Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8F8B7BAF3BB11EF92B690AD762E951A.roa
File: F8F8B7BAF3BB11EF92B690AD762E951A.roa (raw, json)
Hash identifier: Ebptchpl7w++js1Qx4wobVPKrHVimkkwUnVbH7n3zE0=
Subject key identifier: C6:49:41:62:8C:4C:FF:33:89:FE:21:DB:90:78:C0:6C:6B:05:C2:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016015
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8F8B7BAF3BB11EF92B690AD762E951A.roa
Signing time: Tue 25 Feb 2025 21:03:33 +0000
ROA not before: Tue 25 Feb 2025 21:03:30 +0000
ROA not after: Wed 09 Apr 2025 21:03:30 +0000
asID: 138915
IP address blocks: 154.95.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90133 (0x16015)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 21:03:30 2025 GMT
Not After : Apr 9 21:03:30 2025 GMT
Subject: CN=67be3025-290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1c:f1:98:43:e4:59:17:31:fa:4d:a2:ff:8c:
fe:4a:73:1e:1e:d0:50:04:d9:e4:d3:90:ca:76:64:
10:17:fa:f4:bd:26:79:ed:c8:b0:c5:95:e6:be:ed:
a9:ac:33:47:fe:2b:d0:9c:3b:78:56:fa:19:7b:92:
cf:eb:f5:58:5d:64:02:76:5a:7d:b0:09:3f:33:91:
2b:fd:89:10:c6:b0:36:99:3b:15:14:fa:52:13:3a:
38:c6:f4:e2:f2:d0:36:28:57:42:cc:42:f1:dc:4b:
17:19:11:d5:4c:e6:8f:d8:8e:63:c0:f6:82:ad:84:
17:fb:7c:7d:d6:5a:20:b9:2d:e5:f1:33:ef:57:5f:
ed:51:74:5c:b6:de:21:9d:7c:11:04:ed:9b:29:c6:
27:3a:90:2d:6f:4e:55:86:6c:26:40:93:49:4a:17:
03:28:d5:ce:6f:44:d9:55:22:79:f0:b0:94:c6:d2:
42:d9:9f:30:36:ba:45:5b:14:78:70:0d:d5:9a:b8:
20:7f:93:45:3e:cf:b3:4b:c2:7f:6b:13:c2:8d:78:
57:89:bd:bd:18:8c:80:0f:98:be:e9:55:84:91:9c:
b4:67:aa:e8:94:a8:14:3b:23:29:e8:51:36:c9:10:
ca:5a:19:25:f5:b5:1f:73:f5:4a:f2:68:01:59:41:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:49:41:62:8C:4C:FF:33:89:FE:21:DB:90:78:C0:6C:6B:05:C2:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8F8B7BAF3BB11EF92B690AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.64.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:d3:54:5f:2b:45:b2:f1:47:be:14:9c:f4:9b:27:4a:ea:16:
e1:85:2b:9a:f9:fe:4a:c5:6e:3a:85:a2:cc:d8:ec:4c:20:62:
52:2b:bc:98:18:00:8c:8b:a4:70:fd:85:9a:11:b4:41:20:70:
9c:2d:31:6e:49:c7:8a:9e:db:5e:61:54:00:ee:a2:ca:c9:8e:
92:b7:8b:2c:e8:2f:a0:88:af:c7:c8:51:a9:f3:d1:0f:59:42:
ca:f9:c3:cb:6d:df:4a:0d:42:f0:99:cf:d9:39:0b:fd:67:6e:
03:28:68:e4:72:33:4f:31:e1:04:33:9f:55:a8:2f:20:81:78:
31:99:85:0b:9b:e6:36:cf:b0:2b:82:4d:4d:cb:66:f4:c6:ef:
8c:de:56:4a:30:d8:70:1c:e0:a7:18:46:f3:bf:79:1f:db:65:
cf:64:85:48:12:cc:90:6a:31:b2:7b:f1:44:5d:fc:a4:03:df:
59:38:94:d5:df:ff:33:f6:1b:98:b2:9e:15:61:69:96:f0:92:
0b:16:0d:c8:6c:53:df:da:c1:df:0a:58:50:92:db:be:78:26:
68:b1:39:21:8c:e6:3d:4d:b4:19:8c:a5:df:8d:23:8c:3e:65:
1d:68:3a:00:a8:cf:7c:57:e9:9f:fd:e1:9d:5b:d4:84:a1:85:
41:61:6c:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWAVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI1MjEwMzMwWhcNMjUwNDA5MjEwMzMwWjAYMRYw
FAYDVQQDEw02N2JlMzAyNS0yOTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnxzxmEPkWRcx+k2i/4z+SnMeHtBQBNnk05DKdmQQF/r0vSZ57ciwxZXm
vu2prDNH/ivQnDt4VvoZe5LP6/VYXWQCdlp9sAk/M5Er/YkQxrA2mTsVFPpSEzo4
xvTi8tA2KFdCzELx3EsXGRHVTOaP2I5jwPaCrYQX+3x91loguS3l8TPvV1/tUXRc
tt4hnXwRBO2bKcYnOpAtb05VhmwmQJNJShcDKNXOb0TZVSJ58LCUxtJC2Z8wNrpF
WxR4cA3Vmrggf5NFPs+zS8J/axPCjXhXib29GIyAD5i+6VWEkZy0Z6rolKgUOyMp
6FE2yRDKWhkl9bUfc/VK8mgBWUEaMwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMZJ
QWKMTP8zif4h25B4wGxrBcIqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GOEY4QjdCQUYzQkIxMUVGOTJCNjkwQUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml9AMA0GCSqGSIb3DQEB
CwUAA4IBAQCy01RfK0Wy8Ue+FJz0mydK6hbhhSua+f5KxW46haLM2OxMIGJSK7yY
GACMi6Rw/YWaEbRBIHCcLTFuSceKntteYVQA7qLKyY6St4ss6C+giK/HyFGp89EP
WULK+cPLbd9KDULwmc/ZOQv9Z24DKGjkcjNPMeEEM59VqC8ggXgxmYULm+Y2z7Ar
gk1Ny2b0xu+M3lZKMNhwHOCnGEbzv3kf22XPZIVIEsyQajGye/FEXfykA99ZOJTV
3/8z9huYsp4VYWmW8JILFg3IbFPf2sHfClhQktu+eCZosTkhjOY9TbQZjKXfjSOM
PmUdaDoAqM98V+mf/eGdW9SEoYVBYWy5
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:55:09 2025 by rpki-client