Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05823CB2E9E511EFBE688A64762E951A.roa
File: 05823CB2E9E511EFBE688A64762E951A.roa (raw, json)
Hash identifier: Huxc7RwzN8GqEiBVJumjhR2wnLuU1ZmN8Hnh7SKNEnI=
Subject key identifier: BC:67:89:4E:F1:F9:AF:2D:0E:B8:BB:74:47:FA:6D:E7:76:AE:0B:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0156BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05823CB2E9E511EFBE688A64762E951A.roa
Signing time: Thu 13 Feb 2025 08:32:12 +0000
ROA not before: Thu 13 Feb 2025 08:32:08 +0000
ROA not after: Tue 17 Feb 2026 08:32:08 +0000
asID: 197730
IP address blocks: 154.201.124.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87740 (0x156bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 13 08:32:08 2025 GMT
Not After : Feb 17 08:32:08 2026 GMT
Subject: CN=67adae0c-57fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:d9:70:8f:ae:63:fb:3d:be:dd:bd:38:56:
62:c6:6b:40:f6:60:3e:e8:22:e4:24:95:4e:0b:33:
05:7f:eb:05:de:ab:c3:bf:42:9a:9d:c4:d7:6e:c0:
f9:ef:5f:30:74:18:b5:64:55:60:55:b0:8e:3e:0a:
32:cd:04:d8:0e:b6:ff:d8:b6:83:a5:4d:25:43:f8:
a1:33:e0:4b:70:32:2b:ad:08:7b:b6:f3:9f:22:a5:
fb:e3:98:6a:0d:25:6f:8c:a2:34:c1:22:e4:74:9d:
90:8c:94:1a:de:ba:a5:95:5f:75:d6:67:7c:f5:97:
43:41:42:0f:ab:ea:cd:54:26:4f:fc:bb:f9:1c:74:
c2:2e:d8:81:85:4f:fd:5a:c5:89:1a:00:30:e6:6c:
b8:21:fa:68:34:db:b7:22:a6:84:9c:f3:ad:b6:3a:
fc:12:7a:7b:30:56:21:75:a4:48:5a:39:53:7c:91:
51:86:b8:4a:a2:58:c0:1e:3a:15:58:9d:e1:7f:f8:
70:48:68:96:6f:2b:7f:19:53:24:bc:86:80:62:20:
da:ea:50:14:08:27:52:61:4e:a5:dd:e6:7f:b3:c6:
61:ce:53:60:f3:23:4e:e1:5d:c7:d9:d3:26:64:ee:
1f:a0:1e:95:d1:20:b1:b5:f5:0d:aa:07:31:f8:31:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:67:89:4E:F1:F9:AF:2D:0E:B8:BB:74:47:FA:6D:E7:76:AE:0B:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05823CB2E9E511EFBE688A64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.124.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:a4:3a:06:de:24:6a:03:9c:82:5d:4a:5c:35:32:bf:6d:05:
d3:c7:e6:b9:d8:2a:05:b5:9b:5a:c7:12:d6:d5:97:e0:ca:de:
a2:cf:58:b9:88:d6:26:74:ce:e6:29:ae:57:d4:73:1f:03:c5:
15:03:a9:fb:cb:7b:fe:c0:32:09:e7:7c:5c:8a:c4:f7:ea:52:
14:19:ba:65:49:16:8c:ff:1d:8c:33:a7:a0:ec:fc:02:ac:3f:
0f:da:ff:35:bf:a8:e7:55:99:be:24:b9:f7:1c:2b:3c:79:c9:
eb:c5:c4:5a:af:2a:1f:c7:99:b2:99:f9:8c:20:35:46:e5:44:
38:52:ea:39:89:43:72:b3:b6:49:8f:d3:15:d0:80:41:85:f6:
46:ef:cf:51:73:cc:0a:d1:c0:0e:91:1a:1e:cc:8e:fc:b6:03:
ef:7f:4f:ca:d2:3c:bf:c3:8c:86:de:e1:bc:67:a8:f3:fe:17:
b9:8f:75:ca:53:ad:9a:e0:d6:ec:5c:e8:46:e3:7d:59:44:83:
9f:76:3a:8d:d8:53:d8:4c:b8:36:28:e6:bc:52:c7:bd:3c:1b:
58:8e:93:df:d5:d2:ed:43:b4:3b:55:01:34:6c:4e:b3:ae:d9:
2a:b8:b2:d4:11:d4:42:fa:c2:31:b6:47:c2:59:32:b6:58:c5:
9f:c7:fa:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVa8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjEzMDgzMjA4WhcNMjYwMjE3MDgzMjA4WjAYMRYw
FAYDVQQDEw02N2FkYWUwYy01N2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvjvZcI+uY/s9vt29OFZixmtA9mA+6CLkJJVOCzMFf+sF3qvDv0KancTX
bsD5718wdBi1ZFVgVbCOPgoyzQTYDrb/2LaDpU0lQ/ihM+BLcDIrrQh7tvOfIqX7
45hqDSVvjKI0wSLkdJ2QjJQa3rqllV911md89ZdDQUIPq+rNVCZP/Lv5HHTCLtiB
hU/9WsWJGgAw5my4IfpoNNu3IqaEnPOttjr8Enp7MFYhdaRIWjlTfJFRhrhKoljA
HjoVWJ3hf/hwSGiWbyt/GVMkvIaAYiDa6lAUCCdSYU6l3eZ/s8ZhzlNg8yNO4V3H
2dMmZO4foB6V0SCxtfUNqgcx+DGWDwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLxn
iU7x+a8tDri7dEf6bed2rguMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNTgyM0NCMkU5RTUxMUVGQkU2ODhBNjQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsl8MA0GCSqGSIb3DQEB
CwUAA4IBAQCfpDoG3iRqA5yCXUpcNTK/bQXTx+a52CoFtZtaxxLW1Zfgyt6iz1i5
iNYmdM7mKa5X1HMfA8UVA6n7y3v+wDIJ53xcisT36lIUGbplSRaM/x2MM6eg7PwC
rD8P2v81v6jnVZm+JLn3HCs8ecnrxcRaryofx5mymfmMIDVG5UQ4Uuo5iUNys7ZJ
j9MV0IBBhfZG789Rc8wK0cAOkRoezI78tgPvf0/K0jy/w4yG3uG8Z6jz/he5j3XK
U62a4NbsXOhG431ZRIOfdjqN2FPYTLg2KOa8Use9PBtYjpPf1dLtQ7Q7VQE0bE6z
rtkquLLUEdRC+sIxtkfCWTK2WMWfx/o5
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:59 2025 by rpki-client