Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D931F32E9EC11EFB60ED790762E951A.roa
File: 5D931F32E9EC11EFB60ED790762E951A.roa (raw, json)
Hash identifier: 8VTXiIbI0yl0cO6VN0ZFmDZ/HDkKcka6OhaI7hq9eUE=
Subject key identifier: 9B:B0:59:EF:DB:9E:A9:6B:F1:93:8D:1B:A1:8D:2A:00:C4:AB:54:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0156C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D931F32E9EC11EFB60ED790762E951A.roa
Signing time: Thu 13 Feb 2025 09:24:46 +0000
ROA not before: Thu 13 Feb 2025 09:24:43 +0000
ROA not after: Sat 31 Jan 2026 09:24:43 +0000
asID: 135600
IP address blocks: 154.196.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87748 (0x156c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 13 09:24:43 2025 GMT
Not After : Jan 31 09:24:43 2026 GMT
Subject: CN=67adba5e-cad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:b0:c3:cb:19:36:ad:8d:8d:4c:d1:ef:f8:
5f:5f:d7:f2:0d:e6:16:22:99:3a:bd:74:86:dd:b2:
6c:ff:87:e2:0f:eb:0a:1d:17:c4:17:6a:6b:9c:b8:
46:14:2b:59:77:62:d1:b5:20:f1:03:44:ed:a4:e8:
6d:f5:95:d8:44:03:fb:bc:b2:1e:ef:2e:bd:2e:4e:
3e:d7:36:db:5c:4b:f6:d7:f7:ab:f7:c6:9d:4a:99:
65:0e:40:47:32:a5:bd:65:a7:68:10:19:63:07:a1:
28:84:f4:16:41:4b:ce:e8:d3:eb:a4:da:6c:13:f8:
28:a1:b4:a2:d8:e1:f5:dd:99:a3:31:10:f2:bf:54:
fa:42:ee:d2:62:cb:86:29:43:56:85:71:d8:77:a3:
e6:17:aa:e2:a8:24:7f:2e:30:39:bf:f7:32:bf:8b:
23:57:5b:e1:84:32:4c:28:bf:9b:2a:ba:71:d0:76:
3d:ec:2b:32:fa:61:8e:6e:ee:a2:6d:0f:f2:f5:f2:
ca:29:40:28:5c:e1:1c:a0:ae:e3:4f:39:a6:ab:9e:
19:3f:61:ea:e7:ea:da:84:9d:ea:72:1a:2d:e8:9e:
5e:a0:8d:ff:19:4e:63:00:22:2f:a3:0a:f7:cb:c7:
98:57:6f:01:3c:c9:3e:1b:20:22:81:fa:b7:7f:6f:
2d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B0:59:EF:DB:9E:A9:6B:F1:93:8D:1B:A1:8D:2A:00:C4:AB:54:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D931F32E9EC11EFB60ED790762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.232.0/22
Signature Algorithm: sha256WithRSAEncryption
57:a6:5b:8f:35:77:4f:c3:46:05:41:74:e6:d9:51:66:0c:85:
70:80:d6:ef:45:da:00:6e:78:6d:1c:88:31:15:ef:c9:36:06:
92:98:90:31:56:28:9a:48:a7:8a:ca:a8:60:4f:34:d4:8f:28:
66:a2:50:e1:56:25:ea:b7:99:96:2b:64:31:4e:37:00:ae:57:
b7:dc:41:2d:a2:f1:32:48:a0:48:16:7c:22:5f:ac:a9:cb:fa:
f1:70:74:b3:1b:15:9a:60:c1:ee:c9:95:41:02:d7:4d:d6:d9:
38:d4:68:55:36:3a:70:f1:f0:ff:2b:af:db:ca:71:10:6a:b6:
dc:ca:d5:07:f8:d6:1c:02:3e:e5:38:38:1d:4b:8d:23:92:15:
c8:4d:b7:29:b8:03:66:c9:f9:49:e6:79:30:d6:a3:fc:1d:72:
65:dd:e0:6f:36:9d:a9:1d:36:44:69:e0:30:6c:b5:48:b4:26:
23:52:7e:40:fc:a6:2f:98:7d:2e:ed:d8:67:a4:3e:e6:0f:e5:
8a:ba:17:ae:cd:02:b8:ee:80:9f:07:4a:30:f1:56:91:b4:cf:
10:65:76:73:d6:ed:22:7b:db:fa:bf:7f:82:80:98:25:97:2f:
aa:8c:30:20:b7:40:2a:a7:9e:a7:5e:84:e1:b1:89:2c:b0:32:
ff:50:d9:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVbEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjEzMDkyNDQzWhcNMjYwMTMxMDkyNDQzWjAYMRYw
FAYDVQQDEw02N2FkYmE1ZS1jYWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqxiww8sZNq2NjUzR7/hfX9fyDeYWIpk6vXSG3bJs/4fiD+sKHRfEF2pr
nLhGFCtZd2LRtSDxA0TtpOht9ZXYRAP7vLIe7y69Lk4+1zbbXEv21/er98adSpll
DkBHMqW9ZadoEBljB6EohPQWQUvO6NPrpNpsE/goobSi2OH13ZmjMRDyv1T6Qu7S
YsuGKUNWhXHYd6PmF6riqCR/LjA5v/cyv4sjV1vhhDJMKL+bKrpx0HY97Csy+mGO
bu6ibQ/y9fLKKUAoXOEcoK7jTzmmq54ZP2Hq5+rahJ3qchot6J5eoI3/GU5jACIv
owr3y8eYV28BPMk+GyAigfq3f28t6wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJuw
We/bnqlr8ZONG6GNKgDEq1TLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RDkzMUYzMkU5RUMxMUVGQjYwRUQ3OTA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsToMA0GCSqGSIb3DQEB
CwUAA4IBAQBXpluPNXdPw0YFQXTm2VFmDIVwgNbvRdoAbnhtHIgxFe/JNgaSmJAx
ViiaSKeKyqhgTzTUjyhmolDhViXqt5mWK2QxTjcArle33EEtovEySKBIFnwiX6yp
y/rxcHSzGxWaYMHuyZVBAtdN1tk41GhVNjpw8fD/K6/bynEQarbcytUH+NYcAj7l
ODgdS40jkhXITbcpuANmyflJ5nkw1qP8HXJl3eBvNp2pHTZEaeAwbLVItCYjUn5A
/KYvmH0u7dhnpD7mD+WKuheuzQK47oCfB0ow8VaRtM8QZXZz1u0ie9v6v3+CgJgl
ly+qjDAgt0Aqp56nXoThsYkssDL/UNmI
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:05:40 2025 by rpki-client