Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10CFD5F4DB1511EFA3D4518B762E951A.roa
File: 10CFD5F4DB1511EFA3D4518B762E951A.roa (raw, json)
Hash identifier: XED00YuSDniyDvzi65iPCY8sUY1BAocpzQuQk4c0dTQ=
Subject key identifier: B8:AD:20:03:BE:20:59:B7:3E:21:D4:5E:9A:C5:B1:0D:A2:FF:92:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01492E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10CFD5F4DB1511EFA3D4518B762E951A.roa
Signing time: Sat 25 Jan 2025 12:08:19 +0000
ROA not before: Sat 25 Jan 2025 12:08:16 +0000
ROA not after: Mon 02 Feb 2026 12:08:16 +0000
asID: 132839
IP address blocks: 154.209.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84270 (0x1492e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 12:08:16 2025 GMT
Not After : Feb 2 12:08:16 2026 GMT
Subject: CN=6794d433-fe8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:60:f2:0a:c0:94:99:3c:af:20:4c:2c:3c:90:
2a:2a:d8:a7:02:f4:2b:0b:33:84:27:84:27:51:07:
3b:ae:d5:cb:7a:ba:60:d7:03:c2:da:d2:5a:5f:bd:
7b:12:b6:67:b8:38:46:ff:90:27:7b:f0:65:6d:02:
59:41:4b:a9:78:06:99:3c:64:2c:a7:33:69:bd:38:
ad:fd:36:ef:de:ae:1b:4b:5b:d2:b8:03:88:2b:10:
43:8a:d1:22:1b:fb:c0:ab:15:45:2a:c6:12:ad:b0:
16:4e:e3:19:53:d0:66:4a:a1:d8:51:44:86:a9:72:
42:ed:4d:bf:b4:84:a2:0c:1e:ce:65:44:2b:91:84:
78:e2:90:8a:21:c8:73:9d:06:84:64:0f:11:80:dc:
62:78:6c:94:fa:a4:7c:5b:19:37:7e:e7:9d:17:f6:
5e:e3:63:c8:bf:ea:26:47:44:b6:6c:09:8d:f7:36:
d4:7c:e0:c1:83:46:28:17:6e:6b:59:aa:9d:54:9a:
26:5f:14:5b:66:0a:e1:e1:3b:d8:a0:f7:9a:3b:84:
4a:5f:bf:8c:36:7b:5d:89:78:e9:30:87:14:81:74:
40:ea:fb:ae:53:94:96:75:d2:30:b3:66:9a:ac:81:
2e:48:79:c8:4e:95:9d:f7:52:52:10:56:50:38:d6:
1c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AD:20:03:BE:20:59:B7:3E:21:D4:5E:9A:C5:B1:0D:A2:FF:92:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10CFD5F4DB1511EFA3D4518B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.32.0/19
Signature Algorithm: sha256WithRSAEncryption
5d:8d:88:9f:f6:41:71:34:77:4f:86:80:64:d6:86:91:4e:01:
8a:c8:a0:a5:d0:8c:32:67:11:fa:cb:6b:32:44:77:25:dc:bc:
c4:4c:16:d4:2b:cf:f3:21:30:52:27:21:71:09:12:bb:c7:3c:
24:08:72:17:3d:95:71:b7:e5:b0:9a:5c:a6:81:64:d9:aa:a8:
50:2f:c4:fb:c5:d5:bc:8b:2c:4c:6f:1e:7b:cb:38:fe:d6:f6:
f8:74:81:38:6b:1b:7c:94:c6:08:84:2d:3a:2c:26:8f:0c:c8:
a0:b3:7f:d2:8e:91:d5:be:f7:58:14:66:47:d9:a5:fd:dd:24:
33:ea:54:cf:6a:2e:a5:55:69:2d:ac:36:df:4e:8d:e8:94:60:
08:6d:10:3c:78:98:ab:2b:50:62:31:e9:20:bc:e9:b8:c2:73:
dc:d8:36:4c:30:fe:35:f4:80:c4:6f:e7:ab:dc:c2:19:c1:fd:
de:d1:37:00:84:ab:18:fd:70:87:ab:36:2a:a5:0a:1c:e1:18:
0d:f9:1d:f3:87:dd:8f:02:e9:46:09:ed:76:5c:4c:5c:7d:52:
98:6b:90:73:15:42:7b:3c:a0:e5:1b:6c:e6:9e:f5:a4:5e:39:
8f:ab:2a:3d:88:67:4d:5d:0d:b9:ad:6e:74:3c:92:b8:26:e3:
f6:0e:ec:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUkuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI1MTIwODE2WhcNMjYwMjAyMTIwODE2WjAYMRYw
FAYDVQQDEw02Nzk0ZDQzMy1mZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5mDyCsCUmTyvIEwsPJAqKtinAvQrCzOEJ4QnUQc7rtXLerpg1wPC2tJa
X717ErZnuDhG/5Ane/BlbQJZQUupeAaZPGQspzNpvTit/Tbv3q4bS1vSuAOIKxBD
itEiG/vAqxVFKsYSrbAWTuMZU9BmSqHYUUSGqXJC7U2/tISiDB7OZUQrkYR44pCK
IchznQaEZA8RgNxieGyU+qR8Wxk3fuedF/Ze42PIv+omR0S2bAmN9zbUfODBg0Yo
F25rWaqdVJomXxRbZgrh4TvYoPeaO4RKX7+MNntdiXjpMIcUgXRA6vuuU5SWddIw
s2aarIEuSHnITpWd91JSEFZQONYcPwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLit
IAO+IFm3PiHUXprFsQ2i/5KsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMENGRDVGNERCMTUxMUVGQTNENDUxOEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmtEgMA0GCSqGSIb3DQEB
CwUAA4IBAQBdjYif9kFxNHdPhoBk1oaRTgGKyKCl0IwyZxH6y2syRHcl3LzETBbU
K8/zITBSJyFxCRK7xzwkCHIXPZVxt+WwmlymgWTZqqhQL8T7xdW8iyxMbx57yzj+
1vb4dIE4axt8lMYIhC06LCaPDMigs3/SjpHVvvdYFGZH2aX93SQz6lTPai6lVWkt
rDbfTo3olGAIbRA8eJirK1BiMekgvOm4wnPc2DZMMP419IDEb+er3MIZwf3e0TcA
hKsY/XCHqzYqpQoc4RgN+R3zh92PAulGCe12XExcfVKYa5BzFUJ7PKDlG2zmnvWk
XjmPqyo9iGdNXQ25rW50PJK4JuP2Duz8
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:31 2025 by rpki-client