Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50948CDCF3D611EFA816035C762E951A.roa
File: 50948CDCF3D611EFA816035C762E951A.roa (raw, json)
Hash identifier: GkYKRP2lQyieeqLNHUKn/X8MqVFhNShj04mM35aZvPQ=
Subject key identifier: D1:FA:08:96:A6:2F:91:50:35:F7:A8:F4:20:04:B3:6E:42:E1:BC:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01602F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50948CDCF3D611EFA816035C762E951A.roa
Signing time: Wed 26 Feb 2025 00:12:07 +0000
ROA not before: Wed 26 Feb 2025 00:00:03 +0000
ROA not after: Thu 19 Feb 2026 00:00:03 +0000
asID: 984
IP address blocks: 154.89.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90159 (0x1602f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 00:00:03 2025 GMT
Not After : Feb 19 00:00:03 2026 GMT
Subject: CN=67be5c57-d816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7e:95:e9:ab:f8:7a:08:b3:5a:b8:f9:5e:e3:
b9:fa:93:16:c4:0a:58:78:af:d8:51:7f:0b:7b:71:
49:56:3e:ce:4e:cf:d6:62:07:1a:c0:cf:0d:9b:56:
03:c5:f7:e3:78:96:76:b1:d1:7c:71:23:11:73:cc:
34:a4:7a:ec:2a:6c:35:e4:8b:ac:29:d8:7a:08:72:
f3:0d:70:bc:79:65:77:c3:aa:dc:33:3f:70:82:7f:
9e:bf:14:84:36:3a:4a:c9:4a:57:19:0d:d8:e4:d4:
93:24:8e:94:94:8e:c0:e3:86:4a:6b:39:de:cc:94:
62:e8:3e:1a:22:1c:e8:5f:04:e2:49:83:68:32:d4:
71:96:e2:9c:0c:a9:1e:10:a5:14:e9:ad:cc:b1:0d:
c8:bf:9a:6d:79:83:7d:9a:c7:8a:9a:e2:74:b7:eb:
8b:f8:cc:74:d2:08:32:92:fc:f4:72:10:f0:55:63:
5d:d4:ec:cb:a6:58:95:e9:6e:23:47:1a:5a:52:ba:
99:9c:70:c5:b4:05:be:2b:3e:01:ab:e5:a0:00:19:
4d:61:8d:52:71:44:da:ac:8f:69:2a:90:81:2b:17:
8f:80:d5:89:bd:35:5c:51:79:47:15:be:26:86:35:
85:62:62:4e:7b:9d:e6:b6:12:e7:fd:fa:82:da:29:
dd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FA:08:96:A6:2F:91:50:35:F7:A8:F4:20:04:B3:6E:42:E1:BC:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50948CDCF3D611EFA816035C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.234.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:c8:25:9b:2c:41:a7:11:d1:29:4f:bb:70:7a:8c:c2:08:8a:
87:bf:a6:47:81:ae:61:33:a1:a2:6a:e2:5b:39:7d:8d:43:4e:
dc:0b:83:2b:82:f1:23:51:e1:79:61:0a:4f:ad:c0:65:80:0f:
cf:03:35:8b:e0:bc:fe:e1:a0:7f:f6:50:5a:89:b2:e1:81:91:
03:15:bd:36:a6:0b:2b:48:fd:c4:b4:d0:9b:13:5f:f1:65:b5:
d8:80:9d:60:d9:c9:c5:47:95:db:bf:fd:34:89:44:3b:00:21:
7c:8d:fb:67:f7:f5:7e:08:1b:a3:35:16:a2:af:a1:06:9e:10:
39:7c:5d:45:fb:41:5f:20:c9:97:c4:33:41:24:ec:30:83:1a:
a9:18:fc:3a:06:41:21:a2:56:93:fe:a2:dd:c6:7f:94:38:b6:
29:e4:6f:15:38:78:e8:47:c0:9b:aa:b8:6d:88:a6:0d:7f:b2:
b3:0d:3e:30:50:34:41:3a:76:93:89:97:62:ae:90:81:96:5f:
41:d5:59:c8:57:cd:7d:9d:e7:f0:10:a8:2b:f7:17:9a:b9:f4:
d6:5a:36:e9:4d:06:1e:d3:6e:30:57:e5:a0:43:82:60:bd:9e:
18:64:1c:07:ca:ae:07:97:08:d0:f2:d3:1c:93:e6:0f:0d:c8:
cd:81:d1:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWAvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDAwMDAzWhcNMjYwMjE5MDAwMDAzWjAYMRYw
FAYDVQQDEw02N2JlNWM1Ny1kODE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzn6V6av4egizWrj5XuO5+pMWxApYeK/YUX8Le3FJVj7OTs/WYgcawM8N
m1YDxffjeJZ2sdF8cSMRc8w0pHrsKmw15IusKdh6CHLzDXC8eWV3w6rcMz9wgn+e
vxSENjpKyUpXGQ3Y5NSTJI6UlI7A44ZKaznezJRi6D4aIhzoXwTiSYNoMtRxluKc
DKkeEKUU6a3MsQ3Iv5pteYN9mseKmuJ0t+uL+Mx00ggykvz0chDwVWNd1OzLpliV
6W4jRxpaUrqZnHDFtAW+Kz4Bq+WgABlNYY1ScUTarI9pKpCBKxePgNWJvTVcUXlH
Fb4mhjWFYmJOe53mthLn/fqC2indFwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNH6
CJamL5FQNfeo9CAEs25C4bzkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MDk0OENEQ0YzRDYxMUVGQTgxNjAzNUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlnqMA0GCSqGSIb3DQEB
CwUAA4IBAQDGyCWbLEGnEdEpT7tweozCCIqHv6ZHga5hM6GiauJbOX2NQ07cC4Mr
gvEjUeF5YQpPrcBlgA/PAzWL4Lz+4aB/9lBaibLhgZEDFb02pgsrSP3EtNCbE1/x
ZbXYgJ1g2cnFR5Xbv/00iUQ7ACF8jftn9/V+CBujNRair6EGnhA5fF1F+0FfIMmX
xDNBJOwwgxqpGPw6BkEholaT/qLdxn+UOLYp5G8VOHjoR8CbqrhtiKYNf7KzDT4w
UDRBOnaTiZdirpCBll9B1VnIV819nefwEKgr9xeaufTWWjbpTQYe024wV+WgQ4Jg
vZ4YZBwHyq4HlwjQ8tMck+YPDcjNgdG8
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:53:37 2025 by rpki-client