Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF08274CF44411EF9BD44168762E951A.roa
File: AF08274CF44411EF9BD44168762E951A.roa (raw, json)
Hash identifier: 4KUwZP3egJyTQQWdYusmFk7TQXmEZsbAq4CrUeK2YMs=
Subject key identifier: 61:EB:80:38:90:10:10:B9:BD:95:25:C0:95:A3:F2:6E:05:89:4F:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF08274CF44411EF9BD44168762E951A.roa
Signing time: Wed 26 Feb 2025 13:22:12 +0000
ROA not before: Wed 26 Feb 2025 13:22:05 +0000
ROA not after: Thu 19 Feb 2026 13:22:05 +0000
asID: 984
IP address blocks: 154.208.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91059 (0x163b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:22:05 2025 GMT
Not After : Feb 19 13:22:05 2026 GMT
Subject: CN=67bf1583-a43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:ae:cb:b9:ee:55:1a:42:aa:9a:e6:48:c6:
5a:74:b1:74:4f:72:34:00:9e:78:f5:7f:ea:36:c8:
07:ba:f5:b1:14:a9:4d:87:05:d6:9e:a2:ab:85:4a:
25:eb:a1:d4:7e:7e:ea:99:20:31:3d:9c:cd:75:1c:
4b:56:4e:e0:6e:a4:15:15:43:d1:d1:ff:c8:41:c1:
da:e5:24:70:25:71:54:64:e9:bb:49:ae:5f:fa:66:
bb:75:18:1a:af:34:fc:ff:cc:d5:c6:18:88:20:89:
2e:c0:63:63:fc:5b:f9:dc:1d:5c:8b:36:dc:c6:63:
2f:fe:29:71:bd:39:da:4d:b0:b5:d3:85:c9:6b:f4:
53:8f:89:4d:62:a1:55:86:75:c5:02:48:aa:65:5b:
91:b6:f1:f0:0a:96:1a:92:cd:72:0d:27:23:70:fc:
f1:8d:20:6d:a4:e8:1a:7a:73:08:fb:c9:20:24:97:
cf:3d:c9:39:59:41:40:f0:b4:ac:4a:e3:d1:59:81:
09:f9:67:f5:dc:f7:07:73:a3:15:46:93:3c:20:78:
65:73:55:e6:72:95:ee:94:7f:fd:6a:dd:62:3e:94:
1e:0b:25:1e:70:f9:18:fc:d1:08:e6:5e:a2:51:84:
28:00:e1:48:d8:3b:90:02:b4:03:d6:da:4e:ff:84:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EB:80:38:90:10:10:B9:BD:95:25:C0:95:A3:F2:6E:05:89:4F:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF08274CF44411EF9BD44168762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.189.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:4c:ad:c1:58:b1:0b:29:89:9c:e3:e8:51:2a:37:08:a2:c8:
94:df:d7:12:93:9b:25:1f:09:47:d4:4f:f2:a2:9c:93:0d:59:
4c:27:d9:b8:ea:76:4e:d5:80:9f:d9:10:b2:39:f5:97:7c:a7:
50:a5:22:ab:c8:78:46:77:1e:a1:36:93:bb:c3:c7:6b:24:12:
7c:5e:3f:85:ab:6c:50:75:5d:8d:b2:d2:66:59:5c:28:a4:1d:
b0:5f:21:45:20:a0:57:ef:ac:78:ca:d0:df:65:b1:ce:91:04:
f9:08:5b:4d:fb:8d:43:35:08:8e:27:4f:bd:c2:8b:e7:ed:1f:
df:22:f0:19:30:1b:4e:62:54:71:60:8a:aa:8f:47:d6:0f:22:
57:a0:c6:f7:17:a7:3e:4e:0e:11:0e:39:3a:6d:61:e8:55:38:
e2:1f:4c:35:17:6a:9e:08:da:23:2a:bd:5e:ce:b1:b8:ba:24:
37:00:18:82:d0:1d:bf:8d:63:db:56:da:30:c3:f2:8b:38:9f:
44:3e:89:01:1e:4b:5c:06:11:00:b6:f8:fd:b4:b3:ed:95:18:
d4:65:a6:17:a7:b3:53:47:26:e9:57:ba:52:35:74:90:cb:23:
8f:4a:1c:3b:38:20:07:45:d8:7b:df:91:47:b0:f7:22:b8:79:
9c:7e:55:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWOzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTMyMjA1WhcNMjYwMjE5MTMyMjA1WjAYMRYw
FAYDVQQDEw02N2JmMTU4My1hNDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxR+uy7nuVRpCqprmSMZadLF0T3I0AJ549X/qNsgHuvWxFKlNhwXWnqKr
hUol66HUfn7qmSAxPZzNdRxLVk7gbqQVFUPR0f/IQcHa5SRwJXFUZOm7Sa5f+ma7
dRgarzT8/8zVxhiIIIkuwGNj/Fv53B1cizbcxmMv/ilxvTnaTbC104XJa/RTj4lN
YqFVhnXFAkiqZVuRtvHwCpYaks1yDScjcPzxjSBtpOgaenMI+8kgJJfPPck5WUFA
8LSsSuPRWYEJ+Wf13PcHc6MVRpM8IHhlc1XmcpXulH/9at1iPpQeCyUecPkY/NEI
5l6iUYQoAOFI2DuQArQD1tpO/4TtfQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGHr
gDiQEBC5vZUlwJWj8m4FiU/6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRjA4Mjc0Q0Y0NDQxMUVGOUJENDQxNjg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtC9MA0GCSqGSIb3DQEB
CwUAA4IBAQCsTK3BWLELKYmc4+hRKjcIosiU39cSk5slHwlH1E/yopyTDVlMJ9m4
6nZO1YCf2RCyOfWXfKdQpSKryHhGdx6hNpO7w8drJBJ8Xj+Fq2xQdV2NstJmWVwo
pB2wXyFFIKBX76x4ytDfZbHOkQT5CFtN+41DNQiOJ0+9wovn7R/fIvAZMBtOYlRx
YIqqj0fWDyJXoMb3F6c+Tg4RDjk6bWHoVTjiH0w1F2qeCNojKr1ezrG4uiQ3ABiC
0B2/jWPbVtoww/KLOJ9EPokBHktcBhEAtvj9tLPtlRjUZaYXp7NTRybpV7pSNXSQ
yyOPShw7OCAHRdh735FHsPciuHmcflUh
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:59 2025 by rpki-client