Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9EAF3E2E31011EFB5BDA858762E951A.roa
File: F9EAF3E2E31011EFB5BDA858762E951A.roa (raw, json)
Hash identifier: N4M7d9+/uL5S+D9prEHEp+0TC9QU9sk0qLAQ5LoMubw=
Subject key identifier: AF:DF:6C:55:0E:5F:CF:98:9F:2F:CE:F9:9F:1D:6B:8A:E8:CD:B3:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015107
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9EAF3E2E31011EFB5BDA858762E951A.roa
Signing time: Tue 04 Feb 2025 15:59:12 +0000
ROA not before: Tue 04 Feb 2025 15:59:09 +0000
ROA not after: Wed 30 Apr 2025 15:59:09 +0000
asID: 18229
IP address blocks: 154.210.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86279 (0x15107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 15:59:09 2025 GMT
Not After : Apr 30 15:59:09 2025 GMT
Subject: CN=67a23950-99e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:74:69:40:85:e6:18:53:4f:f6:fe:39:4b:
73:54:f6:1a:24:05:88:e2:86:46:a2:0e:b4:5f:e9:
ee:d9:7f:8d:64:99:ce:e8:66:c9:f8:17:a9:b4:af:
99:42:21:5a:7e:ce:86:1f:b2:b9:e3:1d:9a:5f:dc:
41:8b:35:34:68:13:9b:46:5c:ee:a9:07:ac:ed:e8:
8e:e7:76:dc:08:32:5f:81:63:15:13:e6:70:d5:86:
69:b2:bd:28:41:0c:07:3b:53:30:4a:85:16:73:75:
39:b4:47:9b:16:73:4c:7b:fb:b0:35:78:d2:15:e8:
cf:a6:f3:6c:77:6f:f1:df:a5:ca:c2:75:28:fe:22:
5c:9e:be:f6:89:00:a1:10:25:10:6a:4f:7a:96:05:
40:ca:5c:fe:07:be:d2:e2:ec:5a:a9:06:e2:89:db:
d0:59:0d:ce:70:55:b6:78:da:c5:08:a8:4c:ba:c9:
0a:f5:f8:f3:4b:08:6c:90:6c:2b:9e:57:ad:86:40:
60:d7:bd:c3:e5:b7:70:d7:ea:57:e2:f0:d5:30:65:
cd:e9:55:fd:8b:6d:44:90:a2:90:f1:2e:5f:bf:e0:
de:6b:06:c5:3b:52:eb:1f:e8:c5:b0:21:1d:f8:f9:
f7:19:34:a0:d6:bf:6a:8e:a1:d4:5f:04:e9:cf:13:
cc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DF:6C:55:0E:5F:CF:98:9F:2F:CE:F9:9F:1D:6B:8A:E8:CD:B3:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9EAF3E2E31011EFB5BDA858762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.156.0/24
Signature Algorithm: sha256WithRSAEncryption
87:eb:a3:5f:7b:66:05:fd:62:7e:7f:79:c5:40:42:a6:fb:0c:
5c:0b:65:05:98:fd:f7:f1:ad:4e:85:28:d8:21:57:2e:ed:45:
ae:2e:1d:bd:77:07:eb:79:c3:15:86:38:e5:9f:98:3f:a6:fb:
e9:1d:7a:41:36:91:d4:4d:5a:45:b4:c0:df:64:32:dd:ee:30:
11:dc:4c:ac:1f:5d:e9:36:f1:aa:0f:dc:da:ac:e9:2f:aa:f7:
b8:39:9b:50:05:1c:25:50:42:79:6b:bd:d4:9d:ad:a6:10:0e:
91:e1:79:96:9a:a5:26:d0:02:03:a4:65:2a:3b:6d:17:47:f2:
16:58:a1:3a:dc:da:2b:2b:81:95:f3:f2:db:b2:74:28:ba:1b:
9c:36:80:c5:d7:05:64:90:1a:16:98:88:d0:48:95:76:06:b9:
71:70:9e:26:0b:3d:a2:82:c1:27:88:21:93:34:c2:1e:33:bd:
90:28:39:d0:ae:06:90:2f:c9:c9:f3:25:ca:fc:90:36:f1:52:
03:8b:1e:46:1c:60:df:5a:71:86:10:1e:3b:24:81:1a:15:5c:
61:f7:0a:7f:40:dc:43:9e:e3:6a:a6:32:53:8b:82:f0:f0:60:
1f:9d:de:53:94:9e:82:39:c6:64:c7:31:b5:da:fc:9c:f7:9d:
c6:55:ae:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVEHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjA0MTU1OTA5WhcNMjUwNDMwMTU1OTA5WjAYMRYw
FAYDVQQDEw02N2EyMzk1MC05OWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoOt0aUCF5hhTT/b+OUtzVPYaJAWI4oZGog60X+nu2X+NZJnO6GbJ+Bep
tK+ZQiFafs6GH7K54x2aX9xBizU0aBObRlzuqQes7eiO53bcCDJfgWMVE+Zw1YZp
sr0oQQwHO1MwSoUWc3U5tEebFnNMe/uwNXjSFejPpvNsd2/x36XKwnUo/iJcnr72
iQChECUQak96lgVAylz+B77S4uxaqQbiidvQWQ3OcFW2eNrFCKhMuskK9fjzSwhs
kGwrnlethkBg173D5bdw1+pX4vDVMGXN6VX9i21EkKKQ8S5fv+DeawbFO1LrH+jF
sCEd+Pn3GTSg1r9qjqHUXwTpzxPMlQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK/f
bFUOX8+Yny/O+Z8da4rozbMWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GOUVBRjNFMkUzMTAxMUVGQjVCREE4NTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtKcMA0GCSqGSIb3DQEB
CwUAA4IBAQCH66Nfe2YF/WJ+f3nFQEKm+wxcC2UFmP338a1OhSjYIVcu7UWuLh29
dwfrecMVhjjln5g/pvvpHXpBNpHUTVpFtMDfZDLd7jAR3EysH13pNvGqD9zarOkv
qve4OZtQBRwlUEJ5a73Una2mEA6R4XmWmqUm0AIDpGUqO20XR/IWWKE63NorK4GV
8/LbsnQouhucNoDF1wVkkBoWmIjQSJV2BrlxcJ4mCz2igsEniCGTNMIeM72QKDnQ
rgaQL8nJ8yXK/JA28VIDix5GHGDfWnGGEB47JIEaFVxh9wp/QNxDnuNqpjJTi4Lw
8GAfnd5TlJ6COcZkxzG12vyc953GVa7N
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:07:31 2025 by rpki-client