Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65BE68C6F3F911EFA9031861762E951A.roa
File: 65BE68C6F3F911EFA9031861762E951A.roa (raw, json)
Hash identifier: 33sojMAaQXr+JwLGMEjPCWB3jQcG0JLl6pZhxxblSOc=
Subject key identifier: 2C:69:C5:B2:B7:89:56:3B:8F:4A:0E:05:00:64:65:0D:BE:07:4F:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65BE68C6F3F911EFA9031861762E951A.roa
Signing time: Wed 26 Feb 2025 04:23:15 +0000
ROA not before: Wed 26 Feb 2025 04:23:11 +0000
ROA not after: Thu 19 Feb 2026 04:23:11 +0000
asID: 984
IP address blocks: 154.203.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90321 (0x160d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 04:23:11 2025 GMT
Not After : Feb 19 04:23:11 2026 GMT
Subject: CN=67be9733-da10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:82:54:9d:32:27:2d:b6:2d:8d:e9:19:cf:5c:
0f:6e:9d:bb:68:5b:70:86:84:9b:62:c7:77:81:be:
46:ac:1b:de:28:34:13:38:67:2f:b2:fa:91:51:c8:
3e:e5:8a:83:06:ba:3b:d0:1d:57:0e:31:01:ae:10:
80:9f:6f:ab:74:46:ae:52:e1:00:f4:f2:11:da:44:
3c:4f:fc:59:18:59:11:0b:1e:c5:cb:d7:d8:b2:9c:
cc:57:9c:e5:5f:32:ea:73:1c:f4:75:53:67:4a:0e:
26:53:87:3c:86:41:36:e1:8a:75:c6:a6:02:d5:24:
e1:fc:d9:59:4a:48:9d:66:ae:f1:ad:2d:e0:6c:b1:
78:3d:15:1b:c6:78:71:4b:44:e8:91:72:10:76:3f:
0e:ad:86:ce:bb:d3:4b:aa:1c:9c:51:b9:d9:ee:fe:
24:e1:a1:42:d7:4b:3b:08:b9:79:94:3b:f8:89:fe:
d3:e6:fc:49:cb:5e:12:2a:45:4b:47:3a:b5:5a:60:
20:bb:4c:6d:9b:37:1c:2f:11:da:d7:ad:04:96:e7:
ef:4a:48:c6:8b:44:ef:c9:c6:28:de:7c:da:82:09:
b7:24:e2:44:38:8f:83:23:23:93:0a:9a:3c:ba:71:
0d:fb:71:fa:d9:e3:b1:3b:a2:3e:42:83:7f:95:ee:
d7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:69:C5:B2:B7:89:56:3B:8F:4A:0E:05:00:64:65:0D:BE:07:4F:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65BE68C6F3F911EFA9031861762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.196.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:2c:e3:fa:69:dc:83:3e:0f:70:47:05:b4:1b:b1:41:16:4f:
68:ff:17:44:95:fd:8c:bb:f7:72:13:00:15:8a:a1:d5:eb:d6:
25:c7:2d:ae:af:5d:7b:8b:f1:7f:73:de:75:4c:cc:bc:f4:a2:
a9:eb:7b:fa:7a:1b:54:a8:7e:f3:f9:d0:02:25:64:7a:97:e0:
96:bd:dd:df:5e:bc:7f:93:36:a7:b9:68:08:8e:96:c4:0b:93:
47:bd:36:fd:2e:77:48:6b:49:68:bb:d9:8e:5f:e8:c0:5f:1d:
4f:42:98:bf:42:5d:c9:9f:4b:f6:0b:d6:a9:f4:f7:d1:19:40:
01:49:d7:be:c8:3a:d9:99:1c:ac:5f:bf:a4:95:58:07:89:1d:
b0:b9:1b:46:bf:dc:cf:ef:7f:9f:64:1e:bf:f3:55:e0:50:e6:
d5:53:9e:f2:e4:e0:49:c2:e1:02:02:0b:d2:37:52:7a:cf:43:
bc:bb:ac:88:d4:6f:61:43:5e:97:f2:45:c3:1d:d7:8c:6c:9e:
d9:2c:e1:60:8d:d6:33:35:e4:9f:86:a3:44:48:0f:17:5c:94:
58:fa:8b:9c:90:79:d8:9d:02:06:96:93:9c:51:ed:4e:1f:b1:
b1:c8:02:9f:87:43:4e:36:db:0a:56:e3:8a:c8:2f:08:8a:39:
cc:51:c1:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWDRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDQyMzExWhcNMjYwMjE5MDQyMzExWjAYMRYw
FAYDVQQDEw02N2JlOTczMy1kYTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7IJUnTInLbYtjekZz1wPbp27aFtwhoSbYsd3gb5GrBveKDQTOGcvsvqR
Ucg+5YqDBro70B1XDjEBrhCAn2+rdEauUuEA9PIR2kQ8T/xZGFkRCx7Fy9fYspzM
V5zlXzLqcxz0dVNnSg4mU4c8hkE24Yp1xqYC1STh/NlZSkidZq7xrS3gbLF4PRUb
xnhxS0TokXIQdj8OrYbOu9NLqhycUbnZ7v4k4aFC10s7CLl5lDv4if7T5vxJy14S
KkVLRzq1WmAgu0xtmzccLxHa160ElufvSkjGi0TvycYo3nzaggm3JOJEOI+DIyOT
Cpo8unEN+3H62eOxO6I+QoN/le7XWQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCxp
xbK3iVY7j0oOBQBkZQ2+B0/6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NUJFNjhDNkYzRjkxMUVGQTkwMzE4NjE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsvEMA0GCSqGSIb3DQEB
CwUAA4IBAQDGLOP6adyDPg9wRwW0G7FBFk9o/xdElf2Mu/dyEwAViqHV69Ylxy2u
r117i/F/c951TMy89KKp63v6ehtUqH7z+dACJWR6l+CWvd3fXrx/kzanuWgIjpbE
C5NHvTb9LndIa0lou9mOX+jAXx1PQpi/Ql3Jn0v2C9ap9PfRGUABSde+yDrZmRys
X7+klVgHiR2wuRtGv9zP73+fZB6/81XgUObVU57y5OBJwuECAgvSN1J6z0O8u6yI
1G9hQ16X8kXDHdeMbJ7ZLOFgjdYzNeSfhqNESA8XXJRY+ouckHnYnQIGlpOcUe1O
H7GxyAKfh0NONtsKVuOKyC8IijnMUcE7
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:30 2025 by rpki-client