Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A1A7044F3E711EFB7881158762E951A.roa
File: 0A1A7044F3E711EFB7881158762E951A.roa (raw, json)
Hash identifier: zlnIwbIui1tOq+iww/HSeZ+V5DZ3KhUoB/wqjUyM3Ok=
Subject key identifier: 34:B6:1F:EC:85:10:B9:4E:1B:ED:1D:0B:0A:C8:1E:CE:7A:4C:70:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01607C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A1A7044F3E711EFB7881158762E951A.roa
Signing time: Wed 26 Feb 2025 02:11:51 +0000
ROA not before: Wed 26 Feb 2025 02:11:46 +0000
ROA not after: Thu 19 Feb 2026 02:11:46 +0000
asID: 984
IP address blocks: 154.203.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90236 (0x1607c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 02:11:46 2025 GMT
Not After : Feb 19 02:11:46 2026 GMT
Subject: CN=67be7866-69ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:c4:9a:c1:41:6d:a5:58:16:5f:ba:da:9a:
54:cf:39:ed:9a:c6:0c:3d:2a:d2:b0:ac:59:d2:fe:
ec:f2:c9:14:74:e7:4c:51:23:9f:8f:31:78:6d:e6:
a3:52:9f:9f:54:c9:43:7b:40:9f:2c:02:88:87:4a:
df:3f:51:8f:d0:5b:39:a2:2f:e4:8b:bc:24:1c:bf:
c9:99:cf:99:83:0d:5d:fa:af:93:e5:f3:c1:f1:2d:
9c:86:25:1d:2c:83:12:83:3c:24:92:97:24:32:0b:
15:32:90:0f:29:0f:06:3a:17:04:fd:ac:72:16:66:
01:d9:b2:ce:76:ac:86:02:f6:dc:fd:5c:c0:79:0a:
60:f9:8e:5e:7b:08:69:88:39:fd:91:fe:25:68:5a:
dc:5e:f1:41:87:d4:fc:cf:42:cd:63:ea:a9:05:37:
ea:22:12:41:c0:5c:3b:1a:fb:b8:6a:74:2a:1a:bf:
96:e1:21:30:87:e8:9b:5a:a6:ca:ca:63:17:0b:29:
a9:f4:f7:2a:9c:e7:04:c1:f5:74:68:c2:da:8d:c9:
c2:da:8e:74:f7:85:17:b0:36:08:77:1a:c4:6b:dc:
a5:6c:6c:9c:6b:70:3a:1c:df:5e:8e:d1:67:82:49:
db:43:86:6e:34:08:da:f1:24:eb:58:ba:02:26:17:
6a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B6:1F:EC:85:10:B9:4E:1B:ED:1D:0B:0A:C8:1E:CE:7A:4C:70:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A1A7044F3E711EFB7881158762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.9.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:0d:2b:55:22:66:86:64:07:1f:a0:e5:d3:b9:76:08:cc:3f:
0b:0f:35:a0:97:ac:77:e8:e1:c1:6c:02:2b:06:cb:a6:fc:cb:
62:43:bc:14:85:0c:a2:83:c2:08:03:8e:47:4c:55:ff:63:82:
c1:f7:80:7e:d0:67:02:a3:84:b6:e3:47:89:64:f2:0e:b5:ac:
4e:59:a8:53:2a:88:43:9a:e3:98:6c:3f:b5:26:c6:59:ed:b4:
be:9a:cc:4d:5f:35:2e:c5:ec:cc:25:84:f2:e9:a2:44:87:76:
7b:54:31:04:64:20:df:04:b8:6b:7e:db:a9:5b:9d:2e:24:65:
3d:9e:99:83:0c:38:1b:bf:ec:59:9a:ac:20:75:04:a8:bf:bc:
f9:ea:e8:37:37:eb:e8:59:09:ff:0d