Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AB6572EF53C11EFA7180694762E951A.roa
File: 5AB6572EF53C11EFA7180694762E951A.roa (raw, json)
Hash identifier: RDxaEcdKZqNIq4LYKP/2+57a4JDeLgvglL6adMQvPUk=
Subject key identifier: 94:27:C9:E1:38:EB:44:3B:59:F1:77:FE:38:ED:91:28:90:8F:51:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016984
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AB6572EF53C11EFA7180694762E951A.roa
Signing time: Thu 27 Feb 2025 18:55:04 +0000
ROA not before: Thu 27 Feb 2025 18:55:00 +0000
ROA not after: Sat 05 Apr 2025 18:55:00 +0000
asID: 205125
IP address blocks: 154.203.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92548 (0x16984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 18:55:00 2025 GMT
Not After : Apr 5 18:55:00 2025 GMT
Subject: CN=67c0b508-08fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:5e:b5:6b:0b:a3:c9:cd:42:92:a8:18:ee:
34:19:28:3c:4f:1e:96:65:bf:e5:84:7a:e1:d3:8b:
e0:4e:76:a8:b1:9e:65:a5:a4:59:0a:07:17:1b:96:
de:61:68:9a:63:e4:e6:03:7c:6b:df:60:3c:81:84:
77:05:10:b3:b2:ce:fc:0e:22:8b:1f:10:9e:4f:c7:
03:da:4c:38:ed:5b:6d:da:c9:9d:23:31:a0:39:3c:
6d:55:9a:7b:fe:92:e4:ac:5f:b6:17:d3:0d:08:03:
9a:23:19:5e:c7:65:12:3e:be:60:29:f4:ba:3d:ed:
11:29:67:39:c1:53:5f:d6:5c:2d:aa:9a:29:ae:7e:
30:8c:a7:ca:87:6d:9f:43:61:b8:d1:ec:7f:ed:b2:
f0:40:1a:cc:11:6d:02:25:e1:59:bc:57:55:2b:90:
c9:40:9d:dc:bf:01:f1:12:05:b3:34:ca:6b:5a:31:
2a:ba:90:aa:33:3f:01:c9:4c:e9:93:f3:d5:6b:04:
f9:5a:fa:1f:15:d1:84:30:95:98:07:84:0f:13:ef:
d2:12:48:67:a4:57:64:40:4c:b6:89:a7:81:4d:24:
a3:0b:c9:03:ce:8e:17:84:cf:cf:61:98:41:54:cc:
41:95:21:14:c1:6b:ea:63:7d:47:99:12:6f:29:b6:
8a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:27:C9:E1:38:EB:44:3B:59:F1:77:FE:38:ED:91:28:90:8F:51:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5AB6572EF53C11EFA7180694762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.194.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:42:a0:4e:07:65:7c:bf:fd:05:9c:7e:e2:38:aa:c8:6c:4b:
75:7b:9e:7d:6a:dd:98:11:5f:30:83:a9:3e:9d:e5:82:94:3c:
51:cc:a0:53:fb:45:b6:e8:08:d2:67:cb:90:72:fa:dd:61:24:
b5:db:bb:d1:d7:cb:68:98:5c:71:f3:bb:1a:cb:52:11:d6:f6:
06:29:1a:48:e6:97:85:fc:ea:8b:70:36:76:50:10:1f:dc:1f:
10:1e:7a:d8:d0:b0:be:a8:70:ee:8f:89:7c:d9:a9:34:d5:d5:
bd:94:cb:80:83:59:8e:7d:54:91:25:c8:31:07:08:25:bc:40:
fb:d1:41:da:17:d4:8f:47:e2:23:39:85:fe:2a:1f:f8:13:a9:
20:2a:43:83:8d:76:f7:20:eb:34:4d:97:30:18:8c:0b:28:db:
c1:4e:53:20:02:98:ac:de:5a:3b:fc:c8:93:d0:72:23:9c:1f:
6f:ab:69:3b:db:91:2f:08:11:06:9b:02:a7:52:41:a6:44:77:
1c:59:c1:8c:d5:59:da:0a:72:10:37:45:03:d8:63:b5:84:b4:
e4:0c:a1:6b:5f:60:c8:4a:c6:d4:4f:ca:42:a7:f0:38:80:cf:
d5:b2:cd:28:c7:71:61:dd:ed:9f:e0:37:70:43:27:44:e1:0e:
de:2f:29:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWmEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MTg1NTAwWhcNMjUwNDA1MTg1NTAwWjAYMRYw
FAYDVQQDEw02N2MwYjUwOC0wOGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuodetWsLo8nNQpKoGO40GSg8Tx6WZb/lhHrh04vgTnaosZ5lpaRZCgcX
G5beYWiaY+TmA3xr32A8gYR3BRCzss78DiKLHxCeT8cD2kw47Vtt2smdIzGgOTxt
VZp7/pLkrF+2F9MNCAOaIxlex2USPr5gKfS6Pe0RKWc5wVNf1lwtqpoprn4wjKfK
h22fQ2G40ex/7bLwQBrMEW0CJeFZvFdVK5DJQJ3cvwHxEgWzNMprWjEqupCqMz8B
yUzpk/PVawT5WvofFdGEMJWYB4QPE+/SEkhnpFdkQEy2iaeBTSSjC8kDzo4XhM/P
YZhBVMxBlSEUwWvqY31HmRJvKbaK9QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJQn
yeE460Q7WfF3/jjtkSiQj1GfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81QUI2NTcyRUY1M0MxMUVGQTcxODA2OTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsvCMA0GCSqGSIb3DQEB
CwUAA4IBAQDRQqBOB2V8v/0FnH7iOKrIbEt1e559at2YEV8wg6k+neWClDxRzKBT
+0W26AjSZ8uQcvrdYSS127vR18tomFxx87say1IR1vYGKRpI5peF/OqLcDZ2UBAf
3B8QHnrY0LC+qHDuj4l82ak01dW9lMuAg1mOfVSRJcgxBwglvED70UHaF9SPR+Ij
OYX+Kh/4E6kgKkODjXb3IOs0TZcwGIwLKNvBTlMgApis3lo7/MiT0HIjnB9vq2k7
25EvCBEGmwKnUkGmRHccWcGM1VnaCnIQN0UD2GO1hLTkDKFrX2DISsbUT8pCp/A4
gM/Vss0ox3Fh3e2f4DdwQydE4Q7eLykY
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:04 2025 by rpki-client