Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF6945A0FE5211EFBEE8D0A9762E951A.roa
File: FF6945A0FE5211EFBEE8D0A9762E951A.roa (raw, json)
Hash identifier: PT8gPXzh+8r+VKGlCvS/7OcY4cPRuBV0VyPk4BifEHE=
Subject key identifier: 70:32:01:62:2C:5A:A4:B5:D0:9E:8D:C7:9F:04:5B:ED:26:AB:4B:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01737C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF6945A0FE5211EFBEE8D0A9762E951A.roa
Signing time: Tue 11 Mar 2025 08:29:50 +0000
ROA not before: Tue 11 Mar 2025 08:29:45 +0000
ROA not after: Tue 08 Apr 2025 08:29:45 +0000
asID: 140869
IP address blocks: 154.81.32.0/24 maxlen: 24
154.81.33.0/24 maxlen: 24
154.81.34.0/24 maxlen: 24
154.81.35.0/24 maxlen: 24
154.81.36.0/24 maxlen: 24
154.81.37.0/24 maxlen: 24
154.81.38.0/24 maxlen: 24
154.81.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95100 (0x1737c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 11 08:29:45 2025 GMT
Not After : Apr 8 08:29:45 2025 GMT
Subject: CN=67cff47e-9be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:36:74:01:b3:bb:b1:66:f6:a2:f0:d8:f6:
a9:4b:85:ec:51:11:4d:ee:f3:ae:c6:90:22:fb:58:
01:82:ef:8a:ed:df:27:d1:3b:a9:5d:dd:b7:54:4a:
06:af:a8:b5:f1:30:85:88:f2:b5:4f:c3:07:f6:cf:
dc:2c:3f:59:73:f8:ac:b3:30:fa:37:0b:14:92:60:
8d:cd:fa:f0:4b:12:11:2f:08:0c:5a:da:24:be:48:
25:c4:b3:28:48:03:ee:da:0b:b8:fc:49:9b:b1:2d:
8f:a5:3f:35:b5:cd:38:a5:a0:30:63:fa:d6:89:f4:
5d:68:a8:f3:42:64:53:7d:b9:c3:8d:f6:32:68:94:
0e:72:7e:c1:80:6e:08:46:f3:5c:88:92:a5:25:da:
51:7d:d8:41:d6:c3:32:77:6b:67:60:7f:74:20:5d:
4e:7c:18:4d:f0:72:db:d0:66:fe:5f:7d:c5:bb:d1:
dc:8e:ab:d9:6f:5b:11:91:b0:4d:e4:0c:10:3f:9d:
85:f9:3e:d8:db:35:ef:bb:c7:57:0b:e4:fe:9a:29:
b8:78:85:d3:a1:69:b4:a2:c1:ff:a1:47:fc:42:52:
bb:bf:c6:00:45:86:f7:bb:a5:81:9f:6c:84:d4:90:
37:70:1f:25:cf:6f:25:04:9a:55:cc:0a:1e:e0:b4:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:32:01:62:2C:5A:A4:B5:D0:9E:8D:C7:9F:04:5B:ED:26:AB:4B:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF6945A0FE5211EFBEE8D0A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.32.0/21
Signature Algorithm: sha256WithRSAEncryption
c2:7c:92:68:60:af:c0:50:23:0e:64:55:76:47:45:cb:9a:1e:
b0:4a:de:68:09:c7:3b:2b:45:fb:aa:71:19:b2:0c:24:86:4b:
d2:61:42:72:f9:27:d3:ad:8d:b8:10:ef:57:18:45:11:6a:98:
e9:f3:cd:2c:a0:71:17:25:21:c6:d6:2b:ab:26:7f:0e:45:d7:
8e:d0:0c:e3:d8:e6:77:1f:6e:74:37:b9:61:69:c4:07:49:5c:
7b:4b:b7:3a:60:39:d1:46:a6:6f:99:66:d5:75:dd:72:6b:53:
a5:4b:49:f3:70:a2:99:10:d3:9e:f1:17:29:03:e4:6a:13:63:
a1:d9:b1:3c:ff:64:ee:66:f4:49:5d:39:94:96:a7:31:80:ea:
48:7f:7d:cd:63:d8:66:63:0c:f2:79:8e:ab:36:f5:64:66:f7:
58:fa:de:d7:dd:4e:fc:69:f5:af:cf:48:ad:cc:c6:7f:05:da:
35:6e:e9:78:c2:07:6c:e1:74:16:27:4a:6e:e9:87:68:8f:b3:
90:c1:8e:f7:02:73:5a:06:11:60:99:98:fd:15:3a:49:84:a8:
eb:72:89:9b:9d:11:9c:08:5e:ce:d7:7c:2e:c1:02:c0:8e:4a:
e5:eb:25:64:bb:0b:ef:14:3c:63:89:1a:52:b9:2a:ee:38:e5:
ef:73:70:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXN8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzExMDgyOTQ1WhcNMjUwNDA4MDgyOTQ1WjAYMRYw
FAYDVQQDEw02N2NmZjQ3ZS05YmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsUs2dAGzu7Fm9qLw2PapS4XsURFN7vOuxpAi+1gBgu+K7d8n0TupXd23
VEoGr6i18TCFiPK1T8MH9s/cLD9Zc/isszD6NwsUkmCNzfrwSxIRLwgMWtokvkgl
xLMoSAPu2gu4/EmbsS2PpT81tc04paAwY/rWifRdaKjzQmRTfbnDjfYyaJQOcn7B
gG4IRvNciJKlJdpRfdhB1sMyd2tnYH90IF1OfBhN8HLb0Gb+X33Fu9HcjqvZb1sR
kbBN5AwQP52F+T7Y2zXvu8dXC+T+mim4eIXToWm0osH/oUf8QlK7v8YARYb3u6WB
n2yE1JA3cB8lz28lBJpVzAoe4LQxPwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHAy
AWIsWqS10J6Nx58EW+0mq0tAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRjY5NDVBMEZFNTIxMUVGQkVFOEQwQTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlEgMA0GCSqGSIb3DQEB
CwUAA4IBAQDCfJJoYK/AUCMOZFV2R0XLmh6wSt5oCcc7K0X7qnEZsgwkhkvSYUJy
+SfTrY24EO9XGEURapjp880soHEXJSHG1iurJn8ORdeO0Azj2OZ3H250N7lhacQH
SVx7S7c6YDnRRqZvmWbVdd1ya1OlS0nzcKKZENOe8RcpA+RqE2Oh2bE8/2TuZvRJ
XTmUlqcxgOpIf33NY9hmYwzyeY6rNvVkZvdY+t7X3U78afWvz0itzMZ/Bdo1bul4
wgds4XQWJ0pu6Ydoj7OQwY73AnNaBhFgmZj9FTpJhKjrcombnRGcCF7O13wuwQLA
jkrl6yVkuwvvFDxjiRpSuSruOOXvc3Dg
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:46:20 2025 by rpki-client