Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C31FF8CAF3F111EF962E2FAA762E951A.roa
File: C31FF8CAF3F111EF962E2FAA762E951A.roa (raw, json)
Hash identifier: 3wF6G6T+BNn57DlASzvmKYy/zeCl4K0lt0+bk3m+eh4=
Subject key identifier: AA:E4:8F:07:21:D3:4D:3F:F4:1E:7E:C0:0D:48:13:D5:35:B8:A7:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C31FF8CAF3F111EF962E2FAA762E951A.roa
Signing time: Wed 26 Feb 2025 03:28:36 +0000
ROA not before: Wed 26 Feb 2025 03:28:32 +0000
ROA not after: Thu 19 Feb 2026 03:28:32 +0000
asID: 984
IP address blocks: 154.203.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90279 (0x160a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 03:28:32 2025 GMT
Not After : Feb 19 03:28:32 2026 GMT
Subject: CN=67be8a64-ab61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:65:19:0a:eb:56:c2:95:e0:b5:02:bc:c1:
79:aa:c7:a8:85:1d:fe:a3:ee:e7:82:3b:6d:f9:20:
1b:37:fa:c2:03:08:11:af:51:04:7d:e8:9b:9b:e9:
37:09:50:94:d5:07:e9:aa:74:53:b0:e2:60:1b:65:
8c:2e:0d:43:45:a3:a5:fc:fc:e8:a7:fb:1a:29:ba:
9d:eb:2c:b7:31:f7:8b:6c:15:92:58:2b:db:24:db:
88:7d:5a:46:df:7a:05:ce:d4:b2:c4:46:2a:e9:2d:
bd:7e:eb:be:65:a8:21:cf:c2:ae:85:34:66:bf:6d:
17:77:f2:1f:19:f0:9c:f5:d0:aa:af:cd:04:3f:59:
51:66:49:ce:91:fa:29:a1:1b:00:53:43:da:6f:e6:
b5:05:ab:5f:a1:ae:ad:8c:76:cc:92:84:c8:af:ab:
77:00:8d:77:a8:33:20:45:9e:df:61:d3:98:4f:e8:
1f:46:5d:ce:0a:13:f9:46:ab:f4:f1:55:64:0b:09:
f4:80:ab:e0:25:2d:a3:38:75:d7:09:b0:95:54:1a:
52:a1:52:8b:a8:a8:0e:5d:2c:6e:5d:9b:70:04:b2:
3a:56:9b:bd:65:6e:bb:5b:03:b6:e4:06:d8:85:5e:
6a:14:d9:2a:e9:47:44:0b:2b:0f:e9:c7:9c:b2:de:
6d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E4:8F:07:21:D3:4D:3F:F4:1E:7E:C0:0D:48:13:D5:35:B8:A7:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C31FF8CAF3F111EF962E2FAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.107.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:76:38:c6:30:a2:79:05:b5:00:3d:47:c3:1d:11:cf:61:01:
22:0b:a9:b2:73:09:39:90:59:80:52:37:62:99:6b:af:37:81:
97:b1:73:9a:b9:73:f9:b5:24:99:f2:c9:f3:0f:1a:66:dc:53:
b3:2e:0e:ed:f2:23:93:fc:f3:9d:4a:4b:66:b3:1e:e9:45:fc:
6d:28:cc:4d:c3:63:12:77:b1:a1:4f:6c:f3:f7:6c:56:64:4b:
76:42:d5:b9:c1:a6:4b:1b:fe:7b:54:73:43:dc:c8:93:9a:a3:
70:d9:43:db:89:b3:d1:61:f4:3b:5b:bc:18:0c:4a:a1:34:d1:
b7:2a:cd:c3:a2:f7:ad:aa:d8:a6:28:f6:d3:8e:e4:9a:f0:16:
10:33:b0:93:3b:40:f1:b1:a5:44:2c:2b:06:d0:95:4d:43:e9:
46:da:8a:49:46:20:81:3f:69:a0:f4:82:01:20:e5:d3:14:e1:
0e:27:4a:00:29:04:40:b8:95:5e:aa:a1:82:10:b7:57:67:26:
39:de:e2:ed:01:5f:f3:0f:65:ba:65:34:51:b0:dd:d1:42:0c:
3c:33:e0:60:e9:3c:19:38:86:cd:30:32:8a:49:58:5e:38:36:
b4:c7:cc:02:84:7e:b1:3b:56:be:f4:bb:b5:41:e5:af:27:b6:
7c:19:27:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWCnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDMyODMyWhcNMjYwMjE5MDMyODMyWjAYMRYw
FAYDVQQDEw02N2JlOGE2NC1hYjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtsxlGQrrVsKV4LUCvMF5qseohR3+o+7ngjtt+SAbN/rCAwgRr1EEfeib
m+k3CVCU1QfpqnRTsOJgG2WMLg1DRaOl/Pzop/saKbqd6yy3MfeLbBWSWCvbJNuI
fVpG33oFztSyxEYq6S29fuu+Zaghz8KuhTRmv20Xd/IfGfCc9dCqr80EP1lRZknO
kfopoRsAU0Pab+a1Batfoa6tjHbMkoTIr6t3AI13qDMgRZ7fYdOYT+gfRl3OChP5
Rqv08VVkCwn0gKvgJS2jOHXXCbCVVBpSoVKLqKgOXSxuXZtwBLI6Vpu9ZW67WwO2
5AbYhV5qFNkq6UdECysP6cecst5tUwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKrk
jwch000/9B5+wA1IE9U1uKdAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMzFGRjhDQUYzRjExMUVGOTYyRTJGQUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmstrMA0GCSqGSIb3DQEB
CwUAA4IBAQCOdjjGMKJ5BbUAPUfDHRHPYQEiC6mycwk5kFmAUjdimWuvN4GXsXOa
uXP5tSSZ8snzDxpm3FOzLg7t8iOT/POdSktmsx7pRfxtKMxNw2MSd7GhT2zz92xW
ZEt2QtW5waZLG/57VHND3MiTmqNw2UPbibPRYfQ7W7wYDEqhNNG3Ks3Dovetqtim
KPbTjuSa8BYQM7CTO0DxsaVELCsG0JVNQ+lG2opJRiCBP2mg9IIBIOXTFOEOJ0oA
KQRAuJVeqqGCELdXZyY53uLtAV/zD2W6ZTRRsN3RQgw8M+Bg6TwZOIbNMDKKSVhe
ODa0x8wChH6xO1a+9Lu1QeWvJ7Z8GSf0
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:47:11 2025 by rpki-client