Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C422BE54070311F09835C198762E951A.roa
File: C422BE54070311F09835C198762E951A.roa (raw, json)
Hash identifier: yWG0OD6e6J8tk5j/6bQO2buWlQPCKG2yNhmAQ2XXCns=
Subject key identifier: E7:84:1C:50:24:72:E5:9E:1E:58:24:BB:6F:8C:8A:91:22:56:E3:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01757E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C422BE54070311F09835C198762E951A.roa
Signing time: Sat 22 Mar 2025 09:55:20 +0000
ROA not before: Sat 22 Mar 2025 09:55:17 +0000
ROA not after: Wed 30 Apr 2025 09:55:17 +0000
asID: 55933
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95614 (0x1757e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 22 09:55:17 2025 GMT
Not After : Apr 30 09:55:17 2025 GMT
Subject: CN=67de8908-d6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:67:5b:51:84:f2:85:9a:a8:3d:c2:41:92:5a:
41:1a:f0:62:99:12:17:52:d3:9e:3c:d4:94:a6:e6:
ac:f9:53:0e:44:c6:17:c4:2a:15:4d:15:a8:56:32:
42:52:e3:2c:5d:5c:1e:95:d7:89:82:b3:c7:b6:42:
9d:1b:70:1e:0b:47:fc:bb:c1:bb:0d:40:62:df:e7:
b5:81:c7:00:8c:78:ea:c6:94:53:66:49:d0:b2:a5:
d7:d2:b8:cc:dd:e6:84:4e:b5:71:50:d4:7d:c5:0d:
8f:0a:e1:2e:a5:60:94:82:34:b2:e2:55:1c:d0:8c:
90:65:70:10:a3:c7:7a:da:26:7a:a3:ff:c8:ae:83:
5b:87:d8:80:38:91:d0:a0:bf:a4:54:a4:1e:97:3e:
14:2c:fc:52:0e:8a:cf:00:a6:e0:e0:58:cf:81:c9:
fe:89:12:b5:86:8f:49:fd:f4:86:87:d0:1b:65:f0:
54:de:a7:bd:0e:de:ff:e6:4e:c7:d0:34:76:12:b8:
62:e1:96:4f:be:47:5f:ac:e3:ce:93:e6:68:77:61:
aa:56:db:7d:56:6b:4b:ab:ac:53:c6:cd:b8:74:07:
e0:b0:1a:c2:a8:84:21:8a:fe:b0:1b:df:99:84:cd:
2b:2d:29:2d:ea:04:43:75:15:91:a8:f4:fd:42:4e:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:84:1C:50:24:72:E5:9E:1E:58:24:BB:6F:8C:8A:91:22:56:E3:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C422BE54070311F09835C198762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
67:fd:94:04:9a:5d:62:fc:21:cf:05:ab:a2:5e:13:5a:6c:e0:
73:0f:9b:28:ed:3e:73:04:20:7e:e1:0c:82:4f:cb:9b:4c:4e:
d6:9f:7f:0b:82:7c:65:db:41:52:58:2d:43:9e:8d:98:84:0b:
cd:47:b4:64:26:9a:ca:e8:bc:49:82:96:1d:1e:01:2e:04:36:
24:a8:b1:a6:af:d5:f7:a0:61:fc:95:b4:6f:93:66:da:63:e3:
c0:16:4c:9e:3f:af:34:e9:d4:ac:1e:8b:6f:95:1f:6e:ef:f5:
0f:e1:58:ad:12:c6:9b:0f:7d:e5:48:6b:ab:f6:5f:90:36:40:
88:2f:be:e2:fe:b2:f0:4f:e6:34:00:bc:ac:2f:cf:8e:d7:35:
06:6e:7c:ac:20:43:3e:29:9c:83:ee:2b:18:b9:57:1e:e2:42:
fe:a8:81:3e:00:ec:dd:44:db:6b:e5:a7:02:40:f8:b0:92:c6:
e3:01:9a:44:3d:12:88:39:a2:09:24:8a:b7:a0:51:89:44:ef:
de:7f:75:69:04:16:4b:e8:cc:81:17:d3:c1:0c:1f:d2:d5:d5:
ff:4f:13:e1:4e:5b:1f:df:75:af:ae:63:c1:85:9a:29:5c:c5:
f9:3b:f1:44:a8:bd:f6:3e:c9:38:b7:5b:7f:8d:e1:55:cf:a7:
2f:ed:53:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXV+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzIyMDk1NTE3WhcNMjUwNDMwMDk1NTE3WjAYMRYw
FAYDVQQDEw02N2RlODkwOC1kNmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5WdbUYTyhZqoPcJBklpBGvBimRIXUtOePNSUpuas+VMORMYXxCoVTRWo
VjJCUuMsXVweldeJgrPHtkKdG3AeC0f8u8G7DUBi3+e1gccAjHjqxpRTZknQsqXX
0rjM3eaETrVxUNR9xQ2PCuEupWCUgjSy4lUc0IyQZXAQo8d62iZ6o//IroNbh9iA
OJHQoL+kVKQelz4ULPxSDorPAKbg4FjPgcn+iRK1ho9J/fSGh9AbZfBU3qe9Dt7/
5k7H0DR2Erhi4ZZPvkdfrOPOk+Zod2GqVtt9VmtLq6xTxs24dAfgsBrCqIQhiv6w
G9+ZhM0rLSkt6gRDdRWRqPT9Qk4SbQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOeE
HFAkcuWeHlgku2+MipEiVuPKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNDIyQkU1NDA3MDMxMUYwOTgzNUMxOTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmslAMA0GCSqGSIb3DQEB
CwUAA4IBAQBn/ZQEml1i/CHPBauiXhNabOBzD5so7T5zBCB+4QyCT8ubTE7Wn38L
gnxl20FSWC1Dno2YhAvNR7RkJprK6LxJgpYdHgEuBDYkqLGmr9X3oGH8lbRvk2ba
Y+PAFkyeP6806dSsHotvlR9u7/UP4VitEsabD33lSGur9l+QNkCIL77i/rLwT+Y0
ALysL8+O1zUGbnysIEM+KZyD7isYuVce4kL+qIE+AOzdRNtr5acCQPiwksbjAZpE
PRKIOaIJJIq3oFGJRO/ef3VpBBZL6MyBF9PBDB/S1dX/TxPhTlsf33WvrmPBhZop
XMX5O/FEqL32Psk4t1t/jeFVz6cv7VO1
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:30 2025 by rpki-client