Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6081084F4B911EF804B4D9D762E951A.roa
File: E6081084F4B911EF804B4D9D762E951A.roa (raw, json)
Hash identifier: KL6wownZuS8l9ZldulOdwj4Zw9EEvtFDDnfu1oXrxrI=
Subject key identifier: BC:43:C5:1F:96:5F:83:EB:DA:E7:4E:47:7D:03:E6:32:64:80:31:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016628
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6081084F4B911EF804B4D9D762E951A.roa
Signing time: Thu 27 Feb 2025 03:21:14 +0000
ROA not before: Thu 27 Feb 2025 03:21:10 +0000
ROA not after: Thu 19 Feb 2026 03:21:10 +0000
asID: 984
IP address blocks: 154.200.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91688 (0x16628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 03:21:10 2025 GMT
Not After : Feb 19 03:21:10 2026 GMT
Subject: CN=67bfda2a-cbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:80:9a:e5:34:f5:06:6c:0e:1a:70:cb:90:
e1:30:47:f9:11:b0:e3:db:c6:d8:75:33:09:0f:c9:
51:f0:bd:72:f4:c5:8a:fe:ce:02:3e:d5:aa:f6:6b:
f8:69:7e:dc:87:3d:52:ef:4b:57:95:e8:44:62:96:
41:c8:c8:9b:76:2f:cb:1e:f6:0a:aa:b8:8d:df:50:
fb:5e:a3:bc:01:3b:54:02:59:a4:2c:31:fd:70:75:
68:68:83:6f:42:66:0c:5b:7b:fd:e6:4d:3f:3e:a5:
0d:8f:74:4a:ad:40:f6:7d:3b:77:a0:e0:23:6e:6a:
9b:88:7f:cd:e7:60:9f:b0:1c:5e:fa:c1:60:14:fb:
24:e6:c3:75:d9:d5:27:a4:8e:20:5e:3b:40:ba:8d:
0a:35:fc:3a:5a:95:32:fb:fa:6d:b6:cf:de:9d:5b:
71:d6:23:45:7b:de:9c:4b:4a:78:43:e7:49:b9:b1:
72:b3:da:d9:11:c8:8f:46:11:e1:64:7e:8a:45:8c:
3e:96:0f:d6:f9:34:bc:b6:b8:eb:bc:82:60:9d:05:
2a:ac:54:09:7d:32:0b:ed:df:5d:34:fd:d0:51:bd:
77:25:3e:ae:24:27:44:4c:c5:20:5a:0c:34:99:68:
ab:15:43:2e:72:bd:02:a4:33:c4:0d:60:79:ee:66:
3a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:43:C5:1F:96:5F:83:EB:DA:E7:4E:47:7D:03:E6:32:64:80:31:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6081084F4B911EF804B4D9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.75.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:fb:84:91:28:fc:fd:34:5a:91:79:3d:d0:04:a6:8b:e9:de:
e5:43:91:14:4f:48:2d:11:81:04:4a:b3:2b:41:bc:37:ae:ba:
04:b8:a0:5a:25:34:f8:0e:d4:14:f9:d8:20:e0:00:41:b5:f8:
a0:0c:d4:52:71:03:f5:f5:82:4d:60:0b:05:00:84:4c:08:05:
0f:a6:7e:fe:0e:1f:e5:af:8f:33:35:43:b9:9d:29:54:be:99:
6c:58:d2:1e:c9:3b:57:67:77:41:da:c1:51:b4:62:30:e6:ee:
57:0f:07:15:f4:c8:b7:46:e1:a2:f5:79:4e:c5:03:08:53:e8:
25:80:92:9c:4b:7a:b4:14:b6:c7:4d:53:2d:60:e4:fb:4f:fa:
b3:41:fb:5f:7a:b7:a5:e9:d3:52:d4:42:06:e0:30:88:43:27:
9c:ed:55:cf:bb:9c:59:f7:67:28:da:6d:18:e9:ed:04:b8:2c:
56:0f:a9:a0:5d:0b:77:5f:03:0a:90:0a:17:df:74:a9:d7:ad:
f1:f4:db:87:17:03:cf:ff:ac:20:8f:48:45:eb:9d:61:19:37:
84:6b:97:65:f3:97:88:dd:41:29:48:7f:0b:e8:90:7d:c4:9c:
72:36:40:6f:38:53:8d:89:87:c3:cd:a1:98:19:5f:97:90:cd:
ee:54:72:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWYoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MDMyMTEwWhcNMjYwMjE5MDMyMTEwWjAYMRYw
FAYDVQQDEw02N2JmZGEyYS1jYmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3EOAmuU09QZsDhpwy5DhMEf5EbDj28bYdTMJD8lR8L1y9MWK/s4CPtWq
9mv4aX7chz1S70tXlehEYpZByMibdi/LHvYKqriN31D7XqO8ATtUAlmkLDH9cHVo
aINvQmYMW3v95k0/PqUNj3RKrUD2fTt3oOAjbmqbiH/N52CfsBxe+sFgFPsk5sN1
2dUnpI4gXjtAuo0KNfw6WpUy+/ptts/enVtx1iNFe96cS0p4Q+dJubFys9rZEciP
RhHhZH6KRYw+lg/W+TS8trjrvIJgnQUqrFQJfTIL7d9dNP3QUb13JT6uJCdETMUg
Wgw0mWirFUMucr0CpDPEDWB57mY6VQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLxD
xR+WX4Pr2udOR30D5jJkgDEFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNjA4MTA4NEY0QjkxMUVGODA0QjREOUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmshLMA0GCSqGSIb3DQEB
CwUAA4IBAQCK+4SRKPz9NFqReT3QBKaL6d7lQ5EUT0gtEYEESrMrQbw3rroEuKBa
JTT4DtQU+dgg4ABBtfigDNRScQP19YJNYAsFAIRMCAUPpn7+Dh/lr48zNUO5nSlU
vplsWNIeyTtXZ3dB2sFRtGIw5u5XDwcV9Mi3RuGi9XlOxQMIU+glgJKcS3q0FLbH
TVMtYOT7T/qzQftferel6dNS1EIG4DCIQyec7VXPu5xZ92co2m0Y6e0EuCxWD6mg
XQt3XwMKkAoX33Sp163x9NuHFwPP/6wgj0hF651hGTeEa5dl85eI3UEpSH8L6JB9
xJxyNkBvOFONiYfDzaGYGV+XkM3uVHIV
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:00 2025 by rpki-client