Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B85BE93ECDC311EFA9E0FD90762E951A.roa
File: B85BE93ECDC311EFA9E0FD90762E951A.roa (raw, json)
Hash identifier: m4osztbauNe5KwhKoM5ZWH0WoxEF5PLKGCHhmzsf3ho=
Subject key identifier: 5B:D1:F4:A8:BE:61:0E:DE:5E:FF:A0:AA:41:ED:36:09:A6:F5:13:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013728
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B85BE93ECDC311EFA9E0FD90762E951A.roa
Signing time: Wed 08 Jan 2025 13:23:17 +0000
ROA not before: Wed 08 Jan 2025 13:23:13 +0000
ROA not after: Tue 16 Dec 2025 13:23:13 +0000
asID: 984
IP address blocks: 154.200.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79656 (0x13728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 13:23:13 2025 GMT
Not After : Dec 16 13:23:13 2025 GMT
Subject: CN=677e7c45-761b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:20:d9:ac:ea:6d:67:cb:1d:83:c3:9e:8d:c0:
b8:04:91:77:db:b0:3c:c6:cb:ed:d6:2c:3f:91:b4:
bc:dc:08:97:01:26:c4:59:76:87:02:b9:05:88:68:
34:c1:f5:02:b0:a7:35:64:d5:cd:c8:e8:1b:ee:97:
ee:2d:c0:0f:d2:0c:59:4c:0a:1d:b3:e3:99:79:80:
01:1a:23:26:8e:5c:1b:c9:76:42:a7:10:4b:b4:9e:
14:cc:d2:21:c0:21:43:a6:d5:f2:70:d8:a0:51:01:
69:30:a3:31:66:c0:14:4a:56:22:91:3f:9d:df:a4:
ba:f0:6b:19:36:2d:89:24:56:8b:86:68:24:d3:9b:
ec:ab:fa:2d:cf:44:22:5d:c3:d0:43:81:70:4f:a9:
1d:a3:d6:f2:11:48:f4:72:e7:80:5c:c0:37:4f:69:
f6:0d:b3:4c:d6:5f:c5:4b:49:61:5a:d4:8b:7a:e4:
68:5a:7c:94:17:0d:79:73:80:01:37:5b:7c:7d:94:
9c:50:18:e9:42:1d:70:87:3b:95:16:41:5e:0f:38:
88:77:60:06:c8:21:ba:3e:67:1e:40:64:8e:dd:0c:
e9:bc:a8:6f:51:80:28:b4:58:29:c8:10:a4:d5:48:
1e:3e:f1:57:1b:c7:ef:01:3b:16:dc:eb:2c:a0:8a:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D1:F4:A8:BE:61:0E:DE:5E:FF:A0:AA:41:ED:36:09:A6:F5:13:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B85BE93ECDC311EFA9E0FD90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.243.0/24
Signature Algorithm: sha256WithRSAEncryption
77:38:59:77:86:6e:14:84:91:73:37:36:36:27:24:7f:8a:bd:
8a:ec:70:cd:60:25:d4:fd:ee:82:9a:01:4d:f9:27:9e:41:92:
9e:b2:5d:6c:8c:7f:ba:6c:10:55:97:83:a1:2d:77:c7:c9:33:
87:3c:76:a2:97:95:a1:4c:6e:9b:06:17:41:00:7f:a3:70:9a:
2c:03:8e:e0:91:df:45:44:06:c8:ae:2c:0c:dc:5b:93:f2:6d:
ec:6a:7b:bd:e1:59:a0:55:10:d7:23:7e:5d:df:00:b8:9b:8f:
cf:1d:69:70:fb:95:9f:0e:6c:c7:12:16:80:45:4b:d9:e6:f3:
79:e7:d1:a6:f8:65:8c:a2:5d:50:c9:bd:d5:80:82:23:9e:66:
23:30:e9:97:a5:39:72:0f:23:98:4e:4c:a9:a7:e4:b6:75:f2:
9a:24:d5:66:a3:09:ee:d0:5e:a5:4a:a9:9d:12:7a:37:13:a1:
e6:3b:21:12:bb:97:95:7a:4b:45:04:18:f5:fb:9b:4a:49:7a:
64:0e:f7:b6:16:f0:36:0c:50:e0:88:0c:b8:c9:67:b8:6e:4e:
31:c6:80:ea:86:c9:ed:7e:8e:64:85:44:a2:82:19:1f:54:24:
e4:32:40:e4:46:67:39:5b:ec:18:82:f5:34:b4:b7:ea:d6:46:
bf:f0:63:84
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDATcoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTA4MTMyMzEzWhcNMjUxMjE2MTMyMzEzWjAYMRYw
FAYDVQQDEw02NzdlN2M0NS03NjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyCDZrOptZ8sdg8OejcC4BJF327A8xsvt1iw/kbS83AiXASbEWXaHArkF
iGg0wfUCsKc1ZNXNyOgb7pfuLcAP0gxZTAods+OZeYABGiMmjlwbyXZCpxBLtJ4U
zNIhwCFDptXycNigUQFpMKMxZsAUSlYikT+d36S68GsZNi2JJFaLhmgk05vsq/ot
z0QiXcPQQ4FwT6kdo9byEUj0cueAXMA3T2n2DbNM1l/FS0lhWtSLeuRoWnyUFw15
c4ABN1t8fZScUBjpQh1whzuVFkFeDziId2AGyCG6PmceQGSO3QzpvKhvUYAotFgp
yBCk1UgePvFXG8fvATsW3OssoIojxQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFvR
9Ki+YQ7eXv+gqkHtNgmm9ROIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CODVCRTkzRUNEQzMxMUVGQTlFMEZEOTA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsjzMA0GCSqGSIb3DQEB
CwUAA4IBAQB3OFl3hm4UhJFzNzY2JyR/ir2K7HDNYCXU/e6CmgFN+SeeQZKesl1s
jH+6bBBVl4OhLXfHyTOHPHail5WhTG6bBhdBAH+jcJosA47gkd9FRAbIriwM3FuT
8m3sanu94VmgVRDXI35d3wC4m4/PHWlw+5WfDmzHEhaARUvZ5vN559Gm+GWMol1Q
yb3VgIIjnmYjMOmXpTlyDyOYTkypp+S2dfKaJNVmownu0F6lSqmdEno3E6HmOyES
u5eVektFBBj1+5tKSXpkDve2FvA2DFDgiAy4yWe4bk4xxoDqhsntfo5khUSighkf
VCTkMkDkRmc5W+wYgvU0tLfq1ka/8GOE
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:57 2025 by rpki-client