Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01429E18F42511EF994D2987762E951A.roa
File: 01429E18F42511EF994D2987762E951A.roa (raw, json)
Hash identifier: 41o/E5pV9ib8jjO995ArqUpl0z+/1nQraIumnuZDDbo=
Subject key identifier: 95:DB:B9:F6:71:17:78:43:2D:96:6C:4A:C8:FE:63:C9:F2:09:8C:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0161DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01429E18F42511EF994D2987762E951A.roa
Signing time: Wed 26 Feb 2025 09:35:24 +0000
ROA not before: Wed 26 Feb 2025 09:35:21 +0000
ROA not after: Thu 19 Feb 2026 09:35:21 +0000
asID: 328608
IP address blocks: 154.200.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90591 (0x161df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:35:21 2025 GMT
Not After : Feb 19 09:35:21 2026 GMT
Subject: CN=67bee05c-4465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:81:b1:01:80:87:df:eb:09:16:38:54:1e:
4d:67:b6:1c:c8:a6:53:9f:8a:6a:84:40:46:66:d6:
bb:ae:5a:7b:28:f5:d4:8e:10:e9:4f:dc:40:b5:ec:
b9:96:a5:f1:fb:22:a5:fe:6f:05:a2:b9:78:aa:da:
d5:90:87:b5:19:61:15:9c:65:50:f3:d7:a7:53:04:
c0:85:9c:c8:41:2e:f5:1d:b5:b0:3d:47:66:ba:c1:
69:20:7b:6a:f3:57:81:2a:f2:7e:a9:c0:48:28:09:
d5:f1:30:3a:28:8e:a0:a8:02:6d:53:bb:61:20:8e:
cc:e2:89:4f:bc:2a:5f:d6:7a:f7:cc:a7:9f:e1:ba:
81:6c:8e:70:bf:4b:fc:00:a3:cf:1a:c9:47:0b:b3:
d4:f2:58:83:e0:2e:d9:3d:d1:e2:0b:44:c1:9d:15:
d7:bc:cf:e5:97:3c:cb:3e:19:fd:a3:eb:b4:b2:d0:
eb:2c:33:88:c0:06:d4:12:5e:01:2c:08:02:0a:7b:
63:81:1e:a8:98:82:2e:57:db:77:4a:01:f0:cf:fb:
68:9c:d2:ac:73:3f:c2:72:83:40:0c:31:03:72:7e:
7c:e8:6f:c3:e5:bd:d2:d9:b7:f8:61:14:22:01:8f:
54:42:f4:73:ea:35:d7:f2:64:1a:11:48:e5:5b:8e:
28:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DB:B9:F6:71:17:78:43:2D:96:6C:4A:C8:FE:63:C9:F2:09:8C:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01429E18F42511EF994D2987762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.232.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ec:ab:39:77:23:5b:de:c7:5c:db:49:5a:d2:30:f7:1d:cd:
b5:b6:89:e4:f4:08:5c:a0:ba:08:fb:8d:29:ba:62:5a:d9:e1:
fe:32:b5:88:f7:87:2a:ef:40:d2:7e:bd:9a:b1:71:cd:9d:8d:
91:c4:82:02:36:03:0c:1c:d3:74:f5:07:fd:81:53:35:fb:41:
7f:4d:ad:1b:23:58:b1:29:f4:fe:0b:4e:85:fa:87:fb:31:c5:
58:77:76:63:6e:52:13:0e:5c:42:3a:a3:97:01:7e:2a:e1:8e:
18:c1:fc:59:61:b7:f9:a4:da:2c:36:ed:58:d4:5d:1e:10:3a:
43:e6:19:7a:37:ff:14:36:0e:c7:b6:1c:82:d8:a0:d8:51:fb:
c7:69:73:1f:69:e4:62:82:d8:02:8a:0f:d6:eb:91:9c:6a:77:
4c:3a:c7:06:7d:09:cf:9b:fd:4b:bd:08:f0:59:d0:11:84:ab:
96:2b:36:64:cb:94:59:49:84:a3:cf:3c:83:b3:6d:b7:29:fb:
75:57:b7:73:46:26:ce:c6:5b:d0:7b:72:cd:6b:42:83:9a:ee:
9f:55:cf:ba:a1:89:e3:40:c5:63:89:4b:62:46:3f:0e:39:1f:
f6:10:20:d2:bd:ce:83:3f:50:78:71:e7:c6:9c:a4:77:31:70:
44:07:00:e6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWHfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDkzNTIxWhcNMjYwMjE5MDkzNTIxWjAYMRYw
FAYDVQQDEw02N2JlZTA1Yy00NDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzGWBsQGAh9/rCRY4VB5NZ7YcyKZTn4pqhEBGZta7rlp7KPXUjhDpT9xA
tey5lqXx+yKl/m8Forl4qtrVkIe1GWEVnGVQ89enUwTAhZzIQS71HbWwPUdmusFp
IHtq81eBKvJ+qcBIKAnV8TA6KI6gqAJtU7thII7M4olPvCpf1nr3zKef4bqBbI5w
v0v8AKPPGslHC7PU8liD4C7ZPdHiC0TBnRXXvM/llzzLPhn9o+u0stDrLDOIwAbU
El4BLAgCCntjgR6omIIuV9t3SgHwz/tonNKscz/CcoNADDEDcn586G/D5b3S2bf4
YRQiAY9UQvRz6jXX8mQaEUjlW44ouwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJXb
ufZxF3hDLZZsSsj+Y8nyCYzfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMTQyOUUxOEY0MjUxMUVGOTk0RDI5ODc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsjoMA0GCSqGSIb3DQEB
CwUAA4IBAQAu7Ks5dyNb3sdc20la0jD3Hc21tonk9AhcoLoI+40pumJa2eH+MrWI
94cq70DSfr2asXHNnY2RxIICNgMMHNN09Qf9gVM1+0F/Ta0bI1ixKfT+C06F+of7
McVYd3ZjblITDlxCOqOXAX4q4Y4YwfxZYbf5pNosNu1Y1F0eEDpD5hl6N/8UNg7H
thyC2KDYUfvHaXMfaeRigtgCig/W65GcandMOscGfQnPm/1LvQjwWdARhKuWKzZk
y5RZSYSjzzyDs223Kft1V7dzRibOxlvQe3LNa0KDmu6fVc+6oYnjQMVjiUtiRj8O
OR/2ECDSvc6DP1B4cefGnKR3MXBEBwDm
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:50 2025 by rpki-client