Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AD9BB9CFB2B11EF80ACEA6B762E951A.roa
File: 6AD9BB9CFB2B11EF80ACEA6B762E951A.roa (raw, json)
Hash identifier: gJlGpucdBXu2jvkMFWp/g/YVv++uVkLG/YFATqj+f40=
Subject key identifier: 5E:8C:77:C9:37:E7:16:A5:08:77:2E:02:73:BD:3F:3C:84:08:6B:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0172C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AD9BB9CFB2B11EF80ACEA6B762E951A.roa
Signing time: Fri 07 Mar 2025 08:08:57 +0000
ROA not before: Fri 07 Mar 2025 08:08:52 +0000
ROA not after: Wed 16 Apr 2025 08:08:52 +0000
asID: 142032
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94920 (0x172c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 7 08:08:52 2025 GMT
Not After : Apr 16 08:08:52 2025 GMT
Subject: CN=67caa999-337a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:70:79:6f:03:6b:92:d7:9d:74:97:30:4a:57:
7e:55:53:71:07:8e:10:57:71:49:a6:63:27:a7:17:
4f:6c:c9:fc:ce:34:d9:80:3b:c4:10:16:f4:05:2f:
37:26:b2:04:2b:4c:ed:a1:9a:e9:fc:a9:bb:d4:65:
f0:86:b2:72:91:77:15:64:37:54:70:07:69:67:cc:
4c:47:f5:66:83:b6:86:df:c7:68:73:34:dc:c1:5a:
a8:6e:d0:a6:6a:bd:5c:c5:04:da:29:01:83:3a:ce:
77:bf:7d:33:ac:35:2f:79:d5:68:71:d2:8c:ab:b1:
7a:cd:11:22:ba:e3:8c:cf:8c:c4:1e:31:03:87:a5:
32:a1:00:42:70:ef:9e:b6:aa:41:ec:3e:9f:22:23:
c9:e5:8b:a9:9a:4e:c0:bc:8c:ac:93:87:32:6f:9c:
b7:02:5c:8d:52:41:ce:f4:77:89:44:27:13:24:fd:
03:10:56:e9:bb:57:ef:5b:3f:27:fe:fe:9e:13:47:
2c:44:e7:b7:d0:06:02:7a:73:04:88:8f:dc:52:f2:
fc:6a:95:4b:65:e9:18:52:3c:b8:87:4e:92:79:0a:
80:9c:dc:dc:13:0a:2e:46:4d:00:8c:69:1c:ee:52:
8b:18:5a:a8:fe:5b:2f:cc:77:f8:be:72:eb:85:1b:
2b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8C:77:C9:37:E7:16:A5:08:77:2E:02:73:BD:3F:3C:84:08:6B:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AD9BB9CFB2B11EF80ACEA6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:a5:e4:26:13:3d:45:48:72:2d:d6:20:4a:02:5a:ea:4a:43:
64:85:e4:4e:06:59:ea:5a:21:d2:65:a5:45:15:cf:57:dd:2d:
53:d9:00:b3:04:17:fd:d3:5e:d4:90:3f:70:64:0d:f6:c3:89:
13:23:d2:ae:aa:b9:24:2f:79:7a:05:2e:c0:22:2f:28:f1:f5:
14:a7:5f:08:ea:d5:26:5a:3a:72:58:03:3a:2d:31:46:ae:5a:
0b:85:df:f9:a4:42:a7:1d:b1:36:f6:9b:43:4b:38:ff:cb:b4:
77:1f:d8:67:de:1c:4b:54:60:c3:df:e2:e0:e1:ab:f5:8b:3c:
f4:86:b5:80:ac:67:29:5f:17:01:7f:ba:5c:1d:ab:7f:fc:d1:
a1:93:94:55:27:ae:54:9b:63:3d:83:d3:ec:d4:ac:d5:26:cb:
1b:44:f9:a2:26:92:a8:cf:34:77:72:a1:01:ff:fb:da:80:5b:
f1:24:4e:f1:a7:08:bd:a0:c6:84:49:24:32:0e:32:c4:f9:c9:
56:ba:2e:3d:30:95:4d:ae:91:42:ce:68:55:2d:0c:ce:31:8e:
c9:d4:0b:98:62:3f:a6:60:af:c0:a2:54:5f:c7:95:c5:b0:c7:
f4:2d:26:22:4c:cc:4a:c3:ec:2a:6b:74:aa:6c:fb:b2:dc:58:
8f:21:4a:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXLIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzA3MDgwODUyWhcNMjUwNDE2MDgwODUyWjAYMRYw
FAYDVQQDEw02N2NhYTk5OS0zMzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3XB5bwNrkteddJcwSld+VVNxB44QV3FJpmMnpxdPbMn8zjTZgDvEEBb0
BS83JrIEK0ztoZrp/Km71GXwhrJykXcVZDdUcAdpZ8xMR/Vmg7aG38doczTcwVqo
btCmar1cxQTaKQGDOs53v30zrDUvedVocdKMq7F6zREiuuOMz4zEHjEDh6UyoQBC
cO+etqpB7D6fIiPJ5Yupmk7AvIysk4cyb5y3AlyNUkHO9HeJRCcTJP0DEFbpu1fv
Wz8n/v6eE0csROe30AYCenMEiI/cUvL8apVLZekYUjy4h06SeQqAnNzcEwouRk0A
jGkc7lKLGFqo/lsvzHf4vnLrhRsrXwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF6M
d8k35xalCHcuAnO9PzyECGtFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QUQ5QkI5Q0ZCMkIxMUVGODBBQ0VBNkI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmt4QMA0GCSqGSIb3DQEB
CwUAA4IBAQBKpeQmEz1FSHIt1iBKAlrqSkNkheROBlnqWiHSZaVFFc9X3S1T2QCz
BBf9017UkD9wZA32w4kTI9KuqrkkL3l6BS7AIi8o8fUUp18I6tUmWjpyWAM6LTFG
rloLhd/5pEKnHbE29ptDSzj/y7R3H9hn3hxLVGDD3+Lg4av1izz0hrWArGcpXxcB
f7pcHat//NGhk5RVJ65Um2M9g9Ps1KzVJssbRPmiJpKozzR3cqEB//vagFvxJE7x
pwi9oMaESSQyDjLE+clWui49MJVNrpFCzmhVLQzOMY7J1AuYYj+mYK/AolRfx5XF
sMf0LSYiTMxKw+wqa3SqbPuy3FiPIUpY
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:40 2025 by rpki-client