Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FFD23BAF5AC11EF9C73C09A762E951A.roa
File: 4FFD23BAF5AC11EF9C73C09A762E951A.roa (raw, json)
Hash identifier: h3cp37stqk9GwmsdxulVuG4LSYEbfXTD5fghhv+k+8A=
Subject key identifier: 78:5A:12:6F:CD:E2:F3:7A:4C:C7:49:66:18:11:DD:06:97:97:73:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FFD23BAF5AC11EF9C73C09A762E951A.roa
Signing time: Fri 28 Feb 2025 08:16:30 +0000
ROA not before: Fri 28 Feb 2025 08:16:26 +0000
ROA not after: Sat 29 Mar 2025 08:16:26 +0000
asID: 147176
IP address blocks: 154.197.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92671 (0x169ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 08:16:26 2025 GMT
Not After : Mar 29 08:16:26 2025 GMT
Subject: CN=67c170de-17a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cc:7e:6a:95:09:2b:12:78:e3:21:c5:97:58:
07:a5:bb:f4:1d:6e:98:20:99:77:19:e3:50:03:5b:
53:ce:3c:bc:f5:1d:64:a2:4d:c4:22:23:6b:bc:7b:
08:d5:ad:d1:96:28:e6:d8:14:a9:fa:8b:59:96:b9:
8a:9d:8f:0e:07:7f:21:95:f4:89:72:91:4b:a4:da:
00:b0:b6:1d:63:4d:86:45:e5:e8:b8:44:61:6a:41:
ef:71:3d:99:3f:4e:0f:d3:e7:bf:29:e3:63:01:b5:
f6:cf:66:f9:6d:ad:4f:d4:3d:9f:ed:16:55:88:2e:
8a:c9:f5:70:3a:11:80:44:c3:3a:12:2f:02:26:8d:
a3:4b:0c:dc:6d:ba:b1:fc:ba:14:9f:bb:72:27:3a:
7f:cd:f3:88:c6:ea:d4:99:e4:48:d9:94:f3:f8:05:
f2:23:12:56:9b:ae:43:37:37:32:90:16:3a:61:dc:
f7:fd:eb:77:10:5a:5b:db:6e:a2:ac:52:60:59:95:
cb:f9:a4:ab:d6:82:06:56:bc:62:6e:b5:ff:4c:a3:
4f:ae:7e:29:2d:e8:d8:1f:51:f7:51:76:bb:35:62:
de:1a:fd:bc:87:44:6e:9f:b6:bc:9b:30:61:b0:63:
0c:9b:91:bc:46:ee:da:b0:79:53:83:2d:dc:cb:d4:
d8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5A:12:6F:CD:E2:F3:7A:4C:C7:49:66:18:11:DD:06:97:97:73:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FFD23BAF5AC11EF9C73C09A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.116.0/24
Signature Algorithm: sha256WithRSAEncryption
63:c6:55:24:57:31:3c:d5:4a:cb:48:b5:44:31:c8:a6:ed:5b:
ba:1d:16:44:07:3b:6e:fe:6b:fc:f3:81:dc:6b:19:4d:22:a9:
88:30:90:7b:ee:39:63:cb:e1:6f:9b:68:53:01:97:46:55:6f:
2e:85:b2:62:3e:95:e5:73:a4:0e:f8:b4:e1:18:7a:16:a9:56:
ca:eb:72:3a:79:5b:a0:e9:a2:9a:79:9a:3e:60:c8:37:7b:04:
4d:40:ed:98:1c:09:ce:eb:a3:f1:f6:04:31:88:42:66:07:55:
9d:2f:8a:2e:ab:f2:1c:5e:84:97:b3:26:20:da:73:77:6b:32:
01:9e:ee:99:97:b9:03:4c:e4:fb:a9:00:f8:67:a5:23:11:5d:
d4:5c:7f:27:3b:ec:08:b2:aa:39:80:20:21:6b:b3:dd:56:af:
99:e7:a6:a4:84:da:8a:9f:cf:5a:6e:f3:fd:b7:f5:52:ca:c0:
73:92:e4:3d:2a:11:2e:ee:ab:17:41:7f:8b:87:9f:b5:55:2d:
b2:b7:af:52:6c:bc:3f:91:3d:66:79:ba:9f:ee:18:4b:5d:08:
11:47:b6:cc:ec:ea:a4:dc:5c:5e:53:41:b9:d5:81:c1:0c:8c:
6d:a1:38:b2:5c:4a:2c:53:7f:cc:f6:11:13:b9:2f:13:44:bd:
2f:04:42:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWn/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MDgxNjI2WhcNMjUwMzI5MDgxNjI2WjAYMRYw
FAYDVQQDEw02N2MxNzBkZS0xN2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxcx+apUJKxJ44yHFl1gHpbv0HW6YIJl3GeNQA1tTzjy89R1kok3EIiNr
vHsI1a3Rlijm2BSp+otZlrmKnY8OB38hlfSJcpFLpNoAsLYdY02GReXouERhakHv
cT2ZP04P0+e/KeNjAbX2z2b5ba1P1D2f7RZViC6KyfVwOhGARMM6Ei8CJo2jSwzc
bbqx/LoUn7tyJzp/zfOIxurUmeRI2ZTz+AXyIxJWm65DNzcykBY6Ydz3/et3EFpb
226irFJgWZXL+aSr1oIGVrxibrX/TKNPrn4pLejYH1H3UXa7NWLeGv28h0Run7a8
mzBhsGMMm5G8Ru7asHlTgy3cy9TYTQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHha
Em/N4vN6TMdJZhgR3QaXl3O2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RkZEMjNCQUY1QUMxMUVGOUM3M0MwOUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsV0MA0GCSqGSIb3DQEB
CwUAA4IBAQBjxlUkVzE81UrLSLVEMcim7Vu6HRZEBztu/mv884HcaxlNIqmIMJB7
7jljy+Fvm2hTAZdGVW8uhbJiPpXlc6QO+LThGHoWqVbK63I6eVug6aKaeZo+YMg3
ewRNQO2YHAnO66Px9gQxiEJmB1WdL4ouq/IcXoSXsyYg2nN3azIBnu6Zl7kDTOT7
qQD4Z6UjEV3UXH8nO+wIsqo5gCAha7PdVq+Z56akhNqKn89abvP9t/VSysBzkuQ9
KhEu7qsXQX+Lh5+1VS2yt69SbLw/kT1mebqf7hhLXQgRR7bM7Oqk3FxeU0G51YHB
DIxtoTiyXEosU3/M9hETuS8TRL0vBEKA
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:29 2025 by rpki-client