Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B66AD50F44511EF8BAE5669762E951A.roa
File: 1B66AD50F44511EF8BAE5669762E951A.roa (raw, json)
Hash identifier: QI3JzJxXdLAdoKviUSnJh17uDwqkcnXx3k23Aca/CF4=
Subject key identifier: BE:90:A8:50:55:3D:1A:4F:FD:6F:C1:9C:2E:F1:5C:30:B7:C9:B0:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B66AD50F44511EF8BAE5669762E951A.roa
Signing time: Wed 26 Feb 2025 13:25:12 +0000
ROA not before: Wed 26 Feb 2025 13:25:09 +0000
ROA not after: Thu 19 Feb 2026 13:25:09 +0000
asID: 984
IP address blocks: 154.208.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91067 (0x163bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:25:09 2025 GMT
Not After : Feb 19 13:25:09 2026 GMT
Subject: CN=67bf1638-e677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:29:a5:ae:64:70:a1:f0:c3:85:94:7e:7a:
d3:37:f8:ae:d1:10:a9:6c:a5:c6:9e:5c:d6:3e:3a:
1a:0d:3f:38:98:62:1a:da:3b:6f:f4:14:45:6b:72:
a9:97:4a:87:a1:d7:27:85:4f:20:c1:3e:5a:24:ed:
2f:9d:ea:ee:a5:51:ec:c6:d4:16:65:c5:09:c2:38:
fa:84:fa:9f:f1:c3:32:a7:28:0e:36:a3:ba:bf:91:
81:57:dc:9d:a8:ed:f8:41:2e:ea:d3:99:64:48:f7:
d6:18:a9:97:69:24:a8:ff:09:a3:14:ee:2b:00:fa:
da:0b:24:82:80:81:88:45:d5:94:c7:9e:9f:bc:62:
fa:8a:a6:ce:fa:38:22:49:63:1f:a2:60:c1:52:8c:
e4:fb:5c:f1:2c:44:0b:22:f5:3e:15:12:be:3b:08:
07:a8:8d:2c:16:f3:46:ea:0a:2c:b5:6c:0b:cd:7d:
72:82:69:89:4c:1f:80:c2:47:11:9c:ce:9b:eb:aa:
0d:4c:42:85:ce:18:3c:9b:55:9e:9e:10:a4:ee:9a:
a9:be:a7:2b:ed:6d:d1:f1:39:1f:74:5e:c2:77:c4:
b8:db:c4:7b:a8:22:1f:4b:27:54:ee:e7:fd:12:ad:
7e:a1:37:d5:ab:c4:66:7e:90:a5:9f:36:3e:fd:6d:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:90:A8:50:55:3D:1A:4F:FD:6F:C1:9C:2E:F1:5C:30:B7:C9:B0:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B66AD50F44511EF8BAE5669762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.190.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:55:aa:24:35:a8:0e:f5:b6:aa:ad:d4:d0:a4:99:09:d0:89:
13:ed:34:b9:d0:4f:b1:ee:a4:56:1c:83:42:13:16:2b:37:a6:
6f:e0:00:40:f9:79:74:b2:92:3a:e7:59:66:ba:24:c3:bf:65:
3d:53:5b:80:e5:07:7f:7a:37:18:e4:ae:48:16:5c:9d:c3:34:
7b:d3:1a:2a:38:fc:50:0b:2e:7e:cb:00:e5:ae:a2:38:7b:3d:
e9:ff:d1:be:ca:cc:db:7c:80:3f:fe:1f:35:15:50:c4:c7:e6:
f4:8d:d1:6a:21:36:48:d4:8f:2b:a4:bd:bb:d0:89:7e:c5:d4:
10:5f:af:31:5e:46:d1:58:a9:06:98:e0:78:15:e2:d0:3e:4c:
c5:2b:21:40:f8:d1:c9:b3:c1:29:1b:b5:ad:1c:b9:71:d3:b0:
e2:f2:75:4a:7b:d2:38:40:25:20:67:3c:fe:18:ec:08:e5:8b:
ea:0c:05:dc:ae:e8:cd:9b:af:1c:ea:55:94:75:de:ff:1c:dd:
ad:5d:96:85:6c:32:11:17:8e:76:88:f2:64:a2:bd:7b:da:74:
13:c4:8f:79:c2:78:3f:d2:34:8e:45:71:55:14:9a:64:4a:e8:
0e:c5:87:b3:f8:ed:ff:e5:ab:3d:2e:dc:77:f0:2f:7f:19:da:
b7:48:bf:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWO7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTMyNTA5WhcNMjYwMjE5MTMyNTA5WjAYMRYw
FAYDVQQDEw02N2JmMTYzOC1lNjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsv0ppa5kcKHww4WUfnrTN/iu0RCpbKXGnlzWPjoaDT84mGIa2jtv9BRF
a3Kpl0qHodcnhU8gwT5aJO0vnerupVHsxtQWZcUJwjj6hPqf8cMypygONqO6v5GB
V9ydqO34QS7q05lkSPfWGKmXaSSo/wmjFO4rAPraCySCgIGIRdWUx56fvGL6iqbO
+jgiSWMfomDBUozk+1zxLEQLIvU+FRK+OwgHqI0sFvNG6gostWwLzX1ygmmJTB+A
wkcRnM6b66oNTEKFzhg8m1WenhCk7pqpvqcr7W3R8TkfdF7Cd8S428R7qCIfSydU
7uf9Eq1+oTfVq8RmfpClnzY+/W37oQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL6Q
qFBVPRpP/W/BnC7xXDC3ybDCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xQjY2QUQ1MEY0NDUxMUVGOEJBRTU2Njk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtC+MA0GCSqGSIb3DQEB
CwUAA4IBAQBsVaokNagO9baqrdTQpJkJ0IkT7TS50E+x7qRWHINCExYrN6Zv4ABA
+Xl0spI651lmuiTDv2U9U1uA5Qd/ejcY5K5IFlydwzR70xoqOPxQCy5+ywDlrqI4
ez3p/9G+yszbfIA//h81FVDEx+b0jdFqITZI1I8rpL270Il+xdQQX68xXkbRWKkG
mOB4FeLQPkzFKyFA+NHJs8EpG7WtHLlx07Di8nVKe9I4QCUgZzz+GOwI5YvqDAXc
rujNm68c6lWUdd7/HN2tXZaFbDIRF452iPJkor172nQTxI95wng/0jSORXFVFJpk
SugOxYez+O3/5as9Ltx38C9/Gdq3SL+z
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:43:21 2025 by rpki-client