Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/668ACF4AF43711EFAF87ED89762E951A.roa
File: 668ACF4AF43711EFAF87ED89762E951A.roa (raw, json)
Hash identifier: iBcvqUVo/Db+oFUkltdZuVlBYQh4CICfNkhhP5GRWEA=
Subject key identifier: EF:32:8A:46:1B:A2:B2:71:3C:EF:10:B7:31:34:99:C7:9C:4B:55:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/668ACF4AF43711EFAF87ED89762E951A.roa
Signing time: Wed 26 Feb 2025 11:47:05 +0000
ROA not before: Wed 26 Feb 2025 11:47:02 +0000
ROA not after: Fri 20 Feb 2026 11:47:02 +0000
asID: 984
IP address blocks: 154.199.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90815 (0x162bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:47:02 2025 GMT
Not After : Feb 20 11:47:02 2026 GMT
Subject: CN=67beff39-fa7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:52:53:1f:fa:da:67:67:9d:26:48:58:1c:60:
2d:50:58:d1:83:01:6b:a5:e8:f8:d9:08:75:0f:a7:
56:58:68:f6:da:73:4d:4f:ca:ef:4f:c8:7f:c8:f4:
0c:6c:8e:2d:92:01:1b:eb:76:43:f7:c3:fb:0b:e9:
57:f6:7f:9e:98:34:15:44:52:79:dc:96:f7:b4:53:
40:6f:7d:fe:af:dd:02:ed:3f:17:02:ff:90:bd:a5:
06:cc:ce:0a:f3:c9:76:94:f4:57:80:be:d4:17:70:
2f:b8:53:85:97:4d:98:37:3c:46:f9:e8:d7:30:e3:
40:55:50:87:f5:e1:e4:24:35:4f:e2:d2:88:c1:83:
c9:eb:13:0f:5b:30:d0:35:f5:10:cd:e3:82:79:c3:
0c:92:3a:18:50:5f:a5:32:84:ba:ff:a5:84:b0:fb:
f1:a3:3e:ed:1d:bd:1a:59:7f:07:99:4b:9e:36:0c:
a1:6e:f3:cd:c2:01:18:80:5f:32:64:e3:d3:19:dc:
e0:e4:6d:e3:7d:4f:d8:16:04:64:02:55:1f:58:bc:
c3:f9:92:80:f2:96:93:18:96:4a:f1:f7:ef:3d:3c:
b4:0a:02:e1:74:d8:6b:fd:dc:c8:8a:d8:75:50:e3:
2d:9b:b4:3e:51:b7:df:43:a7:c6:b8:73:3f:36:cc:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:32:8A:46:1B:A2:B2:71:3C:EF:10:B7:31:34:99:C7:9C:4B:55:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/668ACF4AF43711EFAF87ED89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.141.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c5:cf:44:16:eb:4b:ca:e1:b5:8e:c7:80:14:e9:34:33:3a:
4b:82:cf:64:ec:30:f2:cd:71:e6:14:16:58:88:9d:dd:15:af:
3c:89:6b:15:8d:8b:27:84:4a:77:ac:52:e3:ea:25:08:b3:61:
70:17:4c:b5:ec:ce:d7:1d:23:8f:c1:2e:3e:71:51:70:d8:ab:
39:df:2b:4c:8d:c6:b9:6f:1d:b9:72:46:09:b2:e3:1f:70:ba:
e2:2b:43:7f:5a:1e:ea:38:d0:cb:a9:47:f0:f5:37:5e:dd:ed:
b2:6e:2b:d5:53:d9:06:28:65:1f:17:be:cd:20:51:87:97:cb:
76:63:87:67:e5:10:0c:15:99:c2:47:83:8d:12:72:9d:ac:ab:
77:68:22:b9:d0:07:63:92:4c:df:04:64:7e:f8:21:2d:12:30:
6a:06:58:3c:09:03:36:5f:95:74:6e:ac:9a:c3:84:d2:31:13:
a0:56:f1:eb:ac:7d:b8:11:8f:9d:f9:f4:9c:53:a0:c2:dc:5f:
75:8b:c9:43:fa:dd:b5:6c:e2:26:6e:44:1f:26:8b:f2:f2:35:
a6:80:5d:8c:42:d6:d7:4e:d4:18:8a:f7:6a:ce:3b:cc:10:d4:
a7:96:25:bf:0d:af:2f:21:3e:7e:01:5b:64:ea:36:5b:2d:12:
31:fb:48:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWK/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTE0NzAyWhcNMjYwMjIwMTE0NzAyWjAYMRYw
FAYDVQQDEw02N2JlZmYzOS1mYTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3FJTH/raZ2edJkhYHGAtUFjRgwFrpej42Qh1D6dWWGj22nNNT8rvT8h/
yPQMbI4tkgEb63ZD98P7C+lX9n+emDQVRFJ53Jb3tFNAb33+r90C7T8XAv+QvaUG
zM4K88l2lPRXgL7UF3AvuFOFl02YNzxG+ejXMONAVVCH9eHkJDVP4tKIwYPJ6xMP
WzDQNfUQzeOCecMMkjoYUF+lMoS6/6WEsPvxoz7tHb0aWX8HmUueNgyhbvPNwgEY
gF8yZOPTGdzg5G3jfU/YFgRkAlUfWLzD+ZKA8paTGJZK8ffvPTy0CgLhdNhr/dzI
ith1UOMtm7Q+UbffQ6fGuHM/NsweLQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFO8y
ikYborJxPO8QtzE0mcecS1XRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NjhBQ0Y0QUY0MzcxMUVGQUY4N0VEODk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmseNMA0GCSqGSIb3DQEB
CwUAA4IBAQCTxc9EFutLyuG1jseAFOk0MzpLgs9k7DDyzXHmFBZYiJ3dFa88iWsV
jYsnhEp3rFLj6iUIs2FwF0y17M7XHSOPwS4+cVFw2Ks53ytMjca5bx25ckYJsuMf
cLriK0N/Wh7qONDLqUfw9Tde3e2ybivVU9kGKGUfF77NIFGHl8t2Y4dn5RAMFZnC
R4ONEnKdrKt3aCK50AdjkkzfBGR++CEtEjBqBlg8CQM2X5V0bqyaw4TSMROgVvHr
rH24EY+d+fScU6DC3F91i8lD+t21bOImbkQfJovy8jWmgF2MQtbXTtQYivdqzjvM
ENSnliW/Da8vIT5+AVtk6jZbLRIx+0hd
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:56 2025 by rpki-client