Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22E84326F65311EF926FD198762E951A.roa
File: 22E84326F65311EF926FD198762E951A.roa (raw, json)
Hash identifier: QllqH42z7L+uLWuPYalfM0dZfPKWhnv9YLW+7RZHnt4=
Subject key identifier: 27:CC:6D:FF:65:49:E1:34:78:6E:4E:AD:B0:04:00:C0:DD:12:F0:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D02
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22E84326F65311EF926FD198762E951A.roa
Signing time: Sat 01 Mar 2025 04:10:40 +0000
ROA not before: Sat 01 Mar 2025 04:10:36 +0000
ROA not after: Thu 19 Feb 2026 04:10:36 +0000
asID: 984
IP address blocks: 154.206.196.0/24 maxlen: 24
154.206.197.0/24 maxlen: 24
154.206.198.0/24 maxlen: 24
154.206.199.0/24 maxlen: 24
154.206.200.0/24 maxlen: 24
154.206.201.0/24 maxlen: 24
154.206.202.0/24 maxlen: 24
154.206.203.0/24 maxlen: 24
154.206.204.0/24 maxlen: 24
154.206.205.0/24 maxlen: 24
154.206.229.0/24 maxlen: 24
154.206.238.0/24 maxlen: 24
154.208.66.0/24 maxlen: 24
154.208.97.0/24 maxlen: 24
154.208.107.0/24 maxlen: 24
154.208.108.0/24 maxlen: 24
154.208.109.0/24 maxlen: 24
154.208.111.0/24 maxlen: 24
154.208.124.0/24 maxlen: 24
154.208.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93442 (0x16d02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 04:10:36 2025 GMT
Not After : Feb 19 04:10:36 2026 GMT
Subject: CN=67c288c0-7ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:15:7f:46:b0:cc:34:aa:14:ef:94:1e:cd:
9b:54:c4:f2:54:25:9e:cf:e5:da:fa:c4:a4:ca:32:
23:e9:e5:d0:eb:39:b5:83:4e:53:97:40:a8:79:03:
7f:f6:0a:3d:5a:19:95:f7:ab:b6:64:32:ea:38:ff:
b5:2b:e4:5d:7e:e6:06:78:86:85:7e:6e:6c:f8:84:
1c:a7:19:7b:51:89:14:87:b6:54:91:a4:61:02:2f:
dd:51:00:94:b6:ec:c4:bb:e6:70:c3:a6:a6:b0:35:
59:f5:6d:cd:38:1c:e9:54:74:d5:d5:b6:75:11:ca:
5b:3f:b6:15:ae:72:09:fc:30:7c:dc:ce:be:4c:9d:
3f:6d:a5:12:d6:1e:f5:64:9c:15:65:d2:fc:05:59:
4e:25:c6:fc:09:d0:6d:46:34:a2:f6:82:4a:15:90:
18:09:72:24:e2:bb:3f:d7:ce:6a:ea:7f:f0:d8:12:
c6:ba:3c:ec:f0:00:3a:61:69:d4:7f:e1:13:62:1e:
cf:86:90:47:1a:0d:4f:b5:45:64:d0:06:46:e2:cd:
d9:87:c8:b7:73:a2:de:43:64:79:9e:5e:e1:91:06:
60:09:b1:49:dd:8d:4e:6a:73:4b:a2:45:fe:e6:e7:
22:01:9d:0a:82:42:74:cc:a1:07:95:7d:8e:2a:f7:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CC:6D:FF:65:49:E1:34:78:6E:4E:AD:B0:04:00:C0:DD:12:F0:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22E84326F65311EF926FD198762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.196.0-154.206.205.255
