Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C877667EF44511EF8850C36D762E951A.roa
File: C877667EF44511EF8850C36D762E951A.roa (raw, json)
Hash identifier: lkZHebS/Lregr+ZnSOKwe+Gqph3IG0CUmL649r+cBrw=
Subject key identifier: 9A:94:1D:D0:2D:10:F9:38:0E:58:3E:FF:9A:D0:7A:67:EE:53:82:E6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C877667EF44511EF8850C36D762E951A.roa
Signing time: Wed 26 Feb 2025 13:30:02 +0000
ROA not before: Wed 26 Feb 2025 13:29:59 +0000
ROA not after: Fri 20 Feb 2026 13:29:59 +0000
asID: 984
IP address blocks: 154.83.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91081 (0x163c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:29:59 2025 GMT
Not After : Feb 20 13:29:59 2026 GMT
Subject: CN=67bf175a-469d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:7a:28:63:af:a0:1a:16:25:a2:90:fa:f9:
c6:84:e0:de:f5:96:70:a3:8f:d5:c4:78:16:5b:06:
e2:e4:be:58:4b:a4:a1:94:c2:af:59:26:29:4e:8b:
d3:35:e3:0f:28:2e:a2:8c:ca:05:23:5c:9b:04:c2:
4f:58:6f:36:d1:c1:18:02:64:b3:f0:d3:c5:b6:52:
5f:55:7a:29:0d:71:e4:83:f3:b4:fe:da:25:bd:42:
9f:3c:a2:0d:33:62:f9:d2:c3:af:b7:34:28:41:c7:
4a:ce:9f:e8:ad:20:f4:18:8b:56:66:75:1a:f2:ca:
8f:e2:c9:44:61:a0:f7:c4:7d:68:ba:39:9a:6c:32:
59:2d:01:59:39:a6:7a:2c:31:8f:07:41:1e:03:de:
b4:05:1d:bc:ee:58:6c:dd:96:8f:e9:0d:a3:43:06:
b4:47:a4:c9:e4:b3:32:c6:f0:4a:ca:e5:f0:97:0a:
e7:7d:95:aa:65:d3:1d:3e:80:a6:36:55:03:6e:ed:
8e:41:3c:c8:8c:2b:38:e0:fa:5c:de:05:ca:c8:27:
38:23:66:ab:89:ea:b9:6b:09:53:86:5e:bd:70:63:
0c:1b:37:93:92:bc:3c:43:c7:a8:eb:77:13:78:f2:
68:de:7a:29:3a:6a:bf:9d:d5:9c:65:58:0f:de:c4:
f0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:94:1D:D0:2D:10:F9:38:0E:58:3E:FF:9A:D0:7A:67:EE:53:82:E6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C877667EF44511EF8850C36D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.178.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d0:2a:6e:5d:b4:22:4c:50:84:df:ff:8d:84:5c:55:b0:96:
dd:6c:f8:36:e0:7d:5e:c7:f1:27:89:ff:d4:db:35:b7:cb:21:
62:81:f7:3c:04:c8:d9:11:5e:9a:d1:28:3d:fd:02:9a:39:48:
f0:f0:b8:14:b7:3c:cf:05:28:68:40:f0:0d:cc:20:12:76:0e:
78:80:6f:e4:36:b8:08:92:85:cc:6d:4d:f8:a7:a2:a0:b7:bf:
a5:cd:91:60:7a:16:c3:37:38:9f:3d:10:30:1c:f7:ea:10:63:
68:ba:a9:ab:0d:b8:f7:35:48:29:21:27:dc:3e:aa:74:26:5d:
0f:d4:3e:27:41:b4:d2:3e:b5:98:06:df:e7:44:f3:11:07:61:
44:6c:d4:a7:06:12:76:71:16:63:00:92:ce:f4:b2:5f:30:29:
44:53:99:8c:c6:5a:16:27:c0:1d:d5:3d:d8:20:67:86:12:67:
af:d1:f2:fd:23:8d:c6:6e:da:d0:84:9d:06:db:11:11:ca:16:
5b:71:9f:51:09:08:62:28:38:df:05:dc:85:69:42:41:69:c8:
1d:af:7b:1d:3b:f9:59:84:11:2e:e7:13:d0:e9:a7:47:ec:94:
49:4e:78:41:8f:1d:5e:ad:6f:c1:7f:51:3e:00:2b:34:89:14:
b7:e1:bf:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWPJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTMyOTU5WhcNMjYwMjIwMTMyOTU5WjAYMRYw
FAYDVQQDEw02N2JmMTc1YS00NjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuyJ6KGOvoBoWJaKQ+vnGhODe9ZZwo4/VxHgWWwbi5L5YS6ShlMKvWSYp
TovTNeMPKC6ijMoFI1ybBMJPWG820cEYAmSz8NPFtlJfVXopDXHkg/O0/tolvUKf
PKINM2L50sOvtzQoQcdKzp/orSD0GItWZnUa8sqP4slEYaD3xH1oujmabDJZLQFZ
OaZ6LDGPB0EeA960BR287lhs3ZaP6Q2jQwa0R6TJ5LMyxvBKyuXwlwrnfZWqZdMd
PoCmNlUDbu2OQTzIjCs44Ppc3gXKyCc4I2arieq5awlThl69cGMMGzeTkrw8Q8eo
63cTePJo3nopOmq/ndWcZVgP3sTwaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJqU
HdAtEPk4Dlg+/5rQemfuU4LmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DODc3NjY3RUY0NDUxMUVGODg1MEMzNkQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlOyMA0GCSqGSIb3DQEB
CwUAA4IBAQCx0CpuXbQiTFCE3/+NhFxVsJbdbPg24H1ex/Enif/U2zW3yyFigfc8
BMjZEV6a0Sg9/QKaOUjw8LgUtzzPBShoQPANzCASdg54gG/kNrgIkoXMbU34p6Kg
t7+lzZFgehbDNzifPRAwHPfqEGNouqmrDbj3NUgpISfcPqp0Jl0P1D4nQbTSPrWY
Bt/nRPMRB2FEbNSnBhJ2cRZjAJLO9LJfMClEU5mMxloWJ8Ad1T3YIGeGEmev0fL9
I43GbtrQhJ0G2xERyhZbcZ9RCQhiKDjfBdyFaUJBacgdr3sdO/lZhBEu5xPQ6adH
7JRJTnhBjx1erW/Bf1E+ACs0iRS34b+w
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:46 2025 by rpki-client