Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/695AC5E6F5CB11EFA82D5D6F762E951A.roa
File: 695AC5E6F5CB11EFA82D5D6F762E951A.roa (raw, json)
Hash identifier: XK2FfOyg/XvIwisQ6X86VdDW9ImVAA5B614YhYgUVOs=
Subject key identifier: F3:ED:83:3F:69:B2:D7:95:E6:A0:C9:51:34:7E:A2:FD:64:23:E0:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B0A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/695AC5E6F5CB11EFA82D5D6F762E951A.roa
Signing time: Fri 28 Feb 2025 11:59:07 +0000
ROA not before: Fri 28 Feb 2025 11:58:58 +0000
ROA not after: Fri 11 Apr 2025 11:58:58 +0000
asID: 138915
IP address blocks: 154.203.154.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92938 (0x16b0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 11:58:58 2025 GMT
Not After : Apr 11 11:58:58 2025 GMT
Subject: CN=67c1a50b-fb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:8a:8a:a9:ce:ca:81:4f:c3:91:d7:a7:ab:
b9:e5:4a:2d:10:66:0f:92:f1:93:64:a7:a5:af:c2:
17:9f:ee:6d:20:06:ca:76:13:62:9b:d2:ad:1c:39:
fc:0e:99:8c:04:a9:10:22:55:21:66:0f:00:5a:2e:
2d:b0:be:24:7a:3a:f2:2c:1c:d9:be:85:d5:09:50:
55:ab:1b:5d:de:b7:98:9a:97:4b:86:44:09:f4:62:
78:fd:04:1d:a4:b3:ef:91:3c:f9:e5:89:7e:c8:54:
70:52:19:ea:6d:40:02:11:e1:c6:2f:79:b4:db:e2:
83:be:9f:0d:4b:a0:b6:44:ed:ac:e3:24:1b:32:48:
d1:c6:75:d2:c2:c7:13:33:e9:bf:79:0c:3a:87:58:
3a:c4:55:70:c4:f9:6d:1a:60:97:7c:0a:ca:98:21:
2a:80:f7:53:6d:7c:38:16:a9:fe:9d:1b:9f:d8:ab:
9c:11:5c:29:da:78:46:2b:2e:6a:01:c6:6b:fc:dd:
a6:64:1a:8f:28:d3:13:dc:63:6a:27:38:f5:d8:ca:
62:7d:e5:45:11:c3:6d:fb:c1:e3:0b:fe:a2:0c:df:
bb:2d:2b:14:e7:ac:c8:16:95:c9:c7:93:56:22:a6:
38:12:9b:8c:8b:4f:96:30:87:ca:47:4c:8d:f8:8e:
98:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:ED:83:3F:69:B2:D7:95:E6:A0:C9:51:34:7E:A2:FD:64:23:E0:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/695AC5E6F5CB11EFA82D5D6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.154.0/23
Signature Algorithm: sha256WithRSAEncryption
be:0a:2c:4b:be:58:20:8b:57:0c:37:1a:68:f4:40:fe:47:d6:
54:77:27:af:22:45:15:c1:20:c7:22:46:fe:16:e0:90:d9:66:
61:2c:75:c7:ca:81:4b:ea:c9:8b:23:f1:b0:10:87:22:01:21:
6c:71:d6:65:b5:37:a5:50:30:70:b3:c9:58:37:38:59:b6:cd:
df:db:06:2c:e7:12:12:ea:40:6b:84:6b:d8:0d:a2:a5:00:00:
bf:c5:71:aa:ee:1a:a2:f7:9f:14:17:a7:c6:0d:55:77:29:0a:
32:06:55:47:56:e9:1c:49:e1:92:b2:47:4a:ce:ac:45:fa:03:
0b:ee:c6:b3:08:df:5e:75:bb:78:66:61:7f:36:9f:41:33:ad:
b8:ea:84:d3:98:29:4e:73:f7:9c:45:00:87:2f:79:ef:7e:3d:
6e:de:b6:90:54:6d:f4:89:1c:ca:f8:c1:09:28:df:2c:db:f4:
97:cf:16:77:4e:d8:c9:67:60:9f:70:4c:25:c6:14:39:75:f9:
ae:8f:fc:6b:dc:cf:2b:04:ed:b4:d1:4e:4d:64:5d:95:66:cc:
da:a5:e0:cd:46:fa:14:1e:23:6f:1a:aa:72:f4:4c:3d:da:1e:
68:d3:9f:ee:43:a2:20:2f:fa:9c:cc:7a:b8:bf:20:58:7f:a6:
3f:7b:df:c3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWsKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MTE1ODU4WhcNMjUwNDExMTE1ODU4WjAYMRYw
FAYDVQQDEw02N2MxYTUwYi1mYjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqcOKiqnOyoFPw5HXp6u55UotEGYPkvGTZKelr8IXn+5tIAbKdhNim9Kt
HDn8DpmMBKkQIlUhZg8AWi4tsL4kejryLBzZvoXVCVBVqxtd3reYmpdLhkQJ9GJ4
/QQdpLPvkTz55Yl+yFRwUhnqbUACEeHGL3m02+KDvp8NS6C2RO2s4yQbMkjRxnXS
wscTM+m/eQw6h1g6xFVwxPltGmCXfArKmCEqgPdTbXw4Fqn+nRuf2KucEVwp2nhG
Ky5qAcZr/N2mZBqPKNMT3GNqJzj12MpifeVFEcNt+8HjC/6iDN+7LSsU56zIFpXJ
x5NWIqY4EpuMi0+WMIfKR0yN+I6Y2wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPPt
gz9psteV5qDJUTR+ov1kI+DQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82OTVBQzVFNkY1Q0IxMUVGQTgyRDVENkY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsuaMA0GCSqGSIb3DQEB
CwUAA4IBAQC+CixLvlggi1cMNxpo9ED+R9ZUdyevIkUVwSDHIkb+FuCQ2WZhLHXH
yoFL6smLI/GwEIciASFscdZltTelUDBws8lYNzhZts3f2wYs5xIS6kBrhGvYDaKl
AAC/xXGq7hqi958UF6fGDVV3KQoyBlVHVukcSeGSskdKzqxF+gML7sazCN9edbt4
ZmF/Np9BM6246oTTmClOc/ecRQCHL3nvfj1u3raQVG30iRzK+MEJKN8s2/SXzxZ3
TtjJZ2CfcEwlxhQ5dfmuj/xr3M8rBO200U5NZF2VZszapeDNRvoUHiNvGqpy9Ew9
2h5o05/uQ6IgL/qczHq4vyBYf6Y/e9/D
-----END CERTIFICATE-----
Generated at Thu Apr 10 07:00:01 2025 by rpki-client