Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/109BF1D6F42311EF8EBBA27A762E951A.roa
File: 109BF1D6F42311EF8EBBA27A762E951A.roa (raw, json)
Hash identifier: RXDBzJM01EpfCc3o/JDgG30bwaZLuyVDxxifpqRwmBQ=
Subject key identifier: 3A:22:3F:4A:83:9E:BC:C0:19:5A:08:CF:79:2C:F0:BF:39:71:1E:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0161BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/109BF1D6F42311EF8EBBA27A762E951A.roa
Signing time: Wed 26 Feb 2025 09:21:31 +0000
ROA not before: Wed 26 Feb 2025 09:21:27 +0000
ROA not after: Thu 19 Feb 2026 09:21:27 +0000
asID: 328608
IP address blocks: 154.200.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90558 (0x161be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:21:27 2025 GMT
Not After : Feb 19 09:21:27 2026 GMT
Subject: CN=67bedd1b-2b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e1:50:ca:82:dc:7f:79:4b:56:21:33:5e:ff:
34:a9:29:9e:42:d7:a0:b3:1c:ce:84:94:bb:ae:dc:
d5:35:34:bb:ab:52:28:ab:a7:f3:fa:ca:1e:ae:be:
73:3e:2a:78:63:19:a9:6b:b6:b7:2c:0a:1b:46:0b:
1f:8e:2b:36:bd:fc:a9:9f:21:de:f5:12:f4:13:24:
ad:11:f8:1e:47:96:55:75:51:68:b5:cf:12:f3:8d:
ed:19:96:fd:ae:dd:8d:a1:0f:e2:27:ef:c8:a0:3e:
48:b7:1b:74:f9:6e:ca:ff:e6:e0:d3:0c:39:f9:03:
7d:ef:43:bf:34:50:81:86:92:81:e2:92:97:b8:17:
a8:58:50:e0:d7:fd:9f:4a:92:b7:67:94:c6:72:a0:
bb:fd:2a:f1:06:e0:f2:61:17:82:a3:a7:27:8d:e4:
1d:ec:8e:df:64:32:b5:1e:3e:cb:dc:92:fd:b7:02:
19:57:fe:b1:08:64:63:89:1a:b1:59:80:12:bf:1e:
9a:35:e0:0d:28:f2:c6:8b:15:a1:8d:4f:6a:b1:cd:
8f:fd:ac:8a:a4:8b:96:12:3e:8a:18:5a:16:2e:f2:
92:29:d2:6c:fd:8e:f8:c4:93:a4:85:e3:f9:ca:dc:
f0:33:44:3b:d2:be:4b:e0:4c:7d:ec:8f:9a:0f:4a:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:22:3F:4A:83:9E:BC:C0:19:5A:08:CF:79:2C:F0:BF:39:71:1E:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/109BF1D6F42311EF8EBBA27A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.225.0/24
Signature Algorithm: sha256WithRSAEncryption
56:91:7c:74:9c:be:de:04:ce:64:c2:94:94:7f:aa:e9:6e:82:
73:66:6b:ee:b3:0b:b1:2d:28:c7:9b:68:c3:93:b6:02:66:23:
a6:3a:12:b2:83:8b:7e:bd:3b:f3:76:ea:96:6e:e6:4b:77:db:
6b:50:59:64:f1:f8:21:35:34:ac:8c:c7:90:9e:d3:1f:52:48:
1e:cf:8f:2f:7d:b8:c2:01:fa:bd:b7:d7:fe:db:bb:1f:22:49:
12:90:9f:15:eb:a6:73:14:66:e7:ba:a4:88:0b:7e:11:7c:0d:
f6:88:a3:9f:22:b8:69:d3:f9:f5:f4:95:8d:57:9e:98:c5:53:
c4:ed:72:d8:66:c2:60:40:50:3f:e1:f7:40:9e:f4:9f:30:b5:
7a:05:9d:a6:2c:ac:18:b1:1e:b1:a3:81:73:4a:aa:ae:07:c8:
87:df:a9:fa:4d:9a:00:45:3d:0d:08:1b:3d:0b:23:27:f3:d8:
66:c4:a6:58:15:89:b6:8a:a0:41:18:47:bd:b1:0c:07:eb:b5:
c9:4e:ed:f9:ef:ab:5b:bc:c2:d1:04:cf:16:4a:56:35:19:a5:
7c:06:a6:bb:0e:0f:f0:7f:51:d4:10:8a:42:99:ef:8f:1b:c8:
ca:b4:5f:dd:f0:df:13:13:69:26:95:fc:e2:7b:b7:58:ed:57:
0b:a9:ed:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWG+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDkyMTI3WhcNMjYwMjE5MDkyMTI3WjAYMRYw
FAYDVQQDEw02N2JlZGQxYi0yYjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzuFQyoLcf3lLViEzXv80qSmeQtegsxzOhJS7rtzVNTS7q1Ioq6fz+soe
rr5zPip4Yxmpa7a3LAobRgsfjis2vfypnyHe9RL0EyStEfgeR5ZVdVFotc8S843t
GZb9rt2NoQ/iJ+/IoD5Itxt0+W7K/+bg0ww5+QN970O/NFCBhpKB4pKXuBeoWFDg
1/2fSpK3Z5TGcqC7/SrxBuDyYReCo6cnjeQd7I7fZDK1Hj7L3JL9twIZV/6xCGRj
iRqxWYASvx6aNeANKPLGixWhjU9qsc2P/ayKpIuWEj6KGFoWLvKSKdJs/Y74xJOk
heP5ytzwM0Q70r5L4Ex97I+aD0ouGwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDoi
P0qDnrzAGVoIz3ks8L85cR5MMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMDlCRjFENkY0MjMxMUVGOEVCQkEyN0E3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsjhMA0GCSqGSIb3DQEB
CwUAA4IBAQBWkXx0nL7eBM5kwpSUf6rpboJzZmvuswuxLSjHm2jDk7YCZiOmOhKy
g4t+vTvzduqWbuZLd9trUFlk8fghNTSsjMeQntMfUkgez48vfbjCAfq9t9f+27sf
IkkSkJ8V66ZzFGbnuqSIC34RfA32iKOfIrhp0/n19JWNV56YxVPE7XLYZsJgQFA/
4fdAnvSfMLV6BZ2mLKwYsR6xo4FzSqquB8iH36n6TZoART0NCBs9CyMn89hmxKZY
FYm2iqBBGEe9sQwH67XJTu3576tbvMLRBM8WSlY1GaV8Bqa7Dg/wf1HUEIpCme+P
G8jKtF/d8N8TE2kmlfzie7dY7VcLqe23
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:23 2025 by rpki-client