Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C93B44EF46411EF8254F344762E951A.roa
File: 4C93B44EF46411EF8254F344762E951A.roa (raw, json)
Hash identifier: v2YcTGRSYlR1Npyab3t1eBTwpEYzJfW3YHJTKNo0b0k=
Subject key identifier: EE:3D:2E:DF:12:A1:BC:3A:27:43:14:F7:D6:5E:9E:DE:0A:C4:83:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01653C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C93B44EF46411EF8254F344762E951A.roa
Signing time: Wed 26 Feb 2025 17:08:29 +0000
ROA not before: Wed 26 Feb 2025 17:08:25 +0000
ROA not after: Sat 19 Feb 2028 17:08:25 +0000
asID: 17561
IP address blocks: 154.197.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91452 (0x1653c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 17:08:25 2025 GMT
Not After : Feb 19 17:08:25 2028 GMT
Subject: CN=67bf4a8d-5723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:86:5f:b0:de:c9:0f:b3:84:da:50:cf:7a:f4:
13:85:94:30:da:64:ae:c6:51:94:9a:da:a9:8e:32:
cc:90:ca:90:0d:e4:5e:4c:04:aa:27:8a:04:cc:a0:
15:84:40:dc:19:4e:ea:8f:8a:06:93:20:8b:4a:5b:
8d:25:d4:83:f6:64:29:8a:ba:65:83:db:05:06:52:
5d:df:f2:34:b6:4e:68:63:97:db:4b:68:83:52:46:
78:8b:f5:20:ac:d9:9a:fb:a2:bf:f9:49:d1:23:46:
f6:70:57:be:36:e0:60:92:ad:f4:7b:31:e5:a2:77:
3d:42:91:cb:17:e4:9c:8b:b0:03:53:98:64:87:ba:
c2:c0:97:4b:ad:f2:19:f4:3b:cf:a4:b2:48:ac:0d:
65:86:d6:84:05:6e:06:21:3a:d4:a6:e8:c7:e4:7f:
41:6c:78:d1:72:11:2d:28:d1:bf:dd:2d:0d:83:cb:
cb:59:4d:93:23:bb:73:25:85:97:ce:5d:d1:ce:5f:
70:6e:1e:96:b6:c1:c8:24:92:f5:c1:a1:08:a6:b0:
fd:7e:5b:6d:91:1f:5e:c7:bb:f1:b4:5c:09:c8:f1:
22:4f:68:d7:e2:43:4d:04:85:8e:81:92:10:de:f2:
f5:d6:b4:b5:77:c2:2e:46:74:71:ba:70:77:2b:04:
d6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3D:2E:DF:12:A1:BC:3A:27:43:14:F7:D6:5E:9E:DE:0A:C4:83:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C93B44EF46411EF8254F344762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.81.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:c8:73:73:a8:25:c3:35:82:30:15:b3:e0:a5:b3:34:cd:6b:
f1:54:ef:3d:30:02:f0:b6:7b:fe:f9:43:b1:f0:b8:4f:d2:b2:
be:76:0d:d5:0f:d1:75:58:2c:3c:e7:65:5a:2d:f7:e8:de:60:
45:99:47:e3:8e:5c:7e:44:b4:cc:ba:9b:79:76:e1:70:c4:e9:
52:d4:96:f1:16:1a:9a:83:c4:3d:fc:ee:cf:bd:cc:25:bb:67:
07:8a:d2:dc:7d:ed:59:07:f4:49:d2:7a:6f:f9:6f:f3:34:59:
3e:1f:8b:ba:af:99:ad:1e:7f:18:7b:eb:eb:d8:e5:83:14:b8:
c1:76:07:9d:79:21:c7:05:c0:39:60:a3:b3:3b:60:ee:87:dc:
f6:74:9e:05:be:d4:e1:40:c7:94:95:1e:84:92:93:9c:9f:7d:
b4:ff:c0:5e:c7:66:99:ee:25:e5:62:fc:07:38:34:01:4c:dc:
e3:ba:10:dc:63:3d:a2:29:22:fb:fc:8d:ea:62:92:43:d6:a2:
b4:7b:ec:5e:9f:95:36:b5:8d:ea:9a:f6:50:93:77:8b:a2:aa:
41:23:7d:7e:6e:3d:53:5d:1f:39:d7:b7:a9:17:34:39:b0:2e:
48:d6:36:38:d6:3c:62:93:f1:e9:44:f4:31:d8:59:f8:6e:c5:
3f:06:ac:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWU8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTcwODI1WhcNMjgwMjE5MTcwODI1WjAYMRYw
FAYDVQQDEw02N2JmNGE4ZC01NzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7YZfsN7JD7OE2lDPevQThZQw2mSuxlGUmtqpjjLMkMqQDeReTASqJ4oE
zKAVhEDcGU7qj4oGkyCLSluNJdSD9mQpirplg9sFBlJd3/I0tk5oY5fbS2iDUkZ4
i/UgrNma+6K/+UnRI0b2cFe+NuBgkq30ezHlonc9QpHLF+Sci7ADU5hkh7rCwJdL
rfIZ9DvPpLJIrA1lhtaEBW4GITrUpujH5H9BbHjRchEtKNG/3S0Ng8vLWU2TI7tz
JYWXzl3Rzl9wbh6WtsHIJJL1waEIprD9flttkR9ex7vxtFwJyPEiT2jX4kNNBIWO
gZIQ3vL11rS1d8IuRnRxunB3KwTW/QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFO49
Lt8Sobw6J0MU99Zent4KxIMgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80QzkzQjQ0RUY0NjQxMUVGODI1NEYzNDQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVRMA0GCSqGSIb3DQEB
CwUAA4IBAQCbyHNzqCXDNYIwFbPgpbM0zWvxVO89MALwtnv++UOx8LhP0rK+dg3V
D9F1WCw852VaLffo3mBFmUfjjlx+RLTMupt5duFwxOlS1JbxFhqag8Q9/O7Pvcwl
u2cHitLcfe1ZB/RJ0npv+W/zNFk+H4u6r5mtHn8Ye+vr2OWDFLjBdgedeSHHBcA5
YKOzO2Duh9z2dJ4FvtThQMeUlR6EkpOcn320/8Bex2aZ7iXlYvwHODQBTNzjuhDc
Yz2iKSL7/I3qYpJD1qK0e+xen5U2tY3qmvZQk3eLoqpBI31+bj1TXR8517epFzQ5
sC5I1jY41jxik/HpRPQx2Fn4bsU/Bqz0
-----END CERTIFICATE-----
Generated at Fri Apr 4 11:17:03 2025 by rpki-client