Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4602262F85D11EF80CD5B6E762E951A.roa
File: C4602262F85D11EF80CD5B6E762E951A.roa (raw, json)
Hash identifier: ZPMaz0WsmB9Cj/n7cikVKKqOreOFyra8HEa8mdrg5rk=
Subject key identifier: 3A:BA:B4:AE:54:0E:9A:5A:F3:A8:EB:37:5C:0A:53:77:2F:8E:31:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01710B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4602262F85D11EF80CD5B6E762E951A.roa
Signing time: Mon 03 Mar 2025 18:31:48 +0000
ROA not before: Mon 03 Mar 2025 18:31:45 +0000
ROA not after: Mon 31 Mar 2025 18:31:45 +0000
asID: 49505
IP address blocks: 154.209.208.0/24 maxlen: 24
154.211.9.0/24 maxlen: 24
154.211.11.0/24 maxlen: 24
154.211.16.0/24 maxlen: 24
154.211.17.0/24 maxlen: 24
154.211.19.0/24 maxlen: 24
154.212.28.0/24 maxlen: 24
154.212.29.0/24 maxlen: 24
154.212.30.0/24 maxlen: 24
154.213.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94475 (0x1710b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 18:31:45 2025 GMT
Not After : Mar 31 18:31:45 2025 GMT
Subject: CN=67c5f594-d3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:32:8b:6d:e3:0b:ff:ca:0c:7e:47:f0:23:
78:3f:1d:5c:59:e1:8c:7e:06:35:0c:71:59:79:da:
f2:05:ef:f7:ad:95:59:9a:0c:53:75:1d:1e:1a:5b:
2f:91:61:33:f2:b7:95:ee:4f:c2:ed:f1:fb:5d:4b:
47:64:e7:a7:d7:0c:57:b2:2b:97:56:b7:db:ca:05:
22:15:13:8a:72:46:2f:a6:bb:10:ab:f7:87:a4:04:
9f:d9:3d:3d:70:33:c0:8a:f6:dd:50:98:d6:17:04:
08:6e:77:a9:ba:73:7a:b0:bc:af:07:86:77:a5:aa:
1d:9f:fa:09:d7:ff:c2:2d:c1:07:72:b8:f9:0a:98:
fc:16:3e:99:4c:3d:a6:74:1a:8e:f3:f6:39:4d:6a:
58:3f:8d:d9:6b:fa:12:a5:cf:dc:e1:2b:54:b4:a0:
19:27:01:29:92:ee:63:8b:8e:b6:e1:09:e8:da:cf:
d1:7d:3b:f4:10:57:95:a8:37:51:41:c7:b5:3f:fd:
36:2b:10:ae:df:59:85:18:4c:ae:e6:f1:06:2e:df:
fa:85:82:84:74:89:68:47:a7:cf:98:b4:2d:65:74:
19:00:36:0c:a9:f7:46:6a:bc:bd:3d:0c:13:11:79:
ab:b6:81:49:b4:4d:b5:e4:c8:6c:78:2c:92:d6:f4:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BA:B4:AE:54:0E:9A:5A:F3:A8:EB:37:5C:0A:53:77:2F:8E:31:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4602262F85D11EF80CD5B6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.208.0/24
154.211.9.0/24
154.211.11.0/24
154.211.16.0/23
154.211.19.0/24
154.212.28.0-154.212.30.255
154.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
72:53:3c:92:d3:d3:e6:cb:f9:ba:38:0e:94:01:eb:07:43:30:
1b:f1:fd:f7:9f:5e:20:fd:4b:bf:52:2e:bb:67:e9:ce:ef:1b:
28:8d:89:92:46:ff:18:6d:9e:cf:0c:b5:5f:be:fc:58:97:db:
0c:c0:1f:39:72:48:16:e2:06:94:2b:12:18:b0:e5:c5:2d:36:
d5:b4:0b:46:4a:35:cb:46:32:18:8f:29:26:6e:51:04:0a:42:
23:69:24:de:c3:e8:33:7a:cd:9f:8d:2c:83:74:38:7f:12:69:
b7:2c:28:36:52:16:ca:22:46:1f:02:64:b4:16:ca:2d:fb:22:
93:ca:69:40:1e:c9:2e:94:73:95:40:08:76:35:60:18:47:a2:
3d:86:d4:4d:64:ca:4b:d1:8f:af:b0:05:1b:49:c8:78:5f:59:
a8:20:b1:6d:7c:d6:65:a2:e7:57:92:de:d6:52:9c:f0:c5:b6:
2b:ec:41:95:e7:89:1c:94:ab:8e:a4:84:06:3e:d9:86:48:83:
e3:8b:07:50:2c:c8:09:1a:e8:4e:be:18:88:7d:00:76:00:76:
f9:91:55:2e:1e:e9:ee:15:d0:6b:b0:94:75:3c:e9:e7:88:32:
cd:1c:0c:d3:8d:ea:27:38:71:22:e2:48:a0:98:c8:6d:78:7c:
e6:79:1d:93
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIDAXELMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAzMTgzMTQ1WhcNMjUwMzMxMTgzMTQ1WjAYMRYw
FAYDVQQDEw02N2M1ZjU5NC1kM2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsNMyi23jC//KDH5H8CN4Px1cWeGMfgY1DHFZedryBe/3rZVZmgxTdR0e
GlsvkWEz8reV7k/C7fH7XUtHZOen1wxXsiuXVrfbygUiFROKckYvprsQq/eHpASf
2T09cDPAivbdUJjWFwQIbnepunN6sLyvB4Z3paodn/oJ1//CLcEHcrj5Cpj8Fj6Z
TD2mdBqO8/Y5TWpYP43Za/oSpc/c4StUtKAZJwEpku5ji4624Qno2s/RfTv0EFeV
qDdRQce1P/02KxCu31mFGEyu5vEGLt/6hYKEdIloR6fPmLQtZXQZADYMqfdGary9
PQwTEXmrtoFJtE215MhseCyS1vSgwQIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFDq6
tK5UDppa86jrN1wKU3cvjjHaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNDYwMjI2MkY4NUQxMUVGODBDRDVCNkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAmtHQAwQAmtMJAwQAmtML
AwQBmtMQAwQAmtMTMAwDBAKa1BwDBACa1B4DBACa1QAwDQYJKoZIhvcNAQELBQAD
ggEBAHJTPJLT0+bL+bo4DpQB6wdDMBvx/fefXiD9S79SLrtn6c7vGyiNiZJG/xht
ns8MtV++/FiX2wzAHzlySBbiBpQrEhiw5cUtNtW0C0ZKNctGMhiPKSZuUQQKQiNp
JN7D6DN6zZ+NLIN0OH8SabcsKDZSFsoiRh8CZLQWyi37IpPKaUAeyS6Uc5VACHY1
YBhHoj2G1E1kykvRj6+wBRtJyHhfWaggsW181mWi51eS3tZSnPDFtivsQZXniRyU
q46khAY+2YZIg+OLB1AsyAka6E6+GIh9AHYAdvmRVS4e6e4V0GuwlHU86eeIMs0c
DNON6ic4cSLiSKCYyG14fOZ5HZM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:47:47 2025 by rpki-client