Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54801542F43411EF83CC2B72762E951A.roa
File: 54801542F43411EF83CC2B72762E951A.roa (raw, json)
Hash identifier: xiPEvGrzHynpmISG15laqJn8oGMSHmTWs4PASuA1hko=
Subject key identifier: 92:41:45:ED:93:04:8B:F1:F5:46:74:0E:94:17:44:0E:91:3A:20:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016290
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54801542F43411EF83CC2B72762E951A.roa
Signing time: Wed 26 Feb 2025 11:25:06 +0000
ROA not before: Wed 26 Feb 2025 11:25:02 +0000
ROA not after: Thu 19 Feb 2026 11:25:02 +0000
asID: 984
IP address blocks: 154.208.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90768 (0x16290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:25:02 2025 GMT
Not After : Feb 19 11:25:02 2026 GMT
Subject: CN=67befa12-5567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:08:66:a9:b3:a6:42:59:3c:d2:0b:fd:7e:84:
a9:30:32:43:63:e3:a2:b8:4e:72:90:2e:22:cf:79:
41:0e:bd:da:dd:8d:08:7c:27:f9:21:0c:ce:7b:cd:
4c:b3:f5:54:2b:75:0b:0b:66:8d:d3:7f:7a:8c:d5:
04:f5:74:3b:2c:26:48:99:80:28:bd:e4:c0:7d:8a:
a3:1b:c2:46:2b:02:e6:4c:12:02:f3:49:4c:a7:6a:
96:c7:18:34:11:51:f3:a8:71:83:cf:f2:97:0e:6a:
f3:93:58:97:80:54:1f:d0:c4:78:b5:cd:d1:ac:3c:
c8:0e:d0:b2:45:63:cd:de:df:ba:5f:14:ec:22:f8:
84:ce:ee:66:39:ff:f2:6e:7b:1b:56:0c:51:02:af:
6c:ec:8f:49:52:59:ff:20:a1:7c:db:84:37:f7:0d:
7c:ea:14:46:ef:44:1c:f9:97:1d:fa:ce:4b:e3:94:
96:8d:4b:c5:89:31:5b:85:ec:29:fa:fb:64:67:1c:
5f:4d:2e:05:08:4d:c1:77:f7:37:91:7c:03:3d:1b:
38:e8:71:83:8c:6f:63:18:1c:aa:48:d0:64:79:07:
e8:83:9f:df:5c:f8:0c:dc:33:04:08:3f:03:77:6b:
ba:80:5a:3f:71:68:88:64:98:e2:d0:6e:01:8a:e9:
13:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:41:45:ED:93:04:8B:F1:F5:46:74:0E:94:17:44:0E:91:3A:20:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54801542F43411EF83CC2B72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:e2:a4:9e:29:a7:74:9a:d3:fb:ba:aa:ad:91:35:4e:2f:d6:
87:c2:28:68:e0:43:fa:c4:6c:5b:0e:eb:88:71:04:e5:39:24:
b6:9c:49:ba:92:5a:db:ee:13:1b:0e:89:8e:f8:f3:36:65:55:
57:2f:4f:38:45:4e:2c:a3:a5:7e:0d:58:f8:77:e9:b9:d1:55:
55:99:07:49:ee:8d:d6:57:2b:12:92:6b:49:c6:3c:d4:7d:7a:
a2:a3:f1:37:cb:27:ba:d7:85:58:70:24:26:2b:78:36:b5:ce:
6a:4b:cc:ec:a6:ba:2e:79:66:43:aa:08:98:3a:5a:fe:c0:cb:
e7:f3:2d:79:87:a0:c7:cd:21:e7:88:74:68:33:11:e4:df:78:
cb:82:eb:74:9f:a5:68:43:95:82:98:84:d2:35:c7:38:75:bd:
c2:da:d6:da:71:76:78:82:85:ed:46:5a:36:6d:2e:fa:15:85:
43:3a:81:1f:c5:6a:fd:82:9a:a1:8a:65:44:c9:e3:59:e7:b1:
db:24:63:8b:6f:21:cf:14:d7:e1:31:06:57:39:7d:9f:4a:37:
5d:6b:18:a3:a1:65:1b:ab:6d:71:39:00:4c:a2:49:56:5b:b2:
69:78:cb:90:35:79:a4:e2:88:35:ba:c8:cd:2a:e4:43:ea:ae:
4a:cc:37:2e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWKQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTEyNTAyWhcNMjYwMjE5MTEyNTAyWjAYMRYw
FAYDVQQDEw02N2JlZmExMi01NTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwAhmqbOmQlk80gv9foSpMDJDY+OiuE5ykC4iz3lBDr3a3Y0IfCf5IQzO
e81Ms/VUK3ULC2aN0396jNUE9XQ7LCZImYAoveTAfYqjG8JGKwLmTBIC80lMp2qW
xxg0EVHzqHGDz/KXDmrzk1iXgFQf0MR4tc3RrDzIDtCyRWPN3t+6XxTsIviEzu5m
Of/ybnsbVgxRAq9s7I9JUln/IKF824Q39w186hRG70Qc+Zcd+s5L45SWjUvFiTFb
hewp+vtkZxxfTS4FCE3Bd/c3kXwDPRs46HGDjG9jGByqSNBkeQfog5/fXPgM3DME
CD8Dd2u6gFo/cWiIZJji0G4BiukTaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJJB
Re2TBIvx9UZ0DpQXRA6ROiCfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NDgwMTU0MkY0MzQxMUVGODNDQzJCNzI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtBgMA0GCSqGSIb3DQEB
CwUAA4IBAQBb4qSeKad0mtP7uqqtkTVOL9aHwiho4EP6xGxbDuuIcQTlOSS2nEm6
klrb7hMbDomO+PM2ZVVXL084RU4so6V+DVj4d+m50VVVmQdJ7o3WVysSkmtJxjzU
fXqio/E3yye614VYcCQmK3g2tc5qS8zsproueWZDqgiYOlr+wMvn8y15h6DHzSHn
iHRoMxHk33jLgut0n6VoQ5WCmITSNcc4db3C2tbacXZ4goXtRlo2bS76FYVDOoEf
xWr9gpqhimVEyeNZ57HbJGOLbyHPFNfhMQZXOX2fSjddaxijoWUbq21xOQBMoklW
W7JpeMuQNXmk4og1usjNKuRD6q5KzDcu
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:06 2025 by rpki-client