Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F5E37DE095F11F0988C8A7E762E951A.roa
File: 9F5E37DE095F11F0988C8A7E762E951A.roa (raw, json)
Hash identifier: M6iwuqpHAm4ETzaZoVbwTAkS13KYdKbb3RiUoAXZKKM=
Subject key identifier: 41:3B:79:37:04:94:AC:C5:C1:2D:E4:3C:D5:DF:FB:D6:41:D9:9D:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01761E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F5E37DE095F11F0988C8A7E762E951A.roa
Signing time: Tue 25 Mar 2025 09:57:55 +0000
ROA not before: Tue 25 Mar 2025 09:57:50 +0000
ROA not after: Thu 24 Apr 2025 09:57:50 +0000
asID: 400619
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95774 (0x1761e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 09:57:50 2025 GMT
Not After : Apr 24 09:57:50 2025 GMT
Subject: CN=67e27e23-e592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:a5:55:29:1e:cc:a3:f2:b8:b4:82:eb:1d:
87:e3:fb:4f:ff:2c:67:f7:3b:07:34:b8:1b:e4:e8:
4c:5d:c0:c9:c0:fc:f5:93:16:71:e4:c8:fa:73:98:
db:d8:c4:21:65:0b:b6:8b:d6:1a:06:55:d4:41:39:
70:9c:64:8c:f2:0d:40:43:72:5e:0f:05:84:6e:12:
6e:4b:8f:18:33:49:68:a0:47:b5:7e:2e:92:95:fe:
74:15:20:e5:2f:2f:56:38:e6:6b:46:1c:4f:fc:c7:
82:8e:68:3b:b1:12:0d:74:32:4d:dd:87:b4:7a:c2:
4b:ee:5d:a8:e1:37:d6:3b:ae:6d:b9:96:fe:34:93:
a6:b7:a0:67:f7:47:ed:6e:6f:75:81:f1:28:66:58:
f4:3a:e4:17:3a:6d:65:98:88:77:01:f4:eb:43:3c:
eb:a2:34:56:9b:8b:ff:e9:93:fc:a4:5b:20:8a:4b:
55:08:2c:c0:34:1a:1e:ce:42:40:28:fb:8e:27:e4:
dc:5a:cb:b6:31:12:57:28:ff:7e:5c:fe:a4:b1:e4:
be:2f:e9:c3:ea:89:21:6f:47:ec:9b:a9:2f:92:69:
29:43:7d:5c:20:47:be:32:bc:2c:78:8c:68:3d:f6:
d5:5c:fa:6f:cc:3f:95:e4:4b:38:09:50:f6:56:f4:
31:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3B:79:37:04:94:AC:C5:C1:2D:E4:3C:D5:DF:FB:D6:41:D9:9D:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F5E37DE095F11F0988C8A7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
61:97:9f:81:f9:86:ab:09:f8:a5:b8:4a:ab:19:c5:42:04:be:
be:87:53:41:16:c7:6a:98:e1:22:7f:a9:1e:47:1c:db:f9:58:
18:05:9f:55:e0:0e:52:13:67:e4:79:39:09:bc:e0:e8:45:49:
f6:b3:0f:77:93:74:34:5f:c7:38:af:a7:f4:17:c8:48:af:dd:
a1:19:04:84:35:38:12:2e:19:e1:36:b7:ea:a6:d3:3d:7f:49:
d9:07:eb:3f:e5:ec:ee:c7:38:d4:b5:96:86:22:b4:ad:f9:45:
5c:60:c9:ce:f0:c3:99:3b:09:8b:4e:41:8a:24:f7:75:23:1d:
10:84:85:f1:83:15:58:2b:8d:1f:b3:49:bb:7f:a1:e2:5d:6c:
68:a2:dd:41:1c:7d:13:3d:44:27:2f:60:73:1b:7f:a7:fe:7e:
22:9f:b5:e6:2e:d9:b8:4a:3a:6e:c5:03:52:97:be:7f:29:25:
7c:ba:db:ad:82:c5:de:3d:04:63:7b:4f:fc:60:d2:0c:7d:40:
83:b0:fe:1b:43:c1:a9:bb:ad:45:e3:a5:51:31:9e:4b:70:fd:
02:fb:b6:f4:5b:cc:6a:47:bd:4d:e7:6e:4d:48:c5:86:84:b8:
66:43:59:eb:2c:7f:c7:1d:f7:5f:af:f6:51:a7:82:86:21:49:
a6:47:61:6e
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIDAXYeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzI1MDk1NzUwWhcNMjUwNDI0MDk1NzUwWjAYMRYw
FAYDVQQDEw02N2UyN2UyMy1lNTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvX+lVSkezKPyuLSC6x2H4/tP/yxn9zsHNLgb5OhMXcDJwPz1kxZx5Mj6
c5jb2MQhZQu2i9YaBlXUQTlwnGSM8g1AQ3JeDwWEbhJuS48YM0looEe1fi6Slf50
FSDlLy9WOOZrRhxP/MeCjmg7sRINdDJN3Ye0esJL7l2o4TfWO65tuZb+NJOmt6Bn
90ftbm91gfEoZlj0OuQXOm1lmIh3AfTrQzzrojRWm4v/6ZP8pFsgiktVCCzANBoe
zkJAKPuOJ+TcWsu2MRJXKP9+XP6kseS+L+nD6okhb0fsm6kvkmkpQ31cIEe+Mrws
eIxoPfbVXPpvzD+V5Es4CVD2VvQxjQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFEE7
eTcElKzFwS3kPNXf+9ZB2Z3FMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RjVFMzdERTA5NUYxMUYwOTg4QzhBN0U3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAATAZAwQAmsp1AwQDmsp4MAsDBAGa
2eoDAwGa2DANBgkqhkiG9w0BAQsFAAOCAQEAYZefgfmGqwn4pbhKqxnFQgS+vodT
QRbHapjhIn+pHkcc2/lYGAWfVeAOUhNn5Hk5Cbzg6EVJ9rMPd5N0NF/HOK+n9BfI
SK/doRkEhDU4Ei4Z4Ta36qbTPX9J2QfrP+Xs7sc41LWWhiK0rflFXGDJzvDDmTsJ
i05BiiT3dSMdEISF8YMVWCuNH7NJu3+h4l1saKLdQRx9Ez1EJy9gcxt/p/5+Ip+1
5i7ZuEo6bsUDUpe+fyklfLrbrYLF3j0EY3tP/GDSDH1Ag7D+G0PBqbutReOlUTGe
S3D9Avu29FvMake9TeduTUjFhoS4ZkNZ6yx/xx33X6/2UaeChiFJpkdhbg==
-----END CERTIFICATE-----
Generated at Thu Apr 10 01:45:47 2025 by rpki-client