Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6DBE458F42211EFAEF43077762E951A.roa
File: B6DBE458F42211EFAEF43077762E951A.roa (raw, json)
Hash identifier: pGk0VCS1yqx64XfRNPwTo7Qy9AZcVEq6/x0Q4x6o9Pg=
Subject key identifier: E8:8D:0A:3E:6B:0B:11:A7:3D:1D:AB:3B:E8:F4:56:26:6A:6B:40:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0161B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6DBE458F42211EFAEF43077762E951A.roa
Signing time: Wed 26 Feb 2025 09:19:00 +0000
ROA not before: Wed 26 Feb 2025 09:18:57 +0000
ROA not after: Thu 19 Feb 2026 09:18:57 +0000
asID: 328608
IP address blocks: 154.200.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90552 (0x161b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:18:57 2025 GMT
Not After : Feb 19 09:18:57 2026 GMT
Subject: CN=67bedc84-644b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:9a:2f:4a:f2:c4:cd:38:98:87:69:6c:39:
fd:7b:96:b4:75:ef:1b:62:d3:1c:45:4b:99:7d:ff:
b5:e9:bc:0d:bb:dd:ab:f7:22:47:15:cb:69:d8:44:
42:1e:0b:55:c0:2a:59:24:41:08:29:23:3b:91:d1:
b6:b8:58:cf:18:f9:88:83:e5:3b:26:d0:1e:d3:05:
af:17:8c:9f:7d:b4:ed:90:a0:25:1b:0e:72:a2:07:
53:72:1e:7b:03:1a:25:e7:13:67:fb:03:32:f2:c2:
ca:e6:40:df:0a:2f:66:f0:f9:1c:50:eb:3c:1d:4f:
b0:c4:c6:82:ec:18:1d:ba:31:ac:af:e6:b8:65:b9:
a6:2b:27:ff:04:43:4f:41:7d:90:e2:f6:37:ab:3f:
5b:5b:24:2e:14:83:57:62:f0:c5:27:86:80:4c:db:
5c:32:d6:eb:ef:42:28:ab:43:24:c7:b6:06:e3:e5:
e1:24:d1:67:6f:5e:ce:8f:e4:73:32:2e:17:0e:dc:
5d:5c:05:8b:39:9a:e2:dd:aa:0a:3b:3b:78:8d:31:
59:fa:cf:2d:c9:55:13:2f:3e:08:cf:08:64:a4:ac:
b2:e0:0a:ce:93:c7:e1:45:b1:8f:f6:b7:d6:f5:61:
5f:59:0b:2b:5f:87:5b:7b:62:a9:7a:72:0d:82:d4:
f5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8D:0A:3E:6B:0B:11:A7:3D:1D:AB:3B:E8:F4:56:26:6A:6B:40:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6DBE458F42211EFAEF43077762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:99:91:26:ce:86:0a:bf:af:f1:6e:25:c4:24:b9:45:63:b3:
f7:25:2d:04:99:96:1d:69:f2:e4:54:ab:9a:65:90:f5:cd:3a:
05:b5:e1:37:ca:15:de:3a:3b:cf:d6:ca:b5:e8:af:64:82:94:
48:62:79:1a:68:03:bd:2f:59:6c:49:e3:18:40:a8:00:98:06:
da:c7:9b:0b:b7:88:b7:bb:86:aa:2e:52:98:6a:a8:9f:2b:1b:
22:2d:86:b5:f8:6b:c3:17:05:80:67:4e:37:bc:c4:4e:3a:c9:
56:d7:07:9c:0f:9e:8a:1d:f5:9c:f6:da:40:af:3a:89:22:2c:
c8:37:92:fe:8e:4d:48:a0:c0:24:1d:da:f2:e1:e4:e6:5b:eb:
8c:a2:b0:a1:42:c1:8e:18:77:32:2c:a5:28:53:fb:f6:fc:4f:
b6:b2:1b:2d:90:97:5d:b1:42:fa:c4:cc:d5:10:52:f5:14:d6:
d3:83:d5:59:33:6e:b8:a6:e4:2b:32:54:11:57:a4:19:eb:cf:
5d:f7:9c:88:0b:11:72:e0:32:7f:cd:c8:b2:7b:e9:98:40:f4:
df:ad:2c:15:89:80:3a:3a:72:8c:6a:b0:3c:a6:29:2c:6c:2e:
f8:84:a7:d4:7a:4c:81:11:f3:3b:cc:ab:f6:85:d4:28:cb:6a:
a4:45:61:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWG4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDkxODU3WhcNMjYwMjE5MDkxODU3WjAYMRYw
FAYDVQQDEw02N2JlZGM4NC02NDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArGWaL0ryxM04mIdpbDn9e5a0de8bYtMcRUuZff+16bwNu92r9yJHFctp
2ERCHgtVwCpZJEEIKSM7kdG2uFjPGPmIg+U7JtAe0wWvF4yffbTtkKAlGw5yogdT
ch57Axol5xNn+wMy8sLK5kDfCi9m8PkcUOs8HU+wxMaC7BgdujGsr+a4ZbmmKyf/
BENPQX2Q4vY3qz9bWyQuFINXYvDFJ4aATNtcMtbr70Ioq0Mkx7YG4+XhJNFnb17O
j+RzMi4XDtxdXAWLOZri3aoKOzt4jTFZ+s8tyVUTLz4IzwhkpKyy4ArOk8fhRbGP
9rfW9WFfWQsrX4dbe2KpenINgtT1WwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOiN
Cj5rCxGnPR2rO+j0ViZqa0DWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNkRCRTQ1OEY0MjIxMUVGQUVGNDMwNzc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsjgMA0GCSqGSIb3DQEB
CwUAA4IBAQBcmZEmzoYKv6/xbiXEJLlFY7P3JS0EmZYdafLkVKuaZZD1zToFteE3
yhXeOjvP1sq16K9kgpRIYnkaaAO9L1lsSeMYQKgAmAbax5sLt4i3u4aqLlKYaqif
KxsiLYa1+GvDFwWAZ043vMROOslW1wecD56KHfWc9tpArzqJIizIN5L+jk1IoMAk
Hdry4eTmW+uMorChQsGOGHcyLKUoU/v2/E+2shstkJddsUL6xMzVEFL1FNbTg9VZ
M264puQrMlQRV6QZ689d95yICxFy4DJ/zciye+mYQPTfrSwViYA6OnKMarA8piks
bC74hKfUekyBEfM7zKv2hdQoy2qkRWHy
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:46 2025 by rpki-client