Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F5B366AF43811EF966F528F762E951A.roa
File: 4F5B366AF43811EF966F528F762E951A.roa (raw, json)
Hash identifier: HH9AaXf5mWlLWesiswi53pQdE4FFCYOCok1y66yIZmw=
Subject key identifier: C9:C6:14:91:BD:69:3F:35:88:A1:ED:72:75:DD:F8:96:CF:30:70:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F5B366AF43811EF966F528F762E951A.roa
Signing time: Wed 26 Feb 2025 11:53:36 +0000
ROA not before: Wed 26 Feb 2025 11:53:32 +0000
ROA not after: Thu 19 Feb 2026 11:53:32 +0000
asID: 984
IP address blocks: 154.208.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90830 (0x162ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:53:32 2025 GMT
Not After : Feb 19 11:53:32 2026 GMT
Subject: CN=67bf00c0-7035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:f4:3d:0a:ea:ce:34:4e:b5:2e:2a:16:2c:
a8:4d:b2:d4:50:d9:1e:7b:a4:2e:f6:d7:5c:f2:42:
0a:04:8e:5d:bd:57:e9:6c:8e:8a:6f:e7:20:20:34:
84:b7:85:2d:f7:cd:49:db:04:a7:65:69:26:6d:16:
af:63:f4:9d:ae:2f:12:a1:34:08:f1:0b:27:e0:7d:
dc:9f:72:77:84:dd:32:b0:85:a3:c4:38:fc:af:e2:
a3:bc:8c:cd:1a:c6:d1:e2:01:8f:b5:17:7c:f2:c5:
15:3f:9a:26:47:9a:10:90:41:7c:a8:84:83:a7:e3:
2b:1e:a2:2c:0e:22:ef:09:8c:f3:4a:8c:06:89:77:
8e:23:24:fb:da:f0:24:ca:94:ce:6d:64:86:6d:7a:
90:34:a5:97:f9:b9:8b:46:48:ca:b3:25:c2:3d:f3:
d8:3e:13:39:96:3f:1b:7e:e7:5c:ca:65:96:9b:f3:
b8:9a:d8:34:fa:ac:27:23:93:26:f1:cd:6f:75:e3:
8b:fa:ba:e4:36:3e:51:dc:6b:95:b1:ce:53:03:67:
6b:af:07:08:b2:78:56:d7:1e:14:db:c3:29:e4:8a:
31:e6:7b:74:b9:df:d9:e1:1d:61:d3:6f:b6:03:d8:
62:75:96:6a:b7:f9:a4:0d:d0:db:e0:3e:2a:20:ce:
66:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C6:14:91:BD:69:3F:35:88:A1:ED:72:75:DD:F8:96:CF:30:70:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F5B366AF43811EF966F528F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.105.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6b:0a:97:53:c9:23:46:47:fb:7e:8e:5e:c7:55:d4:1b:1f:
e7:0b:94:10:92:12:f4:a3:08:be:22:a4:4d:b1:66:5c:f0:1d:
2a:5c:a4:d3:46:39:be:26:ca:fa:1a:d3:b6:d9:3d:3e:3f:06:
a0:eb:43:a2:7a:5c:f1:2e:ff:d9:ab:f1:34:9f:ad:c7:c2:8f:
fb:11:80:e5:75:de:8d:b2:05:cd:fc:fc:4d:76:0a:56:cf:a8:
6c:a1:fb:d0:62:b1:ec:c8:d2:1c:2c:7d:15:9d:c5:a9:57:a1:
18:7b:12:b6:c1:ec:88:07:e9:08:58:72:4e:68:56:cd:c9:54:
d2:c3:76:16:99:14:58:72:da:ee:54:09:78:ac:3a:44:2e:2c:
b4:26:e5:09:e6:7b:6a:15:d8:1b:ba:54:6e:69:ea:bd:40:8e:
be:7a:e4:0c:93:37:38:cd:9c:26:ca:59:55:d0:45:2e:af:e4:
59:e9:23:5e:09:8a:df:f6:cf:8b:e6:65:ad:d6:87:a0:5d:c0:
e5:ec:8e:d2:d7:93:67:ee:91:7c:11:c2:1a:22:6f:9b:53:79:
61:b4:56:82:7d:00:24:28:f4:6b:27:0e:cf:26:aa:da:8f:2b:
0b:2d:5e:a5:d7:a6:df:7a:44:7f:1f:56:f0:74:10:b0:f4:70:
71:6c:1c:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWLOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTE1MzMyWhcNMjYwMjE5MTE1MzMyWjAYMRYw
FAYDVQQDEw02N2JmMDBjMC03MDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyPr0PQrqzjROtS4qFiyoTbLUUNkee6Qu9tdc8kIKBI5dvVfpbI6Kb+cg
IDSEt4Ut981J2wSnZWkmbRavY/Sdri8SoTQI8Qsn4H3cn3J3hN0ysIWjxDj8r+Kj
vIzNGsbR4gGPtRd88sUVP5omR5oQkEF8qISDp+MrHqIsDiLvCYzzSowGiXeOIyT7
2vAkypTObWSGbXqQNKWX+bmLRkjKsyXCPfPYPhM5lj8bfudcymWWm/O4mtg0+qwn
I5Mm8c1vdeOL+rrkNj5R3GuVsc5TA2drrwcIsnhW1x4U28Mp5Iox5nt0ud/Z4R1h
02+2A9hidZZqt/mkDdDb4D4qIM5mvwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMnG
FJG9aT81iKHtcnXd+JbPMHCLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RjVCMzY2QUY0MzgxMUVGOTY2RjUyOEY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtBpMA0GCSqGSIb3DQEB
CwUAA4IBAQADawqXU8kjRkf7fo5ex1XUGx/nC5QQkhL0owi+IqRNsWZc8B0qXKTT
Rjm+Jsr6GtO22T0+Pwag60OielzxLv/Zq/E0n63Hwo/7EYDldd6NsgXN/PxNdgpW
z6hsofvQYrHsyNIcLH0VncWpV6EYexK2weyIB+kIWHJOaFbNyVTSw3YWmRRYctru
VAl4rDpELiy0JuUJ5ntqFdgbulRuaeq9QI6+euQMkzc4zZwmyllV0EUur+RZ6SNe
CYrf9s+L5mWt1oegXcDl7I7S15Nn7pF8EcIaIm+bU3lhtFaCfQAkKPRrJw7PJqra
jysLLV6l16bfekR/H1bwdBCw9HBxbBzA
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:43:54 2025 by rpki-client