Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4621C27604B411F0B2964F80762E951A.roa
File: 4621C27604B411F0B2964F80762E951A.roa (raw, json)
Hash identifier: Gs8ffkbrqS42CrNMy4cER0g4JRmMyzmGX6UcmXlEJnU=
Subject key identifier: 5D:E3:E8:07:06:97:1E:F7:92:E1:D8:85:81:83:95:FE:4C:10:87:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017500
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4621C27604B411F0B2964F80762E951A.roa
Signing time: Wed 19 Mar 2025 11:21:17 +0000
ROA not before: Wed 19 Mar 2025 11:21:12 +0000
ROA not after: Fri 27 Mar 2026 11:21:12 +0000
asID: 209242
IP address blocks: 154.197.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95488 (0x17500)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 19 11:21:12 2025 GMT
Not After : Mar 27 11:21:12 2026 GMT
Subject: CN=67daa8ad-60ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:6d:27:e2:b6:e8:9f:87:02:17:45:01:42:
e3:a0:72:d2:ce:17:51:82:9d:94:da:ed:73:5a:ce:
69:7e:82:38:f0:cd:ee:87:fc:d1:12:a1:fb:30:42:
08:a4:0f:b2:4b:47:25:11:ed:17:6a:aa:93:aa:ac:
7d:b0:37:f9:d3:d8:de:95:05:1e:56:0a:42:f9:02:
b2:e5:3a:78:dc:24:4d:31:26:b7:6e:2f:92:23:fc:
92:1c:f7:69:21:3c:bf:db:d8:99:f3:04:ea:ab:f9:
0f:ec:42:de:b1:a8:22:c5:6d:25:ed:18:1a:aa:06:
f8:f3:07:00:71:f5:20:40:55:f3:4a:a9:fc:d6:3f:
b6:a8:06:90:ec:1a:df:2e:ee:41:ac:34:08:c9:3d:
5c:4c:9f:ac:10:78:2b:e6:bb:e4:b3:d0:f2:9e:7b:
b3:ee:c9:3c:ee:2d:5f:90:74:23:a4:02:5d:54:81:
7f:0c:7a:ff:fe:a2:61:6c:51:27:13:ed:56:40:55:
25:95:b1:43:fc:bb:88:3b:52:70:87:c8:9d:b8:3e:
56:fb:d6:59:f5:30:7e:42:6a:87:6e:49:fe:b5:ff:
30:5d:9d:dc:0a:a1:1c:1b:ab:85:5f:f5:ea:90:43:
4e:b4:61:52:12:4d:2e:b3:9a:6c:da:33:6f:ad:cf:
d8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E3:E8:07:06:97:1E:F7:92:E1:D8:85:81:83:95:FE:4C:10:87:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4621C27604B411F0B2964F80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.65.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:39:dc:aa:99:a1:85:55:89:5b:e0:73:8d:45:3e:5e:9a:31:
3e:0f:8c:60:b0:47:3d:69:16:76:7e:3a:20:25:8d:5c:f5:4d:
49:1b:65:5d:9d:b4:68:b0:9b:3f:d4:bc:67:ca:3a:b3:7f:91:
5a:5d:ad:3b:f6:1d:e2:07:36:e8:fb:0e:2f:19:c3:b4:48:2d:
8d:c0:72:6c:f2:61:25:c8:96:b9:00:2b:62:ae:45:75:14:08:
f3:f8:ac:24:89:15:7c:00:70:79:3e:4c:77:01:25:29:fa:88:
6a:73:8c:2a:1a:ba:4e:a8:0c:aa:45:7f:33:11:88:a5:e9:c9:
a7:eb:b0:50:97:d8:ed:42:28:85:18:e2:cf:35:c4:93:5b:b8:
8e:5f:47:6e:31:12:db:59:70:67:be:dc:88:2d:74:4b:ea:8d:
f7:32:66:09:79:5f:d5:fd:0d:3d:2c:e7:b8:c1:03:0e:f4:49:
e9:b9:6c:3e:06:94:55:d6:4f:aa:da:c6:d1:59:de:9a:f3:a9:
50:e1:86:49:ac:53:cd:9e:21:14:dd:90:56:59:38:61:c7:21:
bd:24:12:3b:1f:2a:09:03:6d:5a:4b:57:41:9d:57:ad:ba:e9:
ed:f5:43:53:38:6e:4b:21:82:6d:83:71:60:5a:c0:9d:98:69:
59:81:6b:74
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXUAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzE5MTEyMTEyWhcNMjYwMzI3MTEyMTEyWjAYMRYw
FAYDVQQDEw02N2RhYThhZC02MGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwaFtJ+K26J+HAhdFAULjoHLSzhdRgp2U2u1zWs5pfoI48M3uh/zREqH7
MEIIpA+yS0clEe0XaqqTqqx9sDf509jelQUeVgpC+QKy5Tp43CRNMSa3bi+SI/yS
HPdpITy/29iZ8wTqq/kP7ELesagixW0l7Rgaqgb48wcAcfUgQFXzSqn81j+2qAaQ
7BrfLu5BrDQIyT1cTJ+sEHgr5rvks9Dynnuz7sk87i1fkHQjpAJdVIF/DHr//qJh
bFEnE+1WQFUllbFD/LuIO1Jwh8iduD5W+9ZZ9TB+QmqHbkn+tf8wXZ3cCqEcG6uF
X/XqkENOtGFSEk0us5ps2jNvrc/YaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF3j
6AcGlx73kuHYhYGDlf5MEIe7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NjIxQzI3NjA0QjQxMUYwQjI5NjRGODA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVBMA0GCSqGSIb3DQEB
CwUAA4IBAQDEOdyqmaGFVYlb4HONRT5emjE+D4xgsEc9aRZ2fjogJY1c9U1JG2Vd
nbRosJs/1Lxnyjqzf5FaXa079h3iBzbo+w4vGcO0SC2NwHJs8mElyJa5ACtirkV1
FAjz+KwkiRV8AHB5Pkx3ASUp+ohqc4wqGrpOqAyqRX8zEYil6cmn67BQl9jtQiiF
GOLPNcSTW7iOX0duMRLbWXBnvtyILXRL6o33MmYJeV/V/Q09LOe4wQMO9EnpuWw+
BpRV1k+q2sbRWd6a86lQ4YZJrFPNniEU3ZBWWThhxyG9JBI7HyoJA21aS1dBnVet
uunt9UNTOG5LIYJtg3FgWsCdmGlZgWt0
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:53 2025 by rpki-client