Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2176709EED1111EFAE779D84762E951A.roa
File: 2176709EED1111EFAE779D84762E951A.roa (raw, json)
Hash identifier: qwxyxc53Q/V0ecTxDp/DZ5XivqKwcL/eQcbTTfLgBjc=
Subject key identifier: C5:C5:E8:C1:5F:57:DF:C2:E4:8E:32:04:AF:74:10:13:74:31:CE:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0157DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2176709EED1111EFAE779D84762E951A.roa
Signing time: Mon 17 Feb 2025 09:25:30 +0000
ROA not before: Mon 17 Feb 2025 09:25:27 +0000
ROA not after: Thu 17 Feb 2028 09:25:27 +0000
asID: 17561
IP address blocks: 154.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88028 (0x157dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 17 09:25:27 2025 GMT
Not After : Feb 17 09:25:27 2028 GMT
Subject: CN=67b3008a-ebb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1d:07:b7:e4:af:58:96:e6:8e:dd:11:9c:78:
a4:68:1d:4b:bb:ba:ef:36:88:d7:18:80:e4:af:b9:
39:0d:7c:e9:5d:15:46:91:56:2e:1a:42:95:2a:84:
00:81:e2:98:fa:f6:86:ef:ea:ce:0a:b9:2e:48:bc:
66:74:3f:ad:c4:19:bb:06:c2:a4:a8:0c:d9:15:03:
13:d0:d5:44:8b:60:7e:02:4a:2c:88:f0:59:5c:6b:
88:a3:28:b9:6e:9c:d1:4e:a6:ac:45:e8:bd:d8:54:
61:eb:a0:2d:6c:c8:81:cb:09:6d:78:7a:54:ff:9b:
73:eb:c9:d7:16:67:88:f9:9d:36:37:d6:21:95:28:
5a:67:c5:a1:9e:b7:34:39:11:77:9d:7e:e0:2f:1a:
d2:16:14:7f:8c:5f:e7:9e:64:12:c5:80:23:8e:63:
4c:ab:89:fd:7a:8e:56:6f:fe:15:ac:d6:78:ba:f1:
07:62:2c:de:c1:61:fa:e8:75:a6:e7:8b:d4:f3:8e:
c4:1f:f7:1c:67:a0:81:fe:33:c1:13:fc:69:69:30:
30:0d:20:e1:33:b9:57:9d:d7:ee:8f:96:42:d0:4e:
a6:4a:d1:ee:c8:a0:b5:f4:b0:e9:3b:41:af:a8:cd:
1e:6a:60:b6:c4:23:43:9b:7d:a1:df:89:dd:da:94:
f1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C5:E8:C1:5F:57:DF:C2:E4:8E:32:04:AF:74:10:13:74:31:CE:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2176709EED1111EFAE779D84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.87.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:b0:75:ff:60:eb:0d:4e:d0:93:f8:ca:2d:04:7a:3a:75:1b:
80:dd:7f:f9:48:0c:e0:09:5a:6c:b4:8a:b1:d4:6a:9e:b2:20:
fc:a6:fc:a2:02:c2:f4:c8:de:56:58:4d:2c:83:bf:18:4f:65:
09:a1:89:7b:16:1b:ef:3d:43:ec:e2:3a:4e:1d:d8:b7:40:d9:
dc:aa:90:9b:9c:ca:cb:b1:7e:91:ca:81:f4:b4:af:c1:d8:c7:
f4:60:c4:04:03:2f:d9:7a:ab:48:51:f9:33:7b:62:98:73:f4:
c4:47:89:b1:3d:db:16:a2:a2:cf:1d:ea:db:22:ac:31:65:6a:
c5:b4:2c:3a:d7:15:4b:05:03:7f:c8:09:0a:1e:7e:a9:2e:1f:
ec:cb:fc:33:54:51:24:66:15:0a:82:fb:73:f5:12:41:8c:87:
a9:18:1e:c9:1e:8d:bb:8d:02:1f:0a:17:f6:93:c9:dc:b8:ad:
2b:1e:db:7a:ff:63:87:68:db:ab:e6:ce:9f:07:cb:15:84:65:
e0:96:2b:c4:f3:01:f6:c3:b7:e9:97:a0:09:07:92:a7:63:c8:
96:b5:d9:8c:1a:27:f8:3c:72:83:4e:0f:8c:08:b4:42:76:69:
63:bf:50:87:0c:33:85:c4:4d:a8:44:35:8f:24:85:cd:f9:5b:
ce:25:a5:38
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIDAVfcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjE3MDkyNTI3WhcNMjgwMjE3MDkyNTI3WjAYMRYw
FAYDVQQDEw02N2IzMDA4YS1lYmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyx0Ht+SvWJbmjt0RnHikaB1Lu7rvNojXGIDkr7k5DXzpXRVGkVYuGkKV
KoQAgeKY+vaG7+rOCrkuSLxmdD+txBm7BsKkqAzZFQMT0NVEi2B+AkosiPBZXGuI
oyi5bpzRTqasRei92FRh66AtbMiBywlteHpU/5tz68nXFmeI+Z02N9YhlShaZ8Wh
nrc0ORF3nX7gLxrSFhR/jF/nnmQSxYAjjmNMq4n9eo5Wb/4VrNZ4uvEHYizewWH6
6HWm54vU847EH/ccZ6CB/jPBE/xpaTAwDSDhM7lXndfuj5ZC0E6mStHuyKC19LDp
O0GvqM0eamC2xCNDm32h34nd2pTxrQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMXF
6MFfV9/C5I4yBK90EBN0Mc7OMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMTc2NzA5RUVEMTExMUVGQUU3NzlEODQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmlcwDQYJKoZIhvcNAQEL
BQADggEBAAqwdf9g6w1O0JP4yi0Eejp1G4Ddf/lIDOAJWmy0irHUap6yIPym/KIC
wvTI3lZYTSyDvxhPZQmhiXsWG+89Q+ziOk4d2LdA2dyqkJucysuxfpHKgfS0r8HY
x/RgxAQDL9l6q0hR+TN7Yphz9MRHibE92xaios8d6tsirDFlasW0LDrXFUsFA3/I
CQoefqkuH+zL/DNUUSRmFQqC+3P1EkGMh6kYHskejbuNAh8KF/aTydy4rSse23r/
Y4do26vmzp8HyxWEZeCWK8TzAfbDt+mXoAkHkqdjyJa12YwaJ/g8coNOD4wItEJ2
aWO/UIcMM4XETahENY8khc35W84lpTg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:49 2025 by rpki-client