Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A600000AFF3111EFAE77BA42762E951A.roa
File: A600000AFF3111EFAE77BA42762E951A.roa (raw, json)
Hash identifier: Ybr2SpZ96S8hcvsaX70Vw4maf+2/Lw3skzGOHNNGC00=
Subject key identifier: 70:9C:67:22:86:AC:D4:53:90:AC:3A:7D:59:F9:E2:A1:9B:7A:16:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A600000AFF3111EFAE77BA42762E951A.roa
Signing time: Wed 12 Mar 2025 11:03:38 +0000
ROA not before: Wed 12 Mar 2025 11:03:34 +0000
ROA not after: Mon 31 Mar 2025 11:03:34 +0000
asID: 22773
IP address blocks: 154.82.0.0/21 maxlen: 24
154.84.28.0/22 maxlen: 24
154.84.168.0/22 maxlen: 24
154.84.172.0/23 maxlen: 24
154.84.176.0/22 maxlen: 24
154.85.108.0/22 maxlen: 24
154.85.112.0/21 maxlen: 24
154.88.10.0/23 maxlen: 24
154.88.18.0/23 maxlen: 24
154.90.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95222 (0x173f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 11:03:34 2025 GMT
Not After : Mar 31 11:03:34 2025 GMT
Subject: CN=67d16a09-eba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:90:6d:7d:96:fe:7f:a5:a7:ed:d2:0b:bf:
f4:74:01:05:40:28:dc:e8:1e:8e:0a:84:74:8c:01:
13:ca:66:21:41:ec:b2:1a:97:23:d1:93:3d:41:5f:
33:c5:21:11:ca:24:ff:46:7a:a9:17:2e:d8:06:00:
07:d3:73:7c:09:c9:88:f4:5b:89:c7:3f:d8:57:7b:
a5:17:a6:5d:40:fc:1c:92:46:81:7e:3e:8d:b2:1c:
c1:42:fd:52:1c:8e:ae:59:c0:79:46:38:1a:c9:e2:
0b:82:d8:e9:4b:d2:2d:7a:c7:e1:26:e8:94:b5:9f:
a1:95:75:4f:2c:ea:13:87:e6:6c:79:77:84:74:08:
1f:3f:7d:86:b4:ae:ac:1e:7e:d2:cd:3d:1b:ad:43:
0b:4c:07:ed:90:1d:ac:4a:df:b7:62:93:4c:89:22:
ae:3b:48:a2:fe:c6:f4:16:b2:90:eb:c1:76:75:ff:
42:2a:91:41:67:aa:49:cb:74:c2:6e:99:1e:ef:53:
d6:6e:94:64:ed:15:0e:90:87:bf:18:8c:0d:af:73:
f1:a7:dd:ef:51:cd:8b:39:51:06:88:53:6b:70:d5:
04:62:df:aa:57:be:73:c4:29:02:ea:a6:c4:cb:7c:
00:47:f9:16:b5:42:c9:9a:98:68:66:8e:4a:35:ec:
eb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9C:67:22:86:AC:D4:53:90:AC:3A:7D:59:F9:E2:A1:9B:7A:16:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A600000AFF3111EFAE77BA42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.0.0/21
154.84.28.0/22
154.84.168.0-154.84.173.255
154.84.176.0/22
154.85.108.0-154.85.119.255
154.88.10.0/23
154.88.18.0/23
154.90.2.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e9:6c:87:42:4a:b9:db:2c:a9:b5:06:87:a6:d0:0a:b9:86:
b7:4d:9a:46:d2:66:70:23:20:0b:c7:25:4f:2e:bd:b4:10:ed:
56:0a:51:01:42:81:98:cf:f2:54:c4:87:d6:12:35:69:07:55:
ad:43:d5:17:48:ff:72:b5:c2:bc:a8:82:5e:7e:7d:d9:8a:1b:
70:89:ff:93:ee:20:1c:af:c9:65:00:5a:79:9e:f8:e5:0b:ca:
97:8a:48:64:08:01:35:a1:44:40:65:58:29:fe:21:89:db:71:
49:34:20:d3:14:1c:85:d9:12:c3:5f:07:52:1b:85:72:f0:ad:
b3:01:10:1f:68:68:0b:5a:19:3d:9c:46:da:09:c9:5b:43:88:
b6:c7:bf:24:df:7b:fe:f1:cc:b1:af:37:08:cf:ca:2d:47:18:
65:81:68:12:3b:d8:f7:59:59:02:49:c0:8c:1b:46:3b:8b:fe:
65:b1:3a:e5:55:5d:cb:2e:7f:ab:fc:f8:04:9d:50:54:98:db:
b6:cb:98:aa:db:2c:82:4f:22:bf:d1:36:3f:53:43:df:58:fd:
01:8f:6c:34:34:9d:0e:1c:03:05:53:6c:4d:ad:52:0c:a5:57:
80:a3:4a:54:6d:f7:e1:5f:7d:c5:f8:ae:77:9c:a4:64:24:e2:
04:c2:d9:31
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIDAXP2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzEyMTEwMzM0WhcNMjUwMzMxMTEwMzM0WjAYMRYw
FAYDVQQDEw02N2QxNmEwOS1lYmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0wCQbX2W/n+lp+3SC7/0dAEFQCjc6B6OCoR0jAETymYhQeyyGpcj0ZM9
QV8zxSERyiT/RnqpFy7YBgAH03N8CcmI9FuJxz/YV3ulF6ZdQPwckkaBfj6NshzB
Qv1SHI6uWcB5RjgayeILgtjpS9ItesfhJuiUtZ+hlXVPLOoTh+ZseXeEdAgfP32G
tK6sHn7SzT0brUMLTAftkB2sSt+3YpNMiSKuO0ii/sb0FrKQ68F2df9CKpFBZ6pJ
y3TCbpke71PWbpRk7RUOkIe/GIwNr3Pxp93vUc2LOVEGiFNrcNUEYt+qV75zxCkC
6qbEy3wAR/kWtULJmphoZo5KNezr1QIDAQABo4IC3zCCAtswHQYDVR0OBBYEFHCc
ZyKGrNRTkKw6fVn54qGbehauMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNjAwMDAwQUZGMzExMUVGQUU3N0JBNDI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQDmlIAAwQCmlQcMAwDBAOa
VKgDBAGaVKwDBAKaVLAwDAMEAppVbAMEA5pVcAMEAZpYCgMEAZpYEgMEAJpaAjAN
BgkqhkiG9w0BAQsFAAOCAQEAhelsh0JKudssqbUGh6bQCrmGt02aRtJmcCMgC8cl
Ty69tBDtVgpRAUKBmM/yVMSH1hI1aQdVrUPVF0j/crXCvKiCXn592YobcIn/k+4g
HK/JZQBaeZ745QvKl4pIZAgBNaFEQGVYKf4hidtxSTQg0xQchdkSw18HUhuFcvCt
swEQH2hoC1oZPZxG2gnJW0OItse/JN97/vHMsa83CM/KLUcYZYFoEjvY91lZAknA
jBtGO4v+ZbE65VVdyy5/q/z4BJ1QVJjbtsuYqtssgk8iv9E2P1ND31j9AY9sNDSd
DhwDBVNsTa1SDKVXgKNKVG334V99xfiud5ykZCTiBMLZMQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:31:18 2025 by rpki-client