Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2E69A7CF4A311EF962F0775762E951A.roa
File: D2E69A7CF4A311EF962F0775762E951A.roa (raw, json)
Hash identifier: A3dd2ujcZ041WDF9IOFXReYZqlWmJywTSbJ3NIvLOYE=
Subject key identifier: 5D:41:D5:27:A0:CB:A2:4C:EC:D6:A6:C4:BD:27:D0:F8:EB:F9:F3:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01660F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2E69A7CF4A311EF962F0775762E951A.roa
Signing time: Thu 27 Feb 2025 00:43:13 +0000
ROA not before: Thu 27 Feb 2025 00:00:09 +0000
ROA not after: Thu 19 Feb 2026 00:00:09 +0000
asID: 984
IP address blocks: 154.200.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91663 (0x1660f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 00:00:09 2025 GMT
Not After : Feb 19 00:00:09 2026 GMT
Subject: CN=67bfb521-424d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:39:88:cf:72:7c:2c:64:1f:71:6f:66:74:
03:18:b2:3b:2f:3c:94:40:52:2d:4a:a2:a7:1b:b3:
cc:11:d3:f9:5f:f4:da:51:3f:19:77:22:96:e7:3a:
d8:cc:6a:26:b9:fb:25:9c:2e:9d:15:01:c2:5e:d4:
75:61:f0:ad:48:32:fd:2d:2d:b1:70:80:d5:48:9b:
e9:ad:53:3b:ba:05:d5:ac:37:d0:41:8b:49:13:11:
4e:4e:5c:14:f0:81:5e:4b:dc:77:d1:d3:2e:a3:14:
7f:ff:d0:4c:74:f5:c6:c3:d4:69:99:68:3b:6c:38:
da:af:f2:b8:59:85:0f:6c:91:32:ea:f6:56:23:6f:
e1:01:7d:bf:ef:a9:d9:b1:6d:a1:4e:81:b9:0b:54:
30:c6:9a:23:0a:39:5b:a0:1d:53:2d:e4:e1:f6:ad:
f9:9b:60:c4:45:21:d3:4c:12:16:f7:a5:00:99:fe:
8d:35:cc:f8:ce:4a:d0:b1:cf:02:af:55:7a:a4:84:
76:03:ee:ce:19:c5:87:ca:30:50:22:fb:8f:cb:57:
67:66:c2:97:bd:2c:59:0a:71:aa:37:2a:ff:3f:b5:
73:50:78:7c:64:bd:c9:ec:ee:b6:09:02:78:98:82:
af:a7:48:ee:2c:08:85:56:8a:b9:37:24:84:e6:28:
4a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:41:D5:27:A0:CB:A2:4C:EC:D6:A6:C4:BD:27:D0:F8:EB:F9:F3:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2E69A7CF4A311EF962F0775762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.50.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e7:92:b9:4e:31:31:0c:b7:db:5d:dc:2b:98:ba:f3:c6:d6:
da:72:4c:68:37:7e:c9:d6:84:ca:b0:94:f1:e5:ec:63:00:5a:
a8:30:a5:4f:2c:5f:6b:34:27:cf:9a:5d:84:bf:18:c6:dc:ab:
53:08:8e:db:36:4a:8b:d8:ad:73:e7:36:7d:7c:72:37:0a:10:
27:42:35:de:07:7c:66:94:f6:03:2f:97:61:de:f1:45:d8:be:
14:b4:55:51:d6:3d:56:22:92:39:01:02:0a:31:8b:4d:fd:b9:
1a:3b:48:6c:b3:81:d3:77:21:74:fa:db:45:a1:aa:ec:7c:91:
ce:1d:e8:e4:23:3e:20:dc:e0:cd:e7:3f:7e:f2:53:47:84:c8:
d6:46:66:e7:cd:20:5f:7e:be:d6:af:33:d8:b4:b7:c5:11:a1:
7e:80:6f:b4:ec:f2:30:34:98:5b:da:7f:2a:67:3a:35:36:37:
91:c6:64:72:a1:75:f6:47:79:b0:9c:6b:6b:82:d1:20:26:9c:
97:80:0b:6d:ce:b0:0c:c5:b4:42:48:6e:17:dc:53:97:df:d0:
5f:e6:2d:4c:c6:03:ad:62:42:d0:2d:99:6c:0d:80:4f:5f:b7:
59:e1:d6:27:d9:b0:06:1f:6c:d4:1b:ac:c3:a0:d5:93:d4:69:
47:9e:63:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWYPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MDAwMDA5WhcNMjYwMjE5MDAwMDA5WjAYMRYw
FAYDVQQDEw02N2JmYjUyMS00MjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwEs5iM9yfCxkH3FvZnQDGLI7LzyUQFItSqKnG7PMEdP5X/TaUT8ZdyKW
5zrYzGomufslnC6dFQHCXtR1YfCtSDL9LS2xcIDVSJvprVM7ugXVrDfQQYtJExFO
TlwU8IFeS9x30dMuoxR//9BMdPXGw9RpmWg7bDjar/K4WYUPbJEy6vZWI2/hAX2/
76nZsW2hToG5C1QwxpojCjlboB1TLeTh9q35m2DERSHTTBIW96UAmf6NNcz4zkrQ
sc8Cr1V6pIR2A+7OGcWHyjBQIvuPy1dnZsKXvSxZCnGqNyr/P7VzUHh8ZL3J7O62
CQJ4mIKvp0juLAiFVoq5NySE5ihKwwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF1B
1Segy6JM7NamxL0n0Pjr+fOGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMkU2OUE3Q0Y0QTMxMUVGOTYyRjA3NzU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsgyMA0GCSqGSIb3DQEB
CwUAA4IBAQAg55K5TjExDLfbXdwrmLrzxtbackxoN37J1oTKsJTx5exjAFqoMKVP
LF9rNCfPml2EvxjG3KtTCI7bNkqL2K1z5zZ9fHI3ChAnQjXeB3xmlPYDL5dh3vFF
2L4UtFVR1j1WIpI5AQIKMYtN/bkaO0hss4HTdyF0+ttFoarsfJHOHejkIz4g3ODN
5z9+8lNHhMjWRmbnzSBffr7WrzPYtLfFEaF+gG+07PIwNJhb2n8qZzo1NjeRxmRy
oXX2R3mwnGtrgtEgJpyXgAttzrAMxbRCSG4X3FOX39Bf5i1MxgOtYkLQLZlsDYBP
X7dZ4dYn2bAGH2zUG6zDoNWT1GlHnmMt
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:50:05 2025 by rpki-client