Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B8522C8F41B11EFBBEDD342762E951A.roa
File: 1B8522C8F41B11EFBBEDD342762E951A.roa (raw, json)
Hash identifier: g+9YBJ2g1KzSEeq5egbqXEXzHl1sSh2R6E5YQibrdwo=
Subject key identifier: 17:E6:2F:E1:A3:7A:40:D5:0D:ED:1C:13:A2:B1:F8:7B:00:A8:EF:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01614F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B8522C8F41B11EFBBEDD342762E951A.roa
Signing time: Wed 26 Feb 2025 08:24:33 +0000
ROA not before: Wed 26 Feb 2025 08:24:30 +0000
ROA not after: Thu 19 Feb 2026 08:24:30 +0000
asID: 984
IP address blocks: 154.206.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90447 (0x1614f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:24:30 2025 GMT
Not After : Feb 19 08:24:30 2026 GMT
Subject: CN=67becfc1-271e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:f0:9c:c1:92:d3:55:4f:0e:a2:71:6f:65:
e1:5a:65:a4:55:22:4b:2e:3b:f1:f7:78:49:7a:15:
c2:1a:78:4b:5c:78:55:45:81:4a:68:ad:b9:54:80:
05:3c:01:16:05:f0:10:d9:41:c9:72:ae:a4:59:8d:
6d:55:c7:d2:7c:c1:aa:b1:f1:56:b0:25:67:1d:42:
d5:f6:5f:13:ae:af:6a:de:30:91:b2:3e:6c:ed:a2:
b4:13:cf:1d:30:c4:a6:cd:e6:a9:47:42:d8:b2:fc:
92:69:d0:c0:f0:a6:d6:21:60:f6:40:62:fa:af:a5:
0a:7c:76:2d:da:04:ed:51:ec:94:40:4d:99:ff:66:
b4:50:9c:44:d3:3c:8b:c0:71:cc:44:83:1f:d6:45:
fe:21:26:ce:86:fa:4c:b9:f5:34:8e:20:c7:dd:98:
60:68:a9:3b:d9:00:19:91:aa:23:89:a6:46:67:2c:
ca:81:78:88:20:87:04:e4:13:1a:e0:4e:f5:70:5b:
01:4e:b8:6d:a2:9f:2b:0b:6c:9f:4d:3e:38:d1:51:
b2:ec:ef:b2:ac:84:7f:da:4b:4d:e9:0b:15:06:84:
51:94:2c:9f:4d:c3:d5:71:9c:fe:f6:87:d4:cd:be:
37:42:9c:e0:03:66:74:55:4b:99:0b:1c:29:3a:bb:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E6:2F:E1:A3:7A:40:D5:0D:ED:1C:13:A2:B1:F8:7B:00:A8:EF:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B8522C8F41B11EFBBEDD342762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.210.0/24
Signature Algorithm: sha256WithRSAEncryption
95:02:69:79:2b:2e:60:5a:5c:fe:f6:ca:39:03:0a:3e:a1:c3:
d5:6e:83:44:19:d8:b8:5f:d7:0a:c4:b9:9d:95:8f:bf:c7:d0:
fb:23:c7:92:6e:c8:10:8a:4c:70:b8:ea:49:88:f3:26:4c:f5:
7f:2e:07:b0:b2:cf:7d:1b:81:9a:0b:b0:15:1f:8d:fd:42:b4:
93:6d:d5:eb:11:ec:72:29:88:d6:75:e4:53:5f:12:65:e9:ce:
40:89:a7:c5:a2:80:b9:32:54:d2:37:3d:86:33:1e:43:e5:7a:
8a:96:44:99:56:69:fd:6c:27:11:c5:e2:1c:9d:e4:d3:4a:7d:
de:17:2c:15:88:a0:0f:87:5b:1b:6c:aa:12:36:e9:63:43:2e:
52:03:aa:79:2a:a7:76:38:1f:5e:ee:11:61:e0:e5:ea:8f:58:
06:29:c2:ab:38:e4:40:c0:1f:34:0a:40:4f:5f:58:94:d9:1e:
91:3a:c5:a5:b9:d2:8d:01:17:4b:84:1f:87:5c:d3:b7:b2:e2:
94:4e:c4:03:43:02:64:c0:74:32:d0:d7:35:72:81:61:be:be:
73:cd:a7:15:81:1a:d7:60:cc:07:46:80:92:54:2d:a4:fa:34:
af:15:e8:74:c7:d2:7e:d8:ff:35:f1:3d:3b:07:b4:cf:f5:77:
fb:6f:4a:c6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWFPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDgyNDMwWhcNMjYwMjE5MDgyNDMwWjAYMRYw
FAYDVQQDEw02N2JlY2ZjMS0yNzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvNTwnMGS01VPDqJxb2XhWmWkVSJLLjvx93hJehXCGnhLXHhVRYFKaK25
VIAFPAEWBfAQ2UHJcq6kWY1tVcfSfMGqsfFWsCVnHULV9l8Trq9q3jCRsj5s7aK0
E88dMMSmzeapR0LYsvySadDA8KbWIWD2QGL6r6UKfHYt2gTtUeyUQE2Z/2a0UJxE
0zyLwHHMRIMf1kX+ISbOhvpMufU0jiDH3ZhgaKk72QAZkaojiaZGZyzKgXiIIIcE
5BMa4E71cFsBTrhtop8rC2yfTT440VGy7O+yrIR/2ktN6QsVBoRRlCyfTcPVcZz+
9ofUzb43QpzgA2Z0VUuZCxwpOrvaTQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBfm
L+GjekDVDe0cE6Kx+HsAqO9yMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xQjg1MjJDOEY0MUIxMUVGQkJFREQzNDI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms7SMA0GCSqGSIb3DQEB
CwUAA4IBAQCVAml5Ky5gWlz+9so5Awo+ocPVboNEGdi4X9cKxLmdlY+/x9D7I8eS
bsgQikxwuOpJiPMmTPV/Lgewss99G4GaC7AVH439QrSTbdXrEexyKYjWdeRTXxJl
6c5AiafFooC5MlTSNz2GMx5D5XqKlkSZVmn9bCcRxeIcneTTSn3eFywViKAPh1sb
bKoSNuljQy5SA6p5Kqd2OB9e7hFh4OXqj1gGKcKrOORAwB80CkBPX1iU2R6ROsWl
udKNARdLhB+HXNO3suKUTsQDQwJkwHQy0Nc1coFhvr5zzacVgRrXYMwHRoCSVC2k
+jSvFeh0x9J+2P818T07B7TP9Xf7b0rG
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:31:30 2025 by rpki-client