Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EF7B1B6F42011EFA3161B69762E951A.roa
File: 9EF7B1B6F42011EFA3161B69762E951A.roa (raw, json)
Hash identifier: M0h/etSwlmUKIRah9ZRNlgQT3lBb6lStjZ09n1HSjSQ=
Subject key identifier: 0A:F3:AE:6E:37:36:41:C9:D8:70:E3:73:F9:63:F9:B8:C6:8F:D1:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016193
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EF7B1B6F42011EFA3161B69762E951A.roa
Signing time: Wed 26 Feb 2025 09:04:01 +0000
ROA not before: Wed 26 Feb 2025 09:03:58 +0000
ROA not after: Thu 19 Feb 2026 09:03:58 +0000
asID: 984
IP address blocks: 154.206.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90515 (0x16193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:03:58 2025 GMT
Not After : Feb 19 09:03:58 2026 GMT
Subject: CN=67bed901-104d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:52:d0:b2:f6:5c:bb:fd:01:9c:31:83:52:
aa:b9:3b:72:3e:a3:73:f2:c5:eb:33:a1:57:73:30:
bd:8a:08:2b:f0:43:4b:f6:ac:27:f2:b3:91:fa:1f:
90:54:52:6d:5d:ab:ef:b9:f4:f1:96:89:89:76:47:
32:1b:30:36:f2:d6:38:bb:ea:b7:38:ed:9a:19:08:
db:a2:17:c9:17:79:bb:62:a5:7c:a3:1c:01:fd:2e:
74:b3:36:b3:11:05:88:94:28:37:4e:c3:e4:57:9b:
cc:6a:d3:8a:7b:fb:3c:b3:cc:f5:e2:8f:0d:50:05:
45:64:74:91:2c:73:ef:35:59:5f:d4:b4:f1:04:73:
7a:bb:bc:30:8a:b5:8b:af:db:a0:66:55:30:9f:03:
fb:fd:16:74:40:7a:60:94:d7:c3:ad:bb:f7:84:5d:
31:50:40:3c:43:e0:aa:92:94:8a:e7:9d:e9:e0:b9:
49:1c:6c:e4:82:e4:a4:2f:a7:4d:c4:07:73:a2:cb:
be:32:26:9a:b3:81:2f:6c:fc:89:79:6e:86:17:cf:
f7:16:74:7b:aa:8a:5d:1b:85:af:18:dd:b7:88:3f:
a5:6d:aa:04:7d:7f:9b:08:80:db:a9:bf:82:20:31:
5a:f4:77:68:90:e2:67:93:c8:0b:a5:4f:5c:70:ed:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F3:AE:6E:37:36:41:C9:D8:70:E3:73:F9:63:F9:B8:C6:8F:D1:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EF7B1B6F42011EFA3161B69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.225.0/24
Signature Algorithm: sha256WithRSAEncryption
98:89:0f:c8:75:f2:18:17:d3:03:13:59:91:c7:dc:09:c0:98:
84:9f:25:54:62:da:ec:e8:0b:f4:4e:c9:1b:fb:fe:3d:5b:87:
01:62:5f:96:87:da:f5:9b:7f:6b:b9:8d:98:8f:f5:fc:5d:bd:
55:8f:e5:d0:d8:13:7a:b4:e6:ae:a2:25:16:47:ee:b5:b2:2b:
58:d4:7b:af:95:86:1c:c1:07:b0:8f:46:55:88:40:e2:e4:00:
55:6d:99:e2:71:a9:ba:fc:38:d8:a3:15:84:bf:30:5e:0e:58:
81:2a:b6:f2:4a:49:7b:0b:b0:cd:9b:d8:4b:7b:58:54:06:7b:
e8:31:16:f4:74:59:3e:b5:4c:fa:db:3b:97:f3:13:74:e0:cb:
65:c5:c2:5b:11:08:7a:53:2b:2b:99:63:22:fe:c3:d1:6e:69:
38:b7:24:dc:95:5b:db:8f:03:38:cf:c4:cc:0a:c6:e8:07:92:
53:99:7d:1e:51:c4:07:ba:a4:05:60:f9:83:2c:7f:5b:e2:25:
19:4f:b0:05:98:de:5f:44:1d:f3:6c:6c:0d:90:bb:6d:10:61:
b7:dc:cc:d0:fc:24:6d:70:09:2d:f7:6f:23:b9:e0:89:35:8a:
55:f7:fc:6a:ec:52:b2:ad:e5:1f:43:f2:08:5a:0c:26:22:47:
fb:38:82:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWGTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDkwMzU4WhcNMjYwMjE5MDkwMzU4WjAYMRYw
FAYDVQQDEw02N2JlZDkwMS0xMDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtt5S0LL2XLv9AZwxg1KquTtyPqNz8sXrM6FXczC9iggr8ENL9qwn8rOR
+h+QVFJtXavvufTxlomJdkcyGzA28tY4u+q3OO2aGQjbohfJF3m7YqV8oxwB/S50
szazEQWIlCg3TsPkV5vMatOKe/s8s8z14o8NUAVFZHSRLHPvNVlf1LTxBHN6u7ww
irWLr9ugZlUwnwP7/RZ0QHpglNfDrbv3hF0xUEA8Q+CqkpSK553p4LlJHGzkguSk
L6dNxAdzosu+Miaas4EvbPyJeW6GF8/3FnR7qopdG4WvGN23iD+lbaoEfX+bCIDb
qb+CIDFa9HdokOJnk8gLpU9ccO12swIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFArz
rm43NkHJ2HDjc/lj+bjGj9GVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RUY3QjFCNkY0MjAxMUVGQTMxNjFCNjk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms7hMA0GCSqGSIb3DQEB
CwUAA4IBAQCYiQ/IdfIYF9MDE1mRx9wJwJiEnyVUYtrs6Av0Tskb+/49W4cBYl+W
h9r1m39ruY2Yj/X8Xb1Vj+XQ2BN6tOauoiUWR+61sitY1HuvlYYcwQewj0ZViEDi
5ABVbZnicam6/DjYoxWEvzBeDliBKrbySkl7C7DNm9hLe1hUBnvoMRb0dFk+tUz6
2zuX8xN04MtlxcJbEQh6UysrmWMi/sPRbmk4tyTclVvbjwM4z8TMCsboB5JTmX0e
UcQHuqQFYPmDLH9b4iUZT7AFmN5fRB3zbGwNkLttEGG33MzQ/CRtcAkt928jueCJ
NYpV9/xq7FKyreUfQ/IIWgwmIkf7OIJY
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:04 2025 by rpki-client