Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84572BCCF5C711EF862A0154762E951A.roa
File: 84572BCCF5C711EF862A0154762E951A.roa (raw, json)
Hash identifier: mB4JMkK0qclbl0R+h6p2ZHqQLtVNqqNDxc/1Gmig9eI=
Subject key identifier: E1:AE:81:41:32:C5:83:AE:77:7B:43:9B:CD:D9:24:6E:E4:1B:3A:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016AF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84572BCCF5C711EF862A0154762E951A.roa
Signing time: Fri 28 Feb 2025 11:31:14 +0000
ROA not before: Fri 28 Feb 2025 11:31:09 +0000
ROA not after: Fri 11 Apr 2025 11:31:09 +0000
asID: 63139
IP address blocks: 154.203.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92912 (0x16af0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 11:31:09 2025 GMT
Not After : Apr 11 11:31:09 2025 GMT
Subject: CN=67c19e82-2aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:9e:80:ce:c0:44:10:8f:7d:0e:a6:24:08:
70:55:88:63:b5:dd:7d:61:c5:a3:ca:b1:4a:4f:45:
a0:03:7e:56:a0:c3:f6:3e:c9:78:d9:7f:12:a7:2c:
c2:ce:c3:07:00:77:88:6c:72:8d:b5:f4:27:2e:68:
4c:5d:e3:b2:2c:8a:f6:c9:db:d9:61:64:ab:1e:e0:
91:0f:04:f6:22:34:db:8f:45:87:de:9a:28:36:56:
d0:53:3c:f5:4a:47:22:6b:76:e2:82:37:88:95:fc:
fb:86:93:26:4d:52:46:91:d8:76:c1:e0:f9:24:cd:
1f:75:46:77:a0:e7:34:75:bf:28:32:4f:00:9d:5e:
69:76:78:4e:74:29:1d:f1:e5:6b:4b:56:27:b1:8a:
49:6c:dc:16:6a:c1:32:0f:e2:80:91:36:80:be:8e:
5a:62:97:90:f4:a0:2c:e3:7b:ad:f9:ba:20:e9:41:
f0:b9:fe:bb:90:f5:1f:c8:28:78:d7:8e:76:cf:a4:
f7:00:18:83:7d:7b:0e:2d:da:f2:33:fe:b4:92:d5:
73:de:da:a0:be:10:c5:78:3c:92:2b:68:5b:69:9d:
f8:2c:d4:9c:c7:3d:6f:66:00:1e:ac:a9:db:e8:65:
1d:80:32:2b:d9:73:e7:14:12:e7:ec:a8:c1:b4:31:
6c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AE:81:41:32:C5:83:AE:77:7B:43:9B:CD:D9:24:6E:E4:1B:3A:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84572BCCF5C711EF862A0154762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.162.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c7:ed:89:6f:d1:74:1f:e7:8e:3b:43:e6:b1:86:a6:99:9a:
99:dc:2e:37:ef:1c:28:50:af:58:a6:ac:dd:ec:30:47:32:42:
3a:dc:a5:c5:b2:1f:93:5a:8b:1e:cc:1d:91:00:20:23:ea:ad:
74:47:a7:18:ef:9d:ed:72:f4:d1:9d:aa:ff:d1:f4:6c:04:a1:
67:ff:d4:b8:3d:b8:77:db:40:e2:0c:e6:49:68:44:70:66:1e:
f9:70:d4:5a:c5:5b:c1:1f:1c:36:78:f5:ac:18:df:ba:f0:96:
f5:86:7e:df:46:f6:70:6b:f9:1f:c0:d4:61:df:ae:34:33:72:
7d:98:2d:dc:1d:b7:d2:2d:3a:90:15:45:ca:ad:bc:ad:d9:02:
9f:4e:48:1a:61:d6:ec:2e:41:c4:19:ff:36:25:2e:25:28:b4:
41:e2:de:da:59:8b:b1:7b:d2:8b:d3:96:8b:ef:a2:c6:61:87:
6c:85:58:49:85:ce:f2:d2:d1:e1:97:28:4b:fb:0a:39:19:9f:
e9:0f:69:de:d2:0b:33:57:c2:ec:f9:53:f8:66:79:34:77:77:
7c:8f:c3:22:bd:5e:34:3d:9e:21:ea:55:69:a0:bc:0c:e6:ff:
2e:06:07:94:e8:a5:6e:8f:0a:2b:b4:a1:8c:54:ba:c1:f7:d2:
3a:c5:5f:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWrwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MTEzMTA5WhcNMjUwNDExMTEzMTA5WjAYMRYw
FAYDVQQDEw02N2MxOWU4Mi0yYWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArEuegM7ARBCPfQ6mJAhwVYhjtd19YcWjyrFKT0WgA35WoMP2Psl42X8S
pyzCzsMHAHeIbHKNtfQnLmhMXeOyLIr2ydvZYWSrHuCRDwT2IjTbj0WH3pooNlbQ
Uzz1Skcia3bigjeIlfz7hpMmTVJGkdh2weD5JM0fdUZ3oOc0db8oMk8AnV5pdnhO
dCkd8eVrS1YnsYpJbNwWasEyD+KAkTaAvo5aYpeQ9KAs43ut+bog6UHwuf67kPUf
yCh41452z6T3ABiDfXsOLdryM/60ktVz3tqgvhDFeDySK2hbaZ34LNScxz1vZgAe
rKnb6GUdgDIr2XPnFBLn7KjBtDFsgQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOGu
gUEyxYOud3tDm83ZJG7kGzoJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NDU3MkJDQ0Y1QzcxMUVGODYyQTAxNTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsuiMA0GCSqGSIb3DQEB
CwUAA4IBAQBcx+2Jb9F0H+eOO0PmsYammZqZ3C437xwoUK9Ypqzd7DBHMkI63KXF
sh+TWosezB2RACAj6q10R6cY753tcvTRnar/0fRsBKFn/9S4Pbh320DiDOZJaERw
Zh75cNRaxVvBHxw2ePWsGN+68Jb1hn7fRvZwa/kfwNRh3640M3J9mC3cHbfSLTqQ
FUXKrbyt2QKfTkgaYdbsLkHEGf82JS4lKLRB4t7aWYuxe9KL05aL76LGYYdshVhJ
hc7y0tHhlyhL+wo5GZ/pD2ne0gszV8Ls+VP4Znk0d3d8j8MivV40PZ4h6lVpoLwM
5v8uBgeU6KVujwortKGMVLrB99I6xV8G
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:34 2025 by rpki-client