Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9680E7A6F65911EFA3F01D48762E951A.roa
File: 9680E7A6F65911EFA3F01D48762E951A.roa (raw, json)
Hash identifier: u0JECkRAlOVk5Cve2xgXY78cmwa3Cn7hCeXj1BDXwPw=
Subject key identifier: 33:79:CF:56:6D:83:4A:3F:EF:F9:2A:F2:28:D6:A5:66:24:AE:D5:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9680E7A6F65911EFA3F01D48762E951A.roa
Signing time: Sat 01 Mar 2025 04:56:51 +0000
ROA not before: Sat 01 Mar 2025 04:56:47 +0000
ROA not after: Sat 19 Feb 2028 04:56:47 +0000
asID: 17561
IP address blocks: 154.193.155.0/24 maxlen: 24
154.193.156.0/24 maxlen: 24
154.193.157.0/24 maxlen: 24
154.193.158.0/24 maxlen: 24
154.193.159.0/24 maxlen: 24
154.193.160.0/24 maxlen: 24
154.193.161.0/24 maxlen: 24
154.193.162.0/24 maxlen: 24
154.193.163.0/24 maxlen: 24
154.193.164.0/24 maxlen: 24
154.193.165.0/24 maxlen: 24
154.193.166.0/24 maxlen: 24
154.193.167.0/24 maxlen: 24
154.193.184.0/24 maxlen: 24
154.193.185.0/24 maxlen: 24
154.193.188.0/24 maxlen: 24
154.193.189.0/24 maxlen: 24
154.193.190.0/24 maxlen: 24
154.193.191.0/24 maxlen: 24
154.193.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93462 (0x16d16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 04:56:47 2025 GMT
Not After : Feb 19 04:56:47 2028 GMT
Subject: CN=67c29393-c38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:34:9f:20:00:32:f1:ad:23:58:17:b9:ea:95:
5b:35:ca:9b:01:4e:f4:07:3d:48:ce:00:0f:6a:8e:
35:66:91:b2:75:d2:df:cc:1c:4f:74:ab:0a:42:f6:
98:a9:b5:78:b1:7f:84:6f:16:db:e3:05:5b:69:44:
d3:5b:ec:dc:47:96:42:aa:48:3e:9d:0e:9a:85:39:
72:c9:12:cf:8f:fb:bc:2b:8b:44:d7:8f:a3:51:66:
87:54:0e:3b:1c:fa:a9:1c:47:ce:1e:d5:6b:26:43:
44:70:39:fd:55:74:a9:19:1d:f9:fb:5d:e4:72:24:
04:de:0b:83:17:29:f8:09:73:8c:54:43:1a:96:fa:
77:9a:40:ee:74:b8:d6:62:25:a1:e5:3b:c1:a2:04:
df:ec:be:ff:22:33:3c:b8:e6:93:c7:1e:9d:fa:0a:
4e:52:01:fd:7f:f3:d1:cf:ca:f3:6d:32:0a:4c:b3:
40:34:cb:cc:a7:dc:48:3b:05:a5:fd:d7:fd:4f:56:
be:8b:05:92:9c:d9:d8:39:a3:c0:e0:1c:23:b5:ec:
ed:38:e0:b8:3d:0a:f3:f5:1b:53:1b:05:aa:75:a9:
4b:e9:6b:c1:14:47:cb:c7:08:39:48:2c:f3:fc:b0:
94:cd:22:a9:69:22:f6:57:5a:30:62:76:e1:b4:c6:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:79:CF:56:6D:83:4A:3F:EF:F9:2A:F2:28:D6:A5:66:24:AE:D5:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9680E7A6F65911EFA3F01D48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.155.0-154.193.167.255
154.193.184.0/23
154.193.188.0-154.193.192.255
Signature Algorithm: sha256WithRSAEncryption
5e:6b:b8:d4:33:e7:db:32:e1:b6:f7:85:1b:b9:c2:61:3f:0c:
c5:43:69:bc:c0:10:75:88:da:b7:9a:91:95:5b:48:01:1a:2e:
69:d2:64:2e:71:e1:55:43:85:16:35:8f:73:95:80:42:5d:e0:
92:62:2d:da:95:7b:af:6d:82:d5:0c:bc:c9:1d:1a:c5:2e:cd:
d3:00:4f:5e:79:81:72:d6:6d:21:d4:58:f8:7b:9f:f2:31:5f:
e0:b2:87:f9:f8:81:02:88:bc:72:b4:9b:32:e5:dd:4b:b7:06:
0c:00:8e:e9:88:11:b0:91:67:97:54:91:5a:18:87:fb:6b:d8:
7f:3f:a8:50:70:70:00:c8:87:45:6a:b8:01:57:a4:3b:aa:72:
ff:5d:32:b9:4e:a6:9f:02:0f:ee:02:85:68:01:33:a6:44:72:
53:aa:64:09:64:52:0a:a8:51:ca:03:07:ff:cc:b0:50:07:b0:
00:20:b0:2e:f5:55:0d:7a:bf:3c:78:2f:d4:6e:40:bc:5d:ce:
10:56:cf:7b:08:7b:39:38:9f:1e:87:3f:9f:d8:ba:2b:06:86:
2d:b1:e1:5b:9b:2c:65:27:1e:1c:6b:b6:a7:5c:3f:b5:6e:9d:
58:0e:5d:48:3f:18:28:95:0c:5e:35:cc:6e:94:f2:90:ec:9b:
8c:29:f4:cf
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIDAW0WMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMDQ1NjQ3WhcNMjgwMjE5MDQ1NjQ3WjAYMRYw
FAYDVQQDEw02N2MyOTM5My1jMzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5DSfIAAy8a0jWBe56pVbNcqbAU70Bz1IzgAPao41ZpGyddLfzBxPdKsK
QvaYqbV4sX+Ebxbb4wVbaUTTW+zcR5ZCqkg+nQ6ahTlyyRLPj/u8K4tE14+jUWaH
VA47HPqpHEfOHtVrJkNEcDn9VXSpGR35+13kciQE3guDFyn4CXOMVEMalvp3mkDu
dLjWYiWh5TvBogTf7L7/IjM8uOaTxx6d+gpOUgH9f/PRz8rzbTIKTLNANMvMp9xI
OwWl/df9T1a+iwWSnNnYOaPA4BwjteztOOC4PQrz9RtTGwWqdalL6WvBFEfLxwg5
SCzz/LCUzSKpaSL2V1owYnbhtMabDwIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFDN5
z1Ztg0o/7/kq8ijWpWYkrtWtMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NjgwRTdBNkY2NTkxMUVGQTNGMDFENDg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBACawZsDBAOawaADBAGa
wbgwDAMEAprBvAMEAJrBwDANBgkqhkiG9w0BAQsFAAOCAQEAXmu41DPn2zLhtveF
G7nCYT8MxUNpvMAQdYjat5qRlVtIARouadJkLnHhVUOFFjWPc5WAQl3gkmIt2pV7
r22C1Qy8yR0axS7N0wBPXnmBctZtIdRY+Huf8jFf4LKH+fiBAoi8crSbMuXdS7cG
DACO6YgRsJFnl1SRWhiH+2vYfz+oUHBwAMiHRWq4AVekO6py/10yuU6mnwIP7gKF
aAEzpkRyU6pkCWRSCqhRygMH/8ywUAewACCwLvVVDXq/PHgv1G5AvF3OEFbPewh7
OTifHoc/n9i6KwaGLbHhW5ssZSceHGu2p1w/tW6dWA5dSD8YKJUMXjXMbpTykOyb
jCn0zw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:44:18 2025 by rpki-client