Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A87096EF44211EFA810C055762E951A.roa
File: 6A87096EF44211EFA810C055762E951A.roa (raw, json)
Hash identifier: dZMTsAYPTpU2LidK9ajU+vsJHulR7eR8lc9QymwjKuI=
Subject key identifier: 29:5C:93:6F:1B:65:68:BB:F9:A2:46:92:7A:D4:29:EE:5D:BE:97:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016382
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A87096EF44211EFA810C055762E951A.roa
Signing time: Wed 26 Feb 2025 13:05:56 +0000
ROA not before: Wed 26 Feb 2025 13:05:52 +0000
ROA not after: Fri 20 Feb 2026 13:05:52 +0000
asID: 984
IP address blocks: 154.83.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91010 (0x16382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:05:52 2025 GMT
Not After : Feb 20 13:05:52 2026 GMT
Subject: CN=67bf11b4-a19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:13:fc:23:4f:d9:d0:15:05:6e:12:bd:00:
ac:49:a3:ac:5e:77:32:aa:6a:cb:e8:83:0a:2d:51:
be:1d:c3:4b:5d:79:d8:0b:05:a6:3f:2b:1e:2e:62:
1c:2d:16:56:84:89:23:34:af:5a:51:46:cf:86:af:
19:af:3a:b1:5a:35:f4:1d:5d:f3:8f:5c:f2:0b:27:
81:13:63:6d:cc:41:6b:dc:2d:43:73:48:c9:d4:75:
4b:57:e3:31:93:be:8a:d5:5e:12:5b:94:22:2c:0c:
4c:4b:a3:d8:b3:ca:5c:ba:27:62:8e:aa:1d:81:c2:
19:6a:f7:56:c7:d4:4f:52:1c:2e:f3:aa:1f:db:a2:
90:16:49:88:dc:cb:bc:32:6d:0e:39:5e:2f:b1:06:
0c:1a:3b:71:06:97:7f:ed:b7:6a:95:d4:90:50:c1:
8e:90:ca:b6:4f:30:1c:7b:2a:e1:79:4e:89:86:cc:
78:31:75:4f:48:38:1e:0e:ae:95:be:5a:76:4c:64:
be:9b:28:e6:0c:ef:6c:72:8f:dc:50:53:be:03:9f:
ab:36:57:3b:72:25:c2:d1:ae:bc:b4:ac:a2:2c:1d:
4c:4f:60:e7:2a:af:9f:b1:45:4e:b5:9b:ea:ce:5a:
81:92:a1:ee:d7:ef:27:8a:89:ca:7d:2b:7a:40:51:
5a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5C:93:6F:1B:65:68:BB:F9:A2:46:92:7A:D4:29:EE:5D:BE:97:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A87096EF44211EFA810C055762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.162.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f5:9f:c4:5a:91:33:ab:c0:8e:52:40:32:bd:b9:de:0b:b0:
41:86:a7:fd:ea:3e:e1:89:a6:29:77:f5:e1:3d:9f:98:0b:0a:
aa:06:25:1f:06:9b:59:e0:fa:61:7d:40:86:b2:93:a0:f1:d3:
0d:f6:46:c8:bb:7e:af:00:94:37:a0:0f:f0:34:8d:67:c4:47:
71:a1:aa:38:7e:0d:9b:77:a4:1f:c1:08:0d:54:07:6b:38:c2:
0f:13:db:2b:bc:fd:af:fc:45:72:da:0c:6f:05:a3:72:ef:7b:
c8:22:3a:70:e0:dd:c2:a1:ff:0d:b9:ad:a2:0e:cc:ce:66:fd:
f2:7b:42:f7:07:78:81:ea:de:94:1c:4b:cf:76:da:d9:3f:3b:
88:2c:67:8b:5c:84:2a:9b:8b:fd:0c:40:41:e3:8d:11:24:bf:
95:49:a8:1f:ef:6e:5e:f6:6a:80:14:b1:25:af:9a:3a:3a:f9:
33:4a:cc:ed:34:c2:ce:78:d8:bc:9e:5d:44:59:e3:6e:8c:d9:
0d:a6:57:57:42:fc:f1:78:60:c7:a1:0d:b3:0f:09:34:d5:10:
a5:45:9a:35:53:2d:1c:66:a1:ec:2d:6e:45:39:c6:bc:57:b5:
a4:23:35:af:6d:64:b7:3b:44:ba:7d:dc:39:7f:7b:76:fb:60:
4b:19:4d:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWOCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTMwNTUyWhcNMjYwMjIwMTMwNTUyWjAYMRYw
FAYDVQQDEw02N2JmMTFiNC1hMTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu9AT/CNP2dAVBW4SvQCsSaOsXncyqmrL6IMKLVG+HcNLXXnYCwWmPyse
LmIcLRZWhIkjNK9aUUbPhq8ZrzqxWjX0HV3zj1zyCyeBE2NtzEFr3C1Dc0jJ1HVL
V+Mxk76K1V4SW5QiLAxMS6PYs8pcuidijqodgcIZavdWx9RPUhwu86of26KQFkmI
3Mu8Mm0OOV4vsQYMGjtxBpd/7bdqldSQUMGOkMq2TzAceyrheU6Jhsx4MXVPSDge
Dq6Vvlp2TGS+myjmDO9sco/cUFO+A5+rNlc7ciXC0a68tKyiLB1MT2DnKq+fsUVO
tZvqzlqBkqHu1+8nionKfSt6QFFamwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFClc
k28bZWi7+aJGknrUKe5dvpcdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QTg3MDk2RUY0NDIxMUVGQTgxMEMwNTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlOiMA0GCSqGSIb3DQEB
CwUAA4IBAQBn9Z/EWpEzq8COUkAyvbneC7BBhqf96j7hiaYpd/XhPZ+YCwqqBiUf
BptZ4PphfUCGspOg8dMN9kbIu36vAJQ3oA/wNI1nxEdxoao4fg2bd6QfwQgNVAdr
OMIPE9srvP2v/EVy2gxvBaNy73vIIjpw4N3Cof8Nua2iDszOZv3ye0L3B3iB6t6U
HEvPdtrZPzuILGeLXIQqm4v9DEBB440RJL+VSagf725e9mqAFLElr5o6OvkzSszt
NMLOeNi8nl1EWeNujNkNpldXQvzxeGDHoQ2zDwk01RClRZo1Uy0cZqHsLW5FOca8
V7WkIzWvbWS3O0S6fdw5f3t2+2BLGU3A
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:00 2025 by rpki-client