Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A33927C0088711F093051A5A762E951A.roa
File: A33927C0088711F093051A5A762E951A.roa (raw, json)
Hash identifier: kreVFIt9hNA+z/9umcbCcKecrzIs+zjNHIsBC3R7Y2E=
Subject key identifier: 92:56:7C:24:C8:2A:CA:36:A0:38:52:98:01:48:08:F9:00:48:90:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A33927C0088711F093051A5A762E951A.roa
Signing time: Mon 24 Mar 2025 08:11:50 +0000
ROA not before: Mon 24 Mar 2025 08:11:46 +0000
ROA not after: Sun 11 May 2025 08:11:46 +0000
asID: 138915
IP address blocks: 154.223.16.0/24 maxlen: 24
154.223.17.0/24 maxlen: 24
154.223.18.0/23 maxlen: 24
154.223.20.0/24 maxlen: 24
154.223.21.0/24 maxlen: 24
154.223.22.0/24 maxlen: 24
154.223.23.0/24 maxlen: 24
154.223.26.0/24 maxlen: 24
154.223.27.0/24 maxlen: 24
154.223.28.0/23 maxlen: 24
154.223.30.0/24 maxlen: 24
154.223.51.0/24 maxlen: 24
154.223.54.0/23 maxlen: 24
154.223.56.0/23 maxlen: 24
154.223.58.0/23 maxlen: 24
154.223.64.0/24 maxlen: 24
154.223.72.0/23 maxlen: 24
154.223.74.0/23 maxlen: 24
154.223.76.0/23 maxlen: 24
154.223.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95690 (0x175ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 24 08:11:46 2025 GMT
Not After : May 11 08:11:46 2025 GMT
Subject: CN=67e113c6-65dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:19:cb:d1:42:51:8e:17:3f:de:60:8a:9c:97:
c5:26:e9:80:46:1e:c0:aa:91:11:70:0e:02:50:3b:
da:0c:87:9b:90:b1:25:2a:e2:cb:0a:ac:85:36:26:
8f:7d:d3:4f:bd:39:f5:1e:7e:e2:cd:1a:13:d2:d8:
c9:81:61:97:08:a6:87:5f:f2:c9:e3:8e:53:86:51:
4e:aa:2f:e5:d9:be:51:7c:a1:5b:c9:1b:a2:80:f5:
01:c6:b5:66:02:ce:55:bf:fe:13:26:21:56:52:9d:
16:f7:8c:27:e2:14:4e:0d:80:c5:4c:3c:99:0a:e2:
9a:fc:4b:a1:43:23:2c:49:50:7f:ad:0b:ce:5e:64:
78:cd:35:48:bf:2d:e5:42:3c:74:c1:3c:02:a3:3b:
5c:e5:d2:1a:6b:f5:50:67:d1:70:e0:56:74:80:3c:
67:d2:19:fd:56:38:97:9a:d1:11:fe:79:1d:70:ca:
e4:ff:d2:b1:c4:91:a0:db:78:3b:02:43:47:7a:c5:
d5:f5:e6:a4:eb:8b:60:fe:3e:70:fc:df:60:68:4f:
49:5a:ad:7a:d6:d0:78:b6:84:36:e1:e4:40:8e:f9:
4b:0e:30:20:0b:fe:3c:4e:ed:da:86:42:4f:5d:ea:
1d:18:00:cf:20:67:a8:06:40:cc:35:d1:60:bf:07:
14:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:56:7C:24:C8:2A:CA:36:A0:38:52:98:01:48:08:F9:00:48:90:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A33927C0088711F093051A5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.16.0/21
