Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E555FEC4F44311EFA5257E61762E951A.roa
File: E555FEC4F44311EFA5257E61762E951A.roa (raw, json)
Hash identifier: mrB5Al0YxmW3inKZlBMzy5+Dx8iwyYfti9nVbcgmHSI=
Subject key identifier: C2:4F:0D:CB:C7:8C:70:8E:3A:06:2C:77:E1:D3:17:61:7F:19:0A:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E555FEC4F44311EFA5257E61762E951A.roa
Signing time: Wed 26 Feb 2025 13:16:32 +0000
ROA not before: Wed 26 Feb 2025 13:16:28 +0000
ROA not after: Thu 19 Feb 2026 13:16:28 +0000
asID: 984
IP address blocks: 154.208.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91041 (0x163a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:16:28 2025 GMT
Not After : Feb 19 13:16:28 2026 GMT
Subject: CN=67bf1430-64c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:aa:00:9a:9b:f1:61:a6:c0:d8:56:46:37:
c2:5b:23:f6:df:7a:fd:22:55:c5:37:ea:60:3d:3a:
cd:b4:8d:d6:34:9f:14:26:e2:2c:c8:8c:cf:35:9e:
ef:13:67:48:41:64:fa:6d:9b:b5:af:b3:c1:5e:ca:
eb:3e:62:ba:43:d0:fd:ff:66:33:30:6d:4a:9b:f7:
ff:32:9d:ce:22:f2:c2:da:d0:e1:49:51:cf:67:57:
e0:9d:76:95:f5:bc:fa:96:ca:89:1b:05:d7:99:28:
5c:79:1d:4c:72:44:be:c4:ef:3e:dd:79:4d:66:28:
e6:f5:44:6d:74:be:52:34:0d:13:e7:2b:8e:86:a1:
20:ed:bd:8f:33:59:6d:98:de:1f:55:63:9c:4a:c3:
e6:75:12:a0:3e:b2:7f:c8:15:fd:b4:7a:2f:e5:49:
c2:02:56:73:f9:29:62:31:ad:1b:01:3e:cc:f5:c9:
41:9c:e4:68:fb:c1:f2:51:7c:df:cb:b8:f1:83:dd:
ef:3a:60:0c:ca:e2:05:b8:8f:66:af:ab:f2:d1:0c:
e0:e8:be:03:60:35:5e:51:1b:9f:f2:9f:d7:a0:a7:
60:95:19:df:f6:d3:98:fa:d3:73:77:42:e1:24:42:
f3:9f:31:33:d8:92:41:b9:8f:f6:c9:81:ce:e8:20:
78:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4F:0D:CB:C7:8C:70:8E:3A:06:2C:77:E1:D3:17:61:7F:19:0A:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E555FEC4F44311EFA5257E61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.187.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:55:62:d8:a8:0f:b7:f7:21:51:1a:3a:5a:fc:04:d1:4f:48:
16:ec:4a:42:e1:6f:2b:cc:cd:59:f6:b7:f4:f7:a4:44:a2:7c:
a5:53:0f:a7:95:d0:b5:18:97:8f:ad:8c:54:61:31:63:7b:00:
f0:4f:e7:0a:ef:55:0a:b4:81:64:15:88:c5:15:c9:cc:4b:41:
e9:60:0f:52:c0:a6:da:34:f6:35:00:05:72:6a:bf:11:aa:39:
6b:14:08:35:62:e6:cf:8d:91:b1:33:6a:08:5a:40:fd:f5:41:
47:34:fb:25:7c:6c:20:7b:a0:d4:34:92:db:fb:d9:92:ce:97:
f8:0e:03:3b:2e:b3:eb:fa:8b:03:bc:65:48:27:bd:2a:0d:f1:
a8:58:3a:5b:28:7c:c8:ae:65:2b:7f:13:30:aa:91:59:cc:f2:
c3:70:cc:82:d1:35:9b:9a:1c:03:88:8c:1b:a2:30:b0:f9:56:
94:a2:6b:ec:7f:38:33:34:49:39:ef:00:57:99:4a:6f:db:32:
7e:e3:65:26:13:c5:23:4f:5d:c3:35:8f:23:20:8a:29:a1:ca:
c1:3d:b4:cc:45:b8:bd:2e:70:de:3d:cd:74:62:e5:8b:fe:42:
a5:0d:d9:7d:b3:00:27:85:ca:97:ce:3d:45:60:8e:68:04:1e:
ed:14:ad:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWOhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTMxNjI4WhcNMjYwMjE5MTMxNjI4WjAYMRYw
FAYDVQQDEw02N2JmMTQzMC02NGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxNaqAJqb8WGmwNhWRjfCWyP233r9IlXFN+pgPTrNtI3WNJ8UJuIsyIzP
NZ7vE2dIQWT6bZu1r7PBXsrrPmK6Q9D9/2YzMG1Km/f/Mp3OIvLC2tDhSVHPZ1fg
nXaV9bz6lsqJGwXXmShceR1MckS+xO8+3XlNZijm9URtdL5SNA0T5yuOhqEg7b2P
M1ltmN4fVWOcSsPmdRKgPrJ/yBX9tHov5UnCAlZz+SliMa0bAT7M9clBnORo+8Hy
UXzfy7jxg93vOmAMyuIFuI9mr6vy0Qzg6L4DYDVeURuf8p/XoKdglRnf9tOY+tNz
d0LhJELznzEz2JJBuY/2yYHO6CB45QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMJP
DcvHjHCOOgYsd+HTF2F/GQo1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNTU1RkVDNEY0NDMxMUVGQTUyNTdFNjE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtC7MA0GCSqGSIb3DQEB
CwUAA4IBAQCnVWLYqA+39yFRGjpa/ATRT0gW7EpC4W8rzM1Z9rf096REonylUw+n
ldC1GJePrYxUYTFjewDwT+cK71UKtIFkFYjFFcnMS0HpYA9SwKbaNPY1AAVyar8R
qjlrFAg1YubPjZGxM2oIWkD99UFHNPslfGwge6DUNJLb+9mSzpf4DgM7LrPr+osD
vGVIJ70qDfGoWDpbKHzIrmUrfxMwqpFZzPLDcMyC0TWbmhwDiIwbojCw+VaUomvs
fzgzNEk57wBXmUpv2zJ+42UmE8UjT13DNY8jIIopocrBPbTMRbi9LnDePc10YuWL
/kKlDdl9swAnhcqXzj1FYI5oBB7tFK0Z
-----END CERTIFICATE-----
Generated at Fri Apr 11 00:17:48 2025 by rpki-client