Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C626D4A0F6B511EF946CBBB0762E951A.roa
File: C626D4A0F6B511EF946CBBB0762E951A.roa (raw, json)
Hash identifier: wyG86fNEzPh6NStZ87H697LHqkoeSDCMdcXqRgtZe5w=
Subject key identifier: 12:46:50:E6:D8:14:42:38:96:C7:01:44:DF:E8:9A:B8:AA:E7:23:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016EC7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C626D4A0F6B511EF946CBBB0762E951A.roa
Signing time: Sat 01 Mar 2025 15:56:45 +0000
ROA not before: Sat 01 Mar 2025 15:56:41 +0000
ROA not after: Sat 05 Apr 2025 15:56:41 +0000
asID: 203020
IP address blocks: 154.207.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93895 (0x16ec7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 15:56:41 2025 GMT
Not After : Apr 5 15:56:41 2025 GMT
Subject: CN=67c32e3c-5be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0f:4c:13:eb:2c:a6:e1:06:bb:c4:5a:c9:86:
b1:09:bc:cb:c8:5f:ef:c4:6c:91:9d:fb:43:df:97:
e2:3c:60:73:7d:3c:cb:b9:23:73:52:3e:bb:ef:41:
11:28:a5:92:55:c0:35:ca:f2:7d:05:4a:c4:db:80:
d2:b2:7c:dd:e6:c0:4b:88:bb:dc:5b:5b:82:83:11:
fa:cd:86:b3:a5:50:77:77:fd:f4:c2:3a:92:dd:c2:
70:31:85:23:27:cf:72:68:bd:22:1b:31:5e:32:90:
94:2a:55:df:f8:9a:6a:37:f2:80:c2:96:c8:37:18:
3a:21:17:ce:b7:2d:94:62:1d:c1:d2:9b:f3:5f:7a:
79:28:67:e6:16:02:77:b8:89:2f:a1:88:89:04:55:
34:a0:bb:77:03:86:2f:a6:3b:79:37:4b:cc:46:27:
4c:37:58:cd:23:15:d8:20:3a:59:35:fa:0e:32:2c:
80:c8:de:c5:03:7f:1b:74:f5:cb:39:61:10:3f:c2:
93:a1:66:8d:c5:6c:97:4e:ac:41:70:b2:b3:d9:db:
19:be:22:13:1d:cf:5a:54:83:da:99:ec:34:4d:2d:
6c:00:a8:84:52:1e:6c:1a:d5:d3:b2:49:13:9b:20:
f9:fd:ff:c8:80:e0:62:04:e0:28:11:a6:38:0a:d0:
19:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:46:50:E6:D8:14:42:38:96:C7:01:44:DF:E8:9A:B8:AA:E7:23:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C626D4A0F6B511EF946CBBB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.116.0/22
Signature Algorithm: sha256WithRSAEncryption
52:97:d7:6c:74:3c:b5:b0:af:85:7a:9d:f7:c5:c8:66:04:ed:
30:4d:d2:e0:05:e2:b3:92:8a:f9:fb:9f:e2:8c:84:1d:fd:6f:
40:66:d1:de:be:27:f6:63:e1:2a:91:2d:17:6c:26:ee:08:88:
60:50:d1:0a:dc:31:55:fa:60:3d:69:80:a9:44:79:a5:66:ff:
24:b9:f5:c5:c5:64:80:8b:50:91:20:d6:72:85:f4:c2:91:e2:
9c:1f:0c:b5:6d:91:1e:3e:70:a6:4a:43:f0:3a:8a:0a:39:e4:
f3:4b:67:4a:d5:9e:e1:57:de:5b:dd:4a:b3:9d:6f:06:75:a5:
2b:bf:62:72:22:1a:0e:a5:b7:38:35:4c:e9:85:b2:02:ad:8d:
8f:6c:ee:33:4e:0f:84:c9:2c:fb:02:de:da:1b:98:b4:0f:75:
ce:c6:6b:e7:77:8e:2d:98:a3:57:de:09:61:1e:32:be:ef:32:
2c:0a:f1:6a:3b:ba:d0:eb:78:42:77:42:70:23:2f:b5:43:bb:
47:99:41:ac:65:aa:c4:2a:e9:5c:56:cb:90:13:fc:16:ab:e6:
a4:28:55:d5:42:ec:ab:03:57:9e:de:11:8a:be:2f:8f:47:a0:
b1:00:7d:8a:8d:c9:ec:c6:da:f2:c8:1e:19:a8:04:06:9b:cb:
64:19:10:bd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW7HMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTU1NjQxWhcNMjUwNDA1MTU1NjQxWjAYMRYw
FAYDVQQDEw02N2MzMmUzYy01YmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0Q9ME+sspuEGu8RayYaxCbzLyF/vxGyRnftD35fiPGBzfTzLuSNzUj67
70ERKKWSVcA1yvJ9BUrE24DSsnzd5sBLiLvcW1uCgxH6zYazpVB3d/30wjqS3cJw
MYUjJ89yaL0iGzFeMpCUKlXf+JpqN/KAwpbINxg6IRfOty2UYh3B0pvzX3p5KGfm
FgJ3uIkvoYiJBFU0oLt3A4Yvpjt5N0vMRidMN1jNIxXYIDpZNfoOMiyAyN7FA38b
dPXLOWEQP8KToWaNxWyXTqxBcLKz2dsZviITHc9aVIPamew0TS1sAKiEUh5sGtXT
skkTmyD5/f/IgOBiBOAoEaY4CtAZ6wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBJG
UObYFEI4lscBRN/omriq5yNUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNjI2RDRBMEY2QjUxMUVGOTQ2Q0JCQjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCms90MA0GCSqGSIb3DQEB
CwUAA4IBAQBSl9dsdDy1sK+Fep33xchmBO0wTdLgBeKzkor5+5/ijIQd/W9AZtHe
vif2Y+EqkS0XbCbuCIhgUNEK3DFV+mA9aYCpRHmlZv8kufXFxWSAi1CRINZyhfTC
keKcHwy1bZEePnCmSkPwOooKOeTzS2dK1Z7hV95b3UqznW8GdaUrv2JyIhoOpbc4
NUzphbICrY2PbO4zTg+EySz7At7aG5i0D3XOxmvnd44tmKNX3glhHjK+7zIsCvFq
O7rQ63hCd0JwIy+1Q7tHmUGsZarEKulcVsuQE/wWq+akKFXVQuyrA1ee3hGKvi+P
R6CxAH2KjcnsxtryyB4ZqAQGm8tkGRC9
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:43 2025 by rpki-client