Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/262DC9C0F3E211EF85E0B5B0762E951A.roa
File: 262DC9C0F3E211EF85E0B5B0762E951A.roa (raw, json)
Hash identifier: 6vMn+ZT1tZ0hTk55cr0sUDw93Pr9IOXjMfvOveIHQvc=
Subject key identifier: 69:5D:CE:77:1F:9F:EE:82:F8:AC:18:E1:B3:A6:EA:2F:BB:1D:63:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016062
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/262DC9C0F3E211EF85E0B5B0762E951A.roa
Signing time: Wed 26 Feb 2025 01:36:50 +0000
ROA not before: Wed 26 Feb 2025 01:36:46 +0000
ROA not after: Thu 19 Feb 2026 01:36:46 +0000
asID: 984
IP address blocks: 154.92.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90210 (0x16062)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 01:36:46 2025 GMT
Not After : Feb 19 01:36:46 2026 GMT
Subject: CN=67be7032-7a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:54:cb:19:e0:ad:6d:ce:e9:70:31:53:69:
16:56:7d:bd:cb:06:8f:bb:ad:99:0b:f9:a0:8e:d6:
9f:bd:fa:ed:5b:c5:68:49:70:31:39:0b:6b:34:ac:
72:4e:9b:00:32:f9:41:1c:0c:11:f0:4f:55:af:7c:
a7:55:7e:d5:6d:2a:ec:34:26:17:54:86:48:b4:4b:
18:42:80:ec:a1:49:9e:e3:1f:ac:37:07:e2:10:d6:
98:c5:f5:56:81:67:4e:06:98:28:8c:6c:a4:75:43:
1b:cb:54:dc:9c:5d:23:b2:c3:fa:d8:b2:51:4f:ea:
f1:fa:ef:d2:2e:72:0b:3c:f0:fe:d5:2a:57:f0:3d:
fb:39:16:f9:33:42:9d:57:d7:cb:6c:0a:1f:2a:1c:
6b:d4:1b:e0:76:0f:78:17:a5:71:2d:cc:aa:89:8a:
77:9f:19:b1:8f:2a:16:54:84:8b:38:a7:dd:1b:fc:
dc:2a:7a:de:f7:ae:07:58:84:9b:49:9c:6f:20:c1:
b4:25:65:74:8a:09:50:ba:52:e9:41:69:4f:7c:9d:
c1:88:17:52:08:fa:b5:1b:ea:e8:f4:9f:46:19:ef:
24:88:bd:30:02:60:af:91:e1:37:88:71:8d:cb:92:
76:80:dc:a4:31:11:e8:84:0f:6d:d0:9e:87:38:92:
55:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5D:CE:77:1F:9F:EE:82:F8:AC:18:E1:B3:A6:EA:2F:BB:1D:63:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/262DC9C0F3E211EF85E0B5B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.238.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:bb:bd:37:5c:f6:8b:b4:4c:22:87:7c:a6:c4:07:e6:64:59:
72:56:52:e4:a6:2b:18:ca:ba:bf:20:ba:89:92:39:1f:26:f2:
fb:73:59:26:09:ab:4f:45:16:7a:1f:5a:8c:3b:3b:f6:a2:33:
43:52:1c:b2:74:0f:26:ee:0f:6e:47:04:60:54:ea:06:fe:dd:
bf:70:8b:18:a7:20:0d:2f:b5:f4:7e:b6:2e:bc:f6:f5:88:57:
cf:39:81:37:eb:50:e1:10:9c:95:ce:1d:0e:51:49:af:dc:99:
30:62:b3:ad:bf:8d:f7:e3:d5:0b:be:76:45:1d:64:ac:8c:a6:
41:d9:ba:92:a6:97:dd:67:e2:9b:37:6c:92:4b:03:bc:d7:36:
f1:25:7b:b6:15:78:88:05:45:46:01:24:de:1f:3d:3e:d6:b5:
7a:61:d9:c6:1d:3a:1a:8f:ef:45:34:0d:b4:e1:a2:c4:eb:6e:
c6:6f:f4:09:cb:3d:75:98:17:c5:f6:79:d6:5a:e0:d5:44:25:
79:b5:f4:fe:87:16:b3:49:59:f7:dc:65:61:66:f4:62:7c:a5:
67:a4:f4:f0:ba:04:ca:94:38:90:43:14:49:fd:e0:ab:c3:8f:
cd:80:98:85:06:db:4c:b1:f0:98:50:ab:7c:82:b6:a6:ac:58:
27:4e:92:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWBiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDEzNjQ2WhcNMjYwMjE5MDEzNjQ2WjAYMRYw
FAYDVQQDEw02N2JlNzAzMi03YTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoQhUyxngrW3O6XAxU2kWVn29ywaPu62ZC/mgjtafvfrtW8VoSXAxOQtr
NKxyTpsAMvlBHAwR8E9Vr3ynVX7VbSrsNCYXVIZItEsYQoDsoUme4x+sNwfiENaY
xfVWgWdOBpgojGykdUMby1TcnF0jssP62LJRT+rx+u/SLnILPPD+1SpX8D37ORb5
M0KdV9fLbAofKhxr1Bvgdg94F6VxLcyqiYp3nxmxjyoWVISLOKfdG/zcKnre964H
WISbSZxvIMG0JWV0iglQulLpQWlPfJ3BiBdSCPq1G+ro9J9GGe8kiL0wAmCvkeE3
iHGNy5J2gNykMRHohA9t0J6HOJJV3QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGld
zncfn+6C+KwY4bOm6i+7HWPrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNjJEQzlDMEYzRTIxMUVGODVFMEI1QjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlzuMA0GCSqGSIb3DQEB
CwUAA4IBAQCau703XPaLtEwih3ymxAfmZFlyVlLkpisYyrq/ILqJkjkfJvL7c1km
CatPRRZ6H1qMOzv2ojNDUhyydA8m7g9uRwRgVOoG/t2/cIsYpyANL7X0frYuvPb1
iFfPOYE361DhEJyVzh0OUUmv3JkwYrOtv43349ULvnZFHWSsjKZB2bqSppfdZ+Kb
N2ySSwO81zbxJXu2FXiIBUVGASTeHz0+1rV6YdnGHToaj+9FNA204aLE627Gb/QJ
yz11mBfF9nnWWuDVRCV5tfT+hxazSVn33GVhZvRifKVnpPTwugTKlDiQQxRJ/eCr
w4/NgJiFBttMsfCYUKt8gramrFgnTpIL
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:21 2025 by rpki-client