Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5F2A990F56C11EFAFF5A358762E951A.roa
File: C5F2A990F56C11EFAFF5A358762E951A.roa (raw, json)
Hash identifier: /hhYddJL9aT9nqBQpnmw4GJdQNX2tqtzrUvgAhEkXW4=
Subject key identifier: 82:2D:36:88:CF:B3:F8:8A:25:04:AB:DC:5A:55:8C:11:23:5F:9F:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5F2A990F56C11EFAFF5A358762E951A.roa
Signing time: Fri 28 Feb 2025 00:41:40 +0000
ROA not before: Fri 28 Feb 2025 00:00:35 +0000
ROA not after: Sat 19 Feb 2028 00:00:35 +0000
asID: 17561
IP address blocks: 154.209.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92586 (0x169aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 00:00:35 2025 GMT
Not After : Feb 19 00:00:35 2028 GMT
Subject: CN=67c10644-ac51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:7b:35:24:2b:8b:4d:e4:a5:22:77:c8:ab:
4a:7f:57:dd:20:5d:a8:a0:a8:7f:26:b2:d0:1c:cc:
65:e3:ea:a9:1b:17:b3:34:c4:a2:23:61:51:00:67:
9d:aa:e0:89:67:21:e5:82:92:06:c7:01:fc:ea:76:
88:bf:22:5d:39:a3:56:25:d0:cb:2c:79:63:f3:ff:
74:ab:57:32:6e:3a:7e:25:ea:fe:7a:b5:f1:ec:20:
f8:fb:b5:01:9f:00:e9:3f:aa:16:9c:97:de:da:ef:
e5:63:b9:61:61:a6:a6:2e:da:f5:ff:4d:5a:c7:1c:
9b:e6:79:53:6d:e1:21:89:05:d3:aa:69:6d:91:38:
56:6f:69:8a:31:fc:f4:74:ea:4f:22:8a:4e:57:0d:
56:45:a1:d5:fb:ba:cb:5e:be:56:0a:9c:d5:9f:cd:
0c:4b:fd:cb:d0:95:8d:09:23:c2:b4:24:4d:06:66:
be:8d:18:8f:b8:d4:23:a8:2f:3b:37:3f:65:a7:b9:
47:64:a7:19:89:a8:15:e0:96:e2:6b:97:86:6f:28:
b5:e1:ee:22:56:50:ae:59:a1:61:3c:ef:ae:4c:3b:
d9:a4:49:33:2c:4c:69:23:58:4b:d5:ad:96:df:80:
54:76:d4:30:f0:04:a7:40:fc:4b:5e:de:cc:aa:dc:
da:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2D:36:88:CF:B3:F8:8A:25:04:AB:DC:5A:55:8C:11:23:5F:9F:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5F2A990F56C11EFAFF5A358762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.251.0/24
Signature Algorithm: sha256WithRSAEncryption
63:29:cd:bf:e0:fd:23:2c:37:73:a7:a1:75:ee:c8:df:b6:cd:
99:30:a9:bc:c5:76:72:57:9c:9b:2a:6c:ab:5b:20:9e:49:fe:
b2:79:f5:4b:b6:66:bb:db:c9:68:b4:9e:be:0c:9b:aa:b7:09:
db:6b:e5:50:29:b8:ea:85:ea:46:11:8c:3e:5d:13:34:d9:6e:
6c:b1:6b:bc:7e:11:19:d5:a7:eb:7d:dc:ad:4f:de:c8:1f:5f:
d3:8b:40:c4:de:41:15:1c:47:e9:85:43:36:43:4b:d9:80:44:
48:30:1f:57:90:31:4e:bc:06:c2:5b:a1:44:d3:4a:34:a3:49:
57:40:c8:3f:b5:90:fd:27:35:e9:1f:1f:23:26:22:39:32:4c:
36:20:c4:fa:b5:4c:ec:ff:f9:57:db:3c:23:7a:d1:9d:87:2a:
f3:36:94:d8:de:20:65:6a:bb:49:27:45:85:0c:33:72:65:b5:
1f:3d:a2:cc:97:40:86:37:d3:01:9c:d9:94:a6:fc:88:38:92:
da:f6:00:33:f0:78:49:90:5f:98:38:f1:36:e7:f5:ea:56:11:
ef:c4:6a:cb:45:2c:69:9e:ae:c1:4f:e1:90:e6:e8:65:5d:c1:
22:02:82:dc:78:31:6d:1b:87:68:12:50:c3:3e:6d:1c:c2:24:
fd:6d:d8:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWmqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MDAwMDM1WhcNMjgwMjE5MDAwMDM1WjAYMRYw
FAYDVQQDEw02N2MxMDY0NC1hYzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx4p7NSQri03kpSJ3yKtKf1fdIF2ooKh/JrLQHMxl4+qpGxezNMSiI2FR
AGedquCJZyHlgpIGxwH86naIvyJdOaNWJdDLLHlj8/90q1cybjp+Jer+erXx7CD4
+7UBnwDpP6oWnJfe2u/lY7lhYaamLtr1/01axxyb5nlTbeEhiQXTqmltkThWb2mK
Mfz0dOpPIopOVw1WRaHV+7rLXr5WCpzVn80MS/3L0JWNCSPCtCRNBma+jRiPuNQj
qC87Nz9lp7lHZKcZiagV4Jbia5eGbyi14e4iVlCuWaFhPO+uTDvZpEkzLExpI1hL
1a2W34BUdtQw8ASnQPxLXt7MqtzaHwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIIt
NojPs/iKJQSr3FpVjBEjX5/cMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNUYyQTk5MEY1NkMxMUVGQUZGNUEzNTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtH7MA0GCSqGSIb3DQEB
CwUAA4IBAQBjKc2/4P0jLDdzp6F17sjfts2ZMKm8xXZyV5ybKmyrWyCeSf6yefVL
tma728lotJ6+DJuqtwnba+VQKbjqhepGEYw+XRM02W5ssWu8fhEZ1afrfdytT97I
H1/Ti0DE3kEVHEfphUM2Q0vZgERIMB9XkDFOvAbCW6FE00o0o0lXQMg/tZD9JzXp
Hx8jJiI5Mkw2IMT6tUzs//lX2zwjetGdhyrzNpTY3iBlartJJ0WFDDNyZbUfPaLM
l0CGN9MBnNmUpvyIOJLa9gAz8HhJkF+YOPE25/XqVhHvxGrLRSxpnq7BT+GQ5uhl
XcEiAoLceDFtG4doElDDPm0cwiT9bdj4
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:57 2025 by rpki-client