154.223.26.0-154.223.30.255
154.223.51.0/24
154.223.54.0-154.223.59.255
154.223.64.0/24
154.223.72.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:a0:e9:d5:4e:3b:88:92:40:df:5a:e0:6c:ad:ec:09:26:c5:
bb:95:86:31:3b:de:ab:fc:0c:81:80:83:7b:18:b0:66:ac:50:
e6:07:9e:f4:fc:fb:bc:60:81:a6:e2:aa:0f:c9:7a:9f:b3:7c:
ed:89:46:34:2c:8f:2d:3e:a9:5c:a7:e2:e4:18:04:60:18:49:
14:1d:a0:7f:ab:25:32:d9:21:80:3e:e5:9e:e5:08:1d:ef:56:
47:99:25:d7:f9:e8:31:80:19:3d:a0:e5:5c:e0:3c:ed:a6:45:
de:bb:62:13:b7:ad:f1:f7:13:24:65:4a:c0:b7:2e:d5:2f:fc:
0c:12:62:25:f0:57:42:03:3e:80:ce:8a:17:d7:84:8a:c8:38:
4d:39:44:df:2f:41:85:65:7d:5a:ce:0e:ce:46:e7:ca:14:a3:
a7:38:18:ed:d3:50:27:06:62:fc:a3:65:aa:38:0b:64:f5:54:
47:8d:19:ef:e5:4a:39:56:ac:48:42:37:52:7c:09:f0:bf:0d:
8c:79:45:33:19:07:ce:76:34:f3:cc:3a:c8:70:95:9a:0b:9d:
d3:73:15:03:c5:f8:08:9f:54:d8:1b:41:8f:3e:9e:33:04:a2:
b6:3c:bf:b3:b0:1d:79:22:7e:0e:7e:21:9a:d5:a0:b7:11:e9:
36:30:50:31
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIDAXXKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzI0MDgxMTQ2WhcNMjUwNTExMDgxMTQ2WjAYMRYw
FAYDVQQDEw02N2UxMTNjNi02NWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwxnL0UJRjhc/3mCKnJfFJumARh7AqpERcA4CUDvaDIebkLElKuLLCqyF
NiaPfdNPvTn1Hn7izRoT0tjJgWGXCKaHX/LJ445ThlFOqi/l2b5RfKFbyRuigPUB
xrVmAs5Vv/4TJiFWUp0W94wn4hRODYDFTDyZCuKa/EuhQyMsSVB/rQvOXmR4zTVI
vy3lQjx0wTwCoztc5dIaa/VQZ9Fw4FZ0gDxn0hn9VjiXmtER/nkdcMrk/9KxxJGg
23g7AkNHesXV9eak64tg/j5w/N9gaE9JWq161tB4toQ24eRAjvlLDjAgC/48Tu3a
hkJPXeodGADPIGeoBkDMNdFgvwcUWQIDAQABo4IC0zCCAs8wHQYDVR0OBBYEFJJW
fCTIKso2oDhSmAFICPkASJDuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMzM5MjdDMDA4ODcxMUYwOTMwNTFBNUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQDmt8QMAwDBAGa3xoDBACa
3x4DBACa3zMwDAMEAZrfNgMEAprfOAMEAJrfQAMEA5rfSDANBgkqhkiG9w0BAQsF
AAOCAQEAWqDp1U47iJJA31rgbK3sCSbFu5WGMTveq/wMgYCDexiwZqxQ5gee9Pz7
vGCBpuKqD8l6n7N87YlGNCyPLT6pXKfi5BgEYBhJFB2gf6slMtkhgD7lnuUIHe9W
R5kl1/noMYAZPaDlXOA87aZF3rtiE7et8fcTJGVKwLcu1S/8DBJiJfBXQgM+gM6K
F9eEisg4TTlE3y9BhWV9Ws4OzkbnyhSjpzgY7dNQJwZi/KNlqjgLZPVUR40Z7+VK
OVasSEI3UnwJ8L8NjHlFMxkHznY088w6yHCVmgud03MVA8X4CJ9U2BtBjz6eMwSi
tjy/s7AdeSJ+Dn4hmtWgtxHpNjBQMQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 21:55:10 2025 by rpki-client