Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4F05B7EF42111EFBF75C170762E951A.roa
File: C4F05B7EF42111EFBF75C170762E951A.roa (raw, json)
Hash identifier: EZC25juI0asxLF4YCNGi2MpEFfAIrT7ZHj0pRGAS0Bo=
Subject key identifier: 4A:40:25:D2:85:81:2F:A1:8F:5A:D4:79:A5:50:E1:43:F9:68:D0:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0161A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4F05B7EF42111EFBF75C170762E951A.roa
Signing time: Wed 26 Feb 2025 09:12:15 +0000
ROA not before: Wed 26 Feb 2025 09:12:11 +0000
ROA not after: Thu 19 Feb 2026 09:12:11 +0000
asID: 984
IP address blocks: 154.206.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90535 (0x161a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:12:11 2025 GMT
Not After : Feb 19 09:12:11 2026 GMT
Subject: CN=67bedaef-698d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:c6:cf:6f:40:d4:95:1d:b5:ba:68:f4:b5:
25:09:ec:d4:66:37:23:26:87:fc:62:a9:41:e5:6a:
73:fd:10:46:b1:3d:5e:9f:a2:d3:38:97:77:4d:73:
d2:1d:38:22:58:34:d5:62:6c:e3:40:fd:50:26:b0:
e6:a6:69:cd:47:f5:9e:f6:23:f7:ae:36:14:d9:10:
01:39:22:d3:3d:81:64:c9:e4:b6:90:cf:bd:6e:3f:
a7:6f:57:7b:5e:3a:cd:f1:55:e7:fb:74:a2:59:c4:
3d:53:e5:57:e6:1a:79:56:38:f0:fe:c0:1f:6d:cc:
23:13:18:b6:16:9e:3a:64:3d:6f:ae:19:6a:fb:48:
f8:a2:42:91:bb:a2:51:89:cd:c8:a2:c0:21:8e:ca:
0b:f9:b4:c5:68:cf:78:eb:94:73:8f:8d:14:78:1b:
6e:5c:e1:0c:8a:5c:67:a0:fd:d8:58:c8:40:94:16:
96:de:c8:52:34:c6:e4:1c:81:75:42:71:ef:fe:17:
c5:f2:42:61:69:30:af:69:a6:a5:7b:94:48:18:bd:
28:26:cc:63:b5:f3:eb:86:a8:37:de:f0:f5:8b:13:
0e:82:49:d6:d4:5c:a8:e9:2d:61:17:26:b2:89:fc:
80:55:cc:bc:cb:da:91:ac:5d:b3:6f:e6:13:19:e0:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:40:25:D2:85:81:2F:A1:8F:5A:D4:79:A5:50:E1:43:F9:68:D0:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4F05B7EF42111EFBF75C170762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:d6:f6:87:60:f9:86:f9:8b:18:0b:3f:15:66:cd:f9:4d:9e:
3d:06:d0:d9:9d:bb:5b:b0:6e:b3:2a:6c:bb:7c:ed:98:d0:66:
05:0f:f3:67:62:ae:e0:0a:70:d5:be:1b:4b:eb:ac:a5:fc:8b:
8b:46:3b:47:5d:ca:c1:f8:4b:07:a7:2f:6b:fc:2a:40:65:28:
e8:d8:95:df:09:d4:e5:f2:19:6b:eb:78:4c:6e:fe:ea:f7:b1:
9e:9b:49:42:ee:4f:5e:1a:7e:38:7a:7b:64:3f:66:3c:bf:f9:
47:f5:50:5b:70:42:1b:b1:e3:44:29:66:5b:04:ec:b4:11:de:
c9:b6:b7:7c:dd:84:78:13:f2:d8:0f:6e:c3:0f:c9:1b:3f:98:
32:9d:f4:ba:d8:dd:12:81:69:26:ec:68:6d:f4:41:79:64:2c:
6c:23:11:09:11:20:38:67:ea:64:4b:10:a8:75:05:b8:46:60:
84:a7:e0:5d:0d:29:2c:a9:af:43:af:3a:ea:27:ac:26:e5:17:
8a:21:8c:f7:07:90:3e:b3:ec:c7:4f:7c:39:fc:23:b8:22:fb:
43:ca:4e:a3:ec:10:9c:e4:1b:20:39:cb:c3:df:bb:8f:ab:0b:
3b:94:26:85:a6:1c:2f:eb:eb:0d:04:d0:35:09:0c:02:76:62:
3a:75:2f:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWGnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDkxMjExWhcNMjYwMjE5MDkxMjExWjAYMRYw
FAYDVQQDEw02N2JlZGFlZi02OThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx5vGz29A1JUdtbpo9LUlCezUZjcjJof8YqlB5Wpz/RBGsT1en6LTOJd3
TXPSHTgiWDTVYmzjQP1QJrDmpmnNR/We9iP3rjYU2RABOSLTPYFkyeS2kM+9bj+n
b1d7XjrN8VXn+3SiWcQ9U+VX5hp5Vjjw/sAfbcwjExi2Fp46ZD1vrhlq+0j4okKR
u6JRic3IosAhjsoL+bTFaM9465Rzj40UeBtuXOEMilxnoP3YWMhAlBaW3shSNMbk
HIF1QnHv/hfF8kJhaTCvaaale5RIGL0oJsxjtfPrhqg33vD1ixMOgknW1Fyo6S1h
FyayifyAVcy8y9qRrF2zb+YTGeC/mQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEpA
JdKFgS+hj1rUeaVQ4UP5aNAFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNEYwNUI3RUY0MjExMUVGQkY3NUMxNzA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms7kMA0GCSqGSIb3DQEB
CwUAA4IBAQCk1vaHYPmG+YsYCz8VZs35TZ49BtDZnbtbsG6zKmy7fO2Y0GYFD/Nn
Yq7gCnDVvhtL66yl/IuLRjtHXcrB+EsHpy9r/CpAZSjo2JXfCdTl8hlr63hMbv7q
97Gem0lC7k9eGn44entkP2Y8v/lH9VBbcEIbseNEKWZbBOy0Ed7Jtrd83YR4E/LY
D27DD8kbP5gynfS62N0SgWkm7Ght9EF5ZCxsIxEJESA4Z+pkSxCodQW4RmCEp+Bd
DSksqa9DrzrqJ6wm5ReKIYz3B5A+s+zHT3w5/CO4IvtDyk6j7BCc5BsgOcvD37uP
qws7lCaFphwv6+sNBNA1CQwCdmI6dS8D
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:13 2025 by rpki-client