Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90C38114F43F11EFBA93C441762E951A.roa
File: 90C38114F43F11EFBA93C441762E951A.roa (raw, json)
Hash identifier: IcgGWBIgfSOSO0phsFDGa4IMECq+BJcPKhqlZPNh720=
Subject key identifier: C2:45:DD:BC:6D:E9:D6:69:09:E9:6C:F9:8C:7D:FB:DA:1A:1D:43:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016344
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90C38114F43F11EFBA93C441762E951A.roa
Signing time: Wed 26 Feb 2025 12:45:32 +0000
ROA not before: Wed 26 Feb 2025 12:45:29 +0000
ROA not after: Fri 20 Feb 2026 12:45:29 +0000
asID: 984
IP address blocks: 154.83.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90948 (0x16344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:45:29 2025 GMT
Not After : Feb 20 12:45:29 2026 GMT
Subject: CN=67bf0cec-6bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:dd:df:b1:49:66:e9:7d:ad:55:64:b0:56:
ed:00:b9:2f:80:78:96:6f:0f:ba:02:0f:55:ee:12:
8d:23:18:ed:4c:d2:10:e3:23:3c:9d:19:0b:c3:88:
a0:e2:fb:f1:23:91:5b:b6:c2:7f:a3:e7:5b:72:69:
52:db:cf:31:d9:0a:aa:04:e8:d8:ed:01:fc:cd:22:
9b:41:71:7a:e9:ab:16:90:d9:f8:29:b0:3a:53:15:
bc:79:7a:97:7b:e5:b8:d6:4e:66:25:88:dd:e9:4a:
85:ed:cd:f3:5e:d4:ea:d8:c2:3d:22:fb:b1:fa:a6:
be:02:1e:e7:d9:ea:5a:28:66:3f:10:0d:9b:e4:33:
f5:b3:84:e6:d9:ef:65:0e:54:70:12:53:42:10:56:
51:a5:d1:7f:85:ce:7f:ca:6b:54:be:8c:de:02:cf:
25:4f:1d:82:19:87:3f:58:bc:44:f8:4e:bf:6b:b6:
cc:b8:bd:e9:89:f6:72:10:fe:ff:07:62:d5:84:58:
bc:62:69:5b:a5:c4:e9:3d:84:09:97:60:f5:90:60:
50:b6:ab:7f:dc:2d:b3:50:10:cb:22:e8:b7:fd:b6:
fe:ef:7f:82:7c:37:eb:d6:8d:59:aa:d9:27:12:75:
a3:be:fc:cb:fe:6f:88:c2:e8:34:78:98:ad:e7:e4:
7b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:45:DD:BC:6D:E9:D6:69:09:E9:6C:F9:8C:7D:FB:DA:1A:1D:43:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90C38114F43F11EFBA93C441762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.142.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:0c:00:cd:1d:f8:bd:b7:44:3f:c5:ed:3e:3a:c1:f0:12:20:
bc:cb:5b:41:85:81:1d:fa:1a:93:0f:87:b1:66:6a:8d:46:45:
29:b9:da:db:5b:f0:21:8d:96:dd:8a:9a:b3:18:88:98:df:91:
54:f4:f4:1a:70:2d:95:05:4d:48:24:0a:da:ce:e9:89:95:63:
eb:58:85:b6:e3:d9:36:8d:98:bd:07:f8:6d:44:58:5d:24:53:
f4:97:b4:18:56:c3:79:6d:36:96:22:33:0a:ea:56:71:ab:31:
11:e2:91:de:e7:72:fc:0b:28:00:8f:31:55:b5:59:b1:c7:3d:
65:bc:b3:85:c9:47:b8:92:d9:df:c8:f4:49:3f:5a:5a:8a:ef:
5d:fb:a9:0c:ca:1c:c0:17:f6:18:67:15:af:35:94:d7:ac:d0:
9a:d0:23:1e:92:86:99:7c:6f:3a:cd:df:72:e2:91:4d:e5:7e:
eb:87:f5:5d:bc:c6:39:f2:81:23:7f:ae:a4:72:f2:a9:37:81:
f2:52:24:1c:ec:5e:9e:1f:06:3b:e7:69:27:a8:a7:d3:4b:5e:
d0:eb:d1:11:bb:42:37:51:d2:7c:15:fe:cf:66:3b:c3:bc:76:
47:63:c1:5a:d7:13:6a:d7:b5:a9:ad:e1:c2:67:80:08:57:70:
7c:18:25:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWNEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTI0NTI5WhcNMjYwMjIwMTI0NTI5WjAYMRYw
FAYDVQQDEw02N2JmMGNlYy02YmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzsjd37FJZul9rVVksFbtALkvgHiWbw+6Ag9V7hKNIxjtTNIQ4yM8nRkL
w4ig4vvxI5FbtsJ/o+dbcmlS288x2QqqBOjY7QH8zSKbQXF66asWkNn4KbA6UxW8
eXqXe+W41k5mJYjd6UqF7c3zXtTq2MI9Ivux+qa+Ah7n2epaKGY/EA2b5DP1s4Tm
2e9lDlRwElNCEFZRpdF/hc5/ymtUvozeAs8lTx2CGYc/WLxE+E6/a7bMuL3pifZy
EP7/B2LVhFi8YmlbpcTpPYQJl2D1kGBQtqt/3C2zUBDLIui3/bb+73+CfDfr1o1Z
qtknEnWjvvzL/m+Iwug0eJit5+R7JQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMJF
3bxt6dZpCels+Yx9+9oaHUNlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MEMzODExNEY0M0YxMUVGQkE5M0M0NDE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlOOMA0GCSqGSIb3DQEB
CwUAA4IBAQCLDADNHfi9t0Q/xe0+OsHwEiC8y1tBhYEd+hqTD4exZmqNRkUpudrb
W/AhjZbdipqzGIiY35FU9PQacC2VBU1IJArazumJlWPrWIW249k2jZi9B/htRFhd
JFP0l7QYVsN5bTaWIjMK6lZxqzER4pHe53L8CygAjzFVtVmxxz1lvLOFyUe4ktnf
yPRJP1paiu9d+6kMyhzAF/YYZxWvNZTXrNCa0CMekoaZfG86zd9y4pFN5X7rh/Vd
vMY58oEjf66kcvKpN4HyUiQc7F6eHwY752knqKfTS17Q69ERu0I3UdJ8Ff7PZjvD
vHZHY8Fa1xNq17WpreHCZ4AIV3B8GCWQ
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:57 2025 by rpki-client