Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D68187ECF45711EFB08E4C6D762E951A.roa
File: D68187ECF45711EFB08E4C6D762E951A.roa (raw, json)
Hash identifier: xX7OGFR+Bz/h0i3VvzI1Ar7T4VJrNwlNrYijUZBKYqg=
Subject key identifier: F9:43:34:AE:AF:F0:1C:6C:9F:08:FE:26:B4:5E:A9:43:F4:7B:6B:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D68187ECF45711EFB08E4C6D762E951A.roa
Signing time: Wed 26 Feb 2025 15:39:17 +0000
ROA not before: Wed 26 Feb 2025 15:39:05 +0000
ROA not after: Sat 19 Feb 2028 15:39:05 +0000
asID: 17561
IP address blocks: 154.82.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91364 (0x164e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:39:05 2025 GMT
Not After : Feb 19 15:39:05 2028 GMT
Subject: CN=67bf35a5-fbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3a:1f:cc:eb:9f:b4:af:16:2d:01:f9:34:e9:
e4:bf:b2:b1:aa:66:33:a2:b9:bc:e2:78:5a:8a:14:
05:9c:97:e2:fa:4b:44:1a:04:4c:ff:d1:46:1f:b6:
15:c9:0e:3b:77:d6:22:e7:c8:c2:b1:04:7d:ad:a0:
79:d5:76:a5:e4:82:b6:4d:d5:35:26:c6:c2:b5:70:
32:e5:cf:59:c4:c4:1d:97:94:3d:2a:3a:4e:73:e0:
45:9a:f9:98:4a:ce:fd:ad:c4:83:d2:4b:4d:d3:14:
7c:24:e9:c1:02:20:bd:cf:a6:44:50:ef:ea:3a:68:
8a:95:11:26:3b:b4:03:ed:08:d9:db:dd:8a:96:84:
a3:27:ac:58:53:72:1d:da:a9:fe:8a:33:88:60:27:
34:2a:3b:14:bf:46:5e:d1:22:87:cc:d3:5a:9a:5f:
8d:3b:b8:47:da:de:be:79:37:1d:27:41:da:69:1c:
92:92:bf:14:b4:02:dc:bf:9c:58:db:42:a9:ee:d6:
9c:b3:81:2f:8a:f5:b5:7e:f3:6d:e3:ad:7d:35:b6:
61:67:c3:01:69:2f:e5:2b:bc:f7:5d:68:1a:cc:18:
f7:00:9e:84:70:ac:9d:8e:f5:e0:2b:92:41:b5:76:
bf:5a:63:2e:ce:d2:96:d7:b6:7b:0b:3e:9b:c0:c9:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:43:34:AE:AF:F0:1C:6C:9F:08:FE:26:B4:5E:A9:43:F4:7B:6B:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D68187ECF45711EFB08E4C6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.239.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6f:a9:ed:55:df:bf:6d:c2:2e:c8:64:61:a7:b7:98:da:d2:
fd:47:b6:dc:21:3f:a4:bf:62:62:3b:e7:f0:0c:d9:44:46:1f:
df:eb:ed:c5:df:64:61:74:27:be:2e:cf:81:21:1d:6f:3a:bb:
4f:d3:f1:2f:18:cf:a9:75:ca:96:b0:e9:c0:96:30:c3:d8:72:
72:fe:36:44:72:55:e5:97:a2:e7:6b:43:ec:7f:0a:7d:f3:9d:
30:26:cb:7d:79:84:18:83:c2:74:d2:ad:f4:c5:72:71:62:97:
95:c2:4a:4e:31:de:c9:f2:37:35:c4:c4:14:49:63:08:94:88:
7f:7b:fa:01:70:00:60:5f:c4:ce:ce:17:e3:dd:86:50:c1:5a:
cf:c0:70:b8:b7:f7:0c:22:53:40:c3:b1:86:23:f3:fd:5b:5b:
11:32:66:cb:9a:92:08:f8:ca:2a:1f:5f:cc:13:17:4e:a6:9a:
9b:27:ff:7d:ba:99:53:c4:82:b1:04:3b:c9:c7:a6:53:fa:81:
d2:11:ea:7b:4f:f2:88:b0:8a:07:4e:c4:0e:cb:30:cf:77:a1:
75:4b:b7:c8:18:4f:b4:c2:5e:7d:6f:df:4b:c7:55:5d:85:61:
c8:35:34:fc:29:8b:70:fd:93:1c:55:58:ca:71:3e:8a:ba:50:
eb:f6:2c:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWTkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTUzOTA1WhcNMjgwMjE5MTUzOTA1WjAYMRYw
FAYDVQQDEw02N2JmMzVhNS1mYmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4zofzOuftK8WLQH5NOnkv7KxqmYzorm84nhaihQFnJfi+ktEGgRM/9FG
H7YVyQ47d9Yi58jCsQR9raB51Xal5IK2TdU1JsbCtXAy5c9ZxMQdl5Q9KjpOc+BF
mvmYSs79rcSD0ktN0xR8JOnBAiC9z6ZEUO/qOmiKlREmO7QD7QjZ292KloSjJ6xY
U3Id2qn+ijOIYCc0KjsUv0Ze0SKHzNNaml+NO7hH2t6+eTcdJ0HaaRySkr8UtALc
v5xY20Kp7tacs4EvivW1fvNt4619NbZhZ8MBaS/lK7z3XWgazBj3AJ6EcKydjvXg
K5JBtXa/WmMuztKW17Z7Cz6bwMnAdwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPlD
NK6v8Bxsnwj+JrReqUP0e2u2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENjgxODdFQ0Y0NTcxMUVGQjA4RTRDNkQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlLvMA0GCSqGSIb3DQEB
CwUAA4IBAQBdb6ntVd+/bcIuyGRhp7eY2tL9R7bcIT+kv2JiO+fwDNlERh/f6+3F
32RhdCe+Ls+BIR1vOrtP0/EvGM+pdcqWsOnAljDD2HJy/jZEclXll6Lna0Psfwp9
850wJst9eYQYg8J00q30xXJxYpeVwkpOMd7J8jc1xMQUSWMIlIh/e/oBcABgX8TO
zhfj3YZQwVrPwHC4t/cMIlNAw7GGI/P9W1sRMmbLmpII+MoqH1/MExdOppqbJ/99
uplTxIKxBDvJx6ZT+oHSEep7T/KIsIoHTsQOyzDPd6F1S7fIGE+0wl59b99Lx1Vd
hWHINTT8KYtw/ZMcVVjKcT6KulDr9iyD
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:48:12 2025 by rpki-client