f6:b2:2a:b5:d9:21:12:08:51:34:30:03:86:13:f9:
05:1a:c3:ae:15:65:9f:8a:5b:8f:49:32:d7:f3:79:18:3f:82:
68:eb:34:c8:63:b6:50:87:03:35:ea:c8:51:6a:fc:72:36:a8:
16:90:d5:c7:11:30:e6:04:9c:9d:2c:68:1e:ba:05:b6:42:ae:
58:13:7d:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVApMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjAzMTUwMzEyWhcNMjUwNDMwMTUwMzEyWjAYMRYw
FAYDVQQDEw02N2EwZGFiNC1jNDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz02TtzYjFc7ZlRWtOGIWK5wKMR/Wecy71DuOCxCSgFM3646hsQ1F/4Qv
p50xf4KQkmNEhgQm9ACXvxO7M7LQ0pWUeVNrHNePcH3TZQPrph6z3FpUM7hQPwj9
tQt2dvWFNHMQehsRLo+pq2OEQSyfa0NY8mgOr5IYBAwlyc2lBSUpygRcVrkz3tEl
ijDgsdHKkhZEk5x1xHro8qIvSLYn1TVGQYL8yHsnLqr3rMTHAcIGe64dl15+42kB
PpkNGXHwn45gUYXt/RAK9SkUQ7ucN0k7Le8ClnjpClK6OQ4I7be51g3H89J0o4g2
bNMqlggEE//8M60yiCAjNrd2+X0xZQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAd+
H6Df4rAUJ+/2PwDVPo6CVmtNMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRUU0Q0YyQUUyM0YxMUVGOUVFNDlFNUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtLpMA0GCSqGSIb3DQEB
CwUAA4IBAQDLDjfROQcpglL39h6mgcJCRkfDf8DjaZxZ6yFeKlgn4mpF4AOak4P2
1M99g+Dg9Icex7eqKyhurjs8U1m14W7kk5o+40xBqXb35Yx000Vq9ulCIvxCHY5x
kZeR9p7tAGch3HD05Mi3ZG5I16SfSXEdeFngvGkNtO4YByiWOAHAhS7RqA1vFRKQ
DWFfSh0RpX8ZOwx/vrS+KB0/Soj8hmHZNpm+Etd15k6Ra6yN+0njoryJ0j+7NGn2
siq12SESCFE0MAOGE/kFGsOuFWWfiluPSTLX83kYP4Jo6zTIY7ZQhwM16shRavxy
NqgWkNXHETDmBJydLGgeugW2Qq5YE301
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:39 2025 by rpki-client