154.206.229.0/24
154.206.238.0/24
154.208.66.0/24
154.208.97.0/24
154.208.107.0-154.208.109.255
154.208.111.0/24
154.208.124.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:31:69:88:5d:bf:1f:c1:eb:5b:af:2f:bd:3c:7f:e8:1e:8f:
37:14:4a:65:bc:dc:a6:95:b4:b5:02:9b:ec:e6:51:7f:1c:f6:
0d:46:6a:65:ce:24:80:16:71:17:e4:97:1d:60:e7:b1:30:bd:
ac:5c:17:9e:42:d3:fc:17:0a:08:2d:57:64:20:e3:40:a5:d6:
07:bf:a6:29:f0:b9:58:e4:2c:38:af:20:7f:66:72:ad:e6:1a:
a8:f8:ee:d1:0d:b0:5a:a7:d1:ee:f8:a5:35:83:7d:07:55:b5:
b6:41:00:c2:5e:ed:d2:3f:87:38:d9:2e:f4:f2:0d:aa:97:fb:
e7:fb:4a:f2:e7:dc:c4:f1:a5:a3:58:72:9a:07:73:34:dc:05:
28:27:ea:e8:d0:3f:3f:3a:91:fd:0c:1a:55:4c:a7:5b:27:d0:
aa:02:2d:7c:86:f4:b2:03:98:70:b5:a8:53:e6:eb:59:43:5e:
48:2f:58:c8:ca:07:02:2f:84:1f:94:19:61:16:36:6e:9a:74:
bb:57:f6:34:3b:db:16:7e:a7:62:9c:94:0c:83:3b:99:7d:52:
e5:11:71:54:2b:ea:0b:61:e4:fe:39:b4:37:4b:6d:09:7f:a6:
89:ec:65:44:08:29:d5:86:23:45:8b:92:21:a3:9e:0c:be:98:
e9:04:4e:81
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIDAW0CMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMDQxMDM2WhcNMjYwMjE5MDQxMDM2WjAYMRYw
FAYDVQQDEw02N2MyODhjMC03ZWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs3UVf0awzDSqFO+UHs2bVMTyVCWez+Xa+sSkyjIj6eXQ6zm1g05Tl0Co
eQN/9go9WhmV96u2ZDLqOP+1K+RdfuYGeIaFfm5s+IQcpxl7UYkUh7ZUkaRhAi/d
UQCUtuzEu+Zww6amsDVZ9W3NOBzpVHTV1bZ1EcpbP7YVrnIJ/DB83M6+TJ0/baUS
1h71ZJwVZdL8BVlOJcb8CdBtRjSi9oJKFZAYCXIk4rs/185q6n/w2BLGujzs8AA6
YWnUf+ETYh7PhpBHGg1PtUVk0AZG4s3Zh8i3c6LeQ2R5nl7hkQZgCbFJ3Y1OanNL
okX+5uciAZ0KgkJ0zKEHlX2OKvde/QIDAQABo4IC3zCCAtswHQYDVR0OBBYEFCfM
bf9lSeE0eG5OrbAEAMDdEvBDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMkU4NDMyNkY2NTMxMUVGOTI2RkQxOTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAMAwDBAKazsQDBAGazswDBACa
zuUDBACazu4DBACa0EIDBACa0GEwDAMEAJrQawMEAZrQbAMEAJrQbwMEAZrQfDAN
BgkqhkiG9w0BAQsFAAOCAQEApzFpiF2/H8HrW68vvTx/6B6PNxRKZbzcppW0tQKb
7OZRfxz2DUZqZc4kgBZxF+SXHWDnsTC9rFwXnkLT/BcKCC1XZCDjQKXWB7+mKfC5
WOQsOK8gf2ZyreYaqPju0Q2wWqfR7vilNYN9B1W1tkEAwl7t0j+HONku9PINqpf7
5/tK8ufcxPGlo1hymgdzNNwFKCfq6NA/PzqR/QwaVUynWyfQqgItfIb0sgOYcLWo
U+brWUNeSC9YyMoHAi+EH5QZYRY2bpp0u1f2NDvbFn6nYpyUDIM7mX1S5RFxVCvq
C2Hk/jm0N0ttCX+miexlRAgp1YYjRYuSIaOeDL6Y6QROgQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:18:05 2025 by rpki-client