Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD1FA8960A1811F09E8D236B762E951A.roa
File: DD1FA8960A1811F09E8D236B762E951A.roa (raw, json)
Hash identifier: tryN9SOyGeDfxiozITJFIUR2mTi46ASrX5WbdFlZ+hI=
Subject key identifier: 50:69:F5:D0:F5:49:6F:FF:F8:FD:DC:31:C6:AF:20:38:8B:04:47:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017661
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD1FA8960A1811F09E8D236B762E951A.roa
Signing time: Wed 26 Mar 2025 08:03:56 +0000
ROA not before: Wed 26 Mar 2025 08:03:51 +0000
ROA not after: Tue 14 Apr 2026 08:03:51 +0000
asID: 984
IP address blocks: 154.204.67.0/24 maxlen: 24
154.204.68.0/24 maxlen: 24
154.204.69.0/24 maxlen: 24
154.204.71.0/24 maxlen: 24
154.207.90.0/24 maxlen: 24
154.207.92.0/24 maxlen: 24
154.207.93.0/24 maxlen: 24
154.211.133.0/24 maxlen: 24
154.211.134.0/24 maxlen: 24
154.211.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95841 (0x17661)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 26 08:03:51 2025 GMT
Not After : Apr 14 08:03:51 2026 GMT
Subject: CN=67e3b4eb-70d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b4:8c:bf:ca:52:3d:b7:14:41:f8:16:6e:4c:
b0:ae:a0:3a:8f:a2:64:5b:77:7a:0e:37:82:a2:e9:
3b:47:86:da:3c:3c:17:ef:4f:6f:08:9d:c9:33:c5:
de:fb:1d:31:1f:78:9e:e5:e1:ee:f0:23:1a:b4:f0:
b7:49:d0:7e:fb:05:3d:38:cf:15:15:cb:bc:d0:3d:
cf:9f:8b:4a:1f:74:11:2a:0b:7e:fb:dd:98:3d:62:
64:29:20:78:10:84:dc:9b:3f:b1:c1:58:e4:35:34:
07:01:00:94:00:47:3f:b9:08:8e:2d:a7:5e:1e:ee:
03:77:8c:3e:a2:c7:f4:19:23:27:b8:3b:de:8c:24:
b3:a1:1b:69:66:22:55:24:96:ee:7f:ab:fe:18:63:
e0:f8:54:f5:ec:d7:2f:57:6b:7f:d7:00:5a:0a:70:
c8:34:f5:39:0c:1c:98:f6:2d:02:8b:f3:2e:f2:43:
97:c4:21:05:a5:c1:f2:f0:a7:56:42:9e:92:56:48:
cf:0f:ac:a2:4f:72:78:e8:4e:b7:57:b1:cd:4b:bc:
ab:fc:a5:56:c2:8a:28:c6:50:5c:30:73:38:25:7f:
ff:39:04:0d:24:5f:3f:35:a7:5a:9a:34:80:78:e1:
0c:8c:ed:d6:1d:ed:d3:e6:0d:9a:32:67:f8:c1:8a:
12:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:69:F5:D0:F5:49:6F:FF:F8:FD:DC:31:C6:AF:20:38:8B:04:47:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD1FA8960A1811F09E8D236B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.67.0-154.204.69.255
154.204.71.0/24
154.207.90.0/24
154.207.92.0/23
154.211.133.0-154.211.135.255
Signature Algorithm: sha256WithRSAEncryption
2b:2a:0a:07:64:fc:1d:43:28:ec:8a:53:5b:62:de:b2:0d:37:
d6:45:0a:50:b8:05:d8:25:91:ce:5f:a1:cd:7c:d4:2a:6a:54:
c7:c7:9c:6f:32:5b:72:b8:0b:b8:db:bb:82:6a:7d:49:e8:73:
ad:fe:75:41:a5:c7:07:9e:3d:4f:7b:14:47:ab:fd:b2:63:9f:
25:de:e1:36:24:21:eb:c5:77:c6:69:79:60:91:a6:46:7d:f1:
8b:c6:50:bf:b8:e4:1d:6d:e3:2e:1f:66:5e:60:6f:a4:ed:3e:
8c:0a:a7:5b:22:88:df:86:e7:75:9f:8d:72:30:13:11:8c:4b:
b9:83:47:f2:54:83:e1:fb:24:40:f1:ac:bb:df:27:be:5e:28:
f0:8c:76:ed:57:fe:38:41:93:53:f6:e2:70:03:73:da:26:f5:
92:05:e9:c7:84:2d:36:2a:0c:08:87:b7:3e:f8:88:e3:cd:eb:
31:33:6c:f0:40:27:84:3d:a2:7c:c1:6c:3b:6f:63:45:23:65:
b4:28:52:43:4a:5d:40:53:93:94:e9:1e:07:87:0b:a5:78:f4:
d9:d6:f5:1f:ec:e9:19:26:9e:32:2c:80:93:97:e8:1b:2f:c4:
39:e1:06:f7:08:b8:52:17:ba:19:24:88:12:6d:d8:0a:5d:b6:
8d:71:9c:11
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIDAXZhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzI2MDgwMzUxWhcNMjYwNDE0MDgwMzUxWjAYMRYw
FAYDVQQDEw02N2UzYjRlYi03MGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3LSMv8pSPbcUQfgWbkywrqA6j6JkW3d6DjeCouk7R4baPDwX709vCJ3J
M8Xe+x0xH3ie5eHu8CMatPC3SdB++wU9OM8VFcu80D3Pn4tKH3QRKgt++92YPWJk
KSB4EITcmz+xwVjkNTQHAQCUAEc/uQiOLadeHu4Dd4w+osf0GSMnuDvejCSzoRtp
ZiJVJJbuf6v+GGPg+FT17NcvV2t/1wBaCnDINPU5DByY9i0Ci/Mu8kOXxCEFpcHy
8KdWQp6SVkjPD6yiT3J46E63V7HNS7yr/KVWwoooxlBcMHM4JX//OQQNJF8/Nada
mjSAeOEMjO3WHe3T5g2aMmf4wYoS6wIDAQABo4ICzTCCAskwHQYDVR0OBBYEFFBp
9dD1SW//+P3cMcavIDiLBEcqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERDFGQTg5NjBBMTgxMUYwOUU4RDIzNkI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBACazEMDBAGazEQDBACa
zEcDBACaz1oDBAGaz1wwDAMEAJrThQMEA5rTgDANBgkqhkiG9w0BAQsFAAOCAQEA
KyoKB2T8HUMo7IpTW2Lesg031kUKULgF2CWRzl+hzXzUKmpUx8ecbzJbcrgLuNu7
gmp9Sehzrf51QaXHB549T3sUR6v9smOfJd7hNiQh68V3xml5YJGmRn3xi8ZQv7jk
HW3jLh9mXmBvpO0+jAqnWyKI34bndZ+NcjATEYxLuYNH8lSD4fskQPGsu98nvl4o
8Ix27Vf+OEGTU/bicANz2ib1kgXpx4QtNioMCIe3PviI483rMTNs8EAnhD2ifMFs
O29jRSNltChSQ0pdQFOTlOkeB4cLpXj02db1H+zpGSaeMiyAk5foGy/EOeEG9wi4
Uhe6GSSIEm3YCl22jXGcEQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:46 2025 by rpki-client