Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5DDF724F42311EF8EEB657F762E951A.roa
File: C5DDF724F42311EF8EEB657F762E951A.roa (raw, json)
Hash identifier: 0Wph/gNtY2yr1ohTKRgFKw0BWeZzEab7mmcgCj8Ps8k=
Subject key identifier: 72:15:DB:52:F2:A1:58:F8:53:18:7E:B6:EC:20:0D:1F:5D:D8:12:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0161CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5DDF724F42311EF8EEB657F762E951A.roa
Signing time: Wed 26 Feb 2025 09:26:35 +0000
ROA not before: Wed 26 Feb 2025 09:26:32 +0000
ROA not after: Thu 19 Feb 2026 09:26:32 +0000
asID: 328608
IP address blocks: 154.200.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90570 (0x161ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:26:32 2025 GMT
Not After : Feb 19 09:26:32 2026 GMT
Subject: CN=67bede4b-9930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:a2:be:4d:e3:34:2c:a2:6b:13:db:5b:ff:
f2:21:44:39:7f:17:10:7b:f2:37:5d:0c:e2:1b:82:
ed:83:39:64:5e:6d:ab:0a:9e:b2:dd:45:2a:5e:36:
8f:54:b9:6e:8f:26:c1:21:72:3d:cd:79:47:05:f4:
b4:5c:67:97:77:5b:c5:0f:66:1a:4f:7d:e5:55:8c:
69:79:a0:98:d3:a5:f9:7a:0a:89:ef:33:de:ad:36:
a5:f2:59:b6:90:9f:f9:36:77:4c:ca:7c:01:a5:54:
09:0a:a8:ba:ff:38:3a:72:d4:02:6f:68:0e:60:02:
07:8d:2d:20:06:dd:5c:7a:c4:3f:f3:98:22:0e:35:
dc:1b:bc:5c:83:db:36:70:b4:04:02:8c:2e:19:9e:
86:d7:9c:35:23:3e:cf:4c:a0:02:23:b1:13:94:0f:
cf:cf:be:89:c3:a3:7c:bb:20:de:08:31:9f:14:16:
72:79:ca:0b:60:06:71:07:e0:ff:8d:11:46:14:7c:
77:93:6c:06:9a:2a:8a:7a:fa:99:c9:8d:15:d6:9f:
d6:87:23:8c:8d:2b:c0:1b:28:9a:49:ee:ef:a3:74:
ca:40:ee:a5:d2:7b:19:6c:55:e7:c9:cc:d6:2b:1d:
f2:d4:4a:8f:ce:a1:07:17:5b:72:b3:b6:94:9f:91:
91:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:15:DB:52:F2:A1:58:F8:53:18:7E:B6:EC:20:0D:1F:5D:D8:12:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5DDF724F42311EF8EEB657F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.228.0/24
Signature Algorithm: sha256WithRSAEncryption
82:f4:71:63:fc:05:87:a3:7e:1d:78:17:ef:e7:0b:01:4d:83:
d2:70:a8:27:19:10:10:a0:81:8b:cb:d8:a1:44:77:d4:a0:6d:
ce:4f:98:62:fe:ab:7f:f2:f3:4c:7c:d5:d2:4e:ea:f2:0a:95:
e8:ee:e6:a9:fa:c1:1d:a5:aa:be:e7:cd:ec:23:a1:92:b4:8c:
38:e4:df:4a:49:de:c8:1c:ec:90:f9:f7:e0:72:11:a5:99:54:
ba:6a:cc:9a:e3:0d:7b:77:f7:ab:26:65:d4:ed:14:66:2c:0d:
c9:b7:37:94:49:4c:16:3b:55:ee:be:36:b2:f2:1c:c5:0d:dd:
f2:02:3a:8d:fc:d6:44:5c:06:e9:3b:2e:9f:9a:33:27:61:7e:
17:e6:62:80:60:79:46:a6:d0:7a:b4:70:63:2a:af:57:ea:ba:
64:83:32:dc:ab:6c:06:66:11:24:c1:d2:c8:a2:5f:26:7d:d6:
20:76:2b:e3:8b:f2:5f:d6:68:07:6d:6a:a6:71:53:59:64:6f:
57:88:b8:54:50:99:ef:e8:80:9a:e8:b9:39:25:7a:a2:c9:f0:
ad:eb:24:8a:3e:97:5d:d1:c8:41:86:1b:11:a5:33:d6:a4:5f:
c5:73:2f:77:c7:38:22:e9:94:f4:30:17:ba:77:99:87:2f:f1:
be:53:a2:5b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWHKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDkyNjMyWhcNMjYwMjE5MDkyNjMyWjAYMRYw
FAYDVQQDEw02N2JlZGU0Yi05OTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAskiivk3jNCyiaxPbW//yIUQ5fxcQe/I3XQziG4LtgzlkXm2rCp6y3UUq
XjaPVLlujybBIXI9zXlHBfS0XGeXd1vFD2YaT33lVYxpeaCY06X5egqJ7zPerTal
8lm2kJ/5NndMynwBpVQJCqi6/zg6ctQCb2gOYAIHjS0gBt1cesQ/85giDjXcG7xc
g9s2cLQEAowuGZ6G15w1Iz7PTKACI7ETlA/Pz76Jw6N8uyDeCDGfFBZyecoLYAZx
B+D/jRFGFHx3k2wGmiqKevqZyY0V1p/WhyOMjSvAGyiaSe7vo3TKQO6l0nsZbFXn
yczWKx3y1EqPzqEHF1tys7aUn5GRJwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHIV
21LyoVj4Uxh+tuwgDR9d2BIyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNURERjcyNEY0MjMxMUVGOEVFQjY1N0Y3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsjkMA0GCSqGSIb3DQEB
CwUAA4IBAQCC9HFj/AWHo34deBfv5wsBTYPScKgnGRAQoIGLy9ihRHfUoG3OT5hi
/qt/8vNMfNXSTuryCpXo7uap+sEdpaq+583sI6GStIw45N9KSd7IHOyQ+ffgchGl
mVS6asya4w17d/erJmXU7RRmLA3JtzeUSUwWO1Xuvjay8hzFDd3yAjqN/NZEXAbp
Oy6fmjMnYX4X5mKAYHlGptB6tHBjKq9X6rpkgzLcq2wGZhEkwdLIol8mfdYgdivj
i/Jf1mgHbWqmcVNZZG9XiLhUUJnv6ICa6Lk5JXqiyfCt6ySKPpdd0chBhhsRpTPW
pF/Fcy93xzgi6ZT0MBe6d5mHL/G+U6Jb
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:54:58 2025 by rpki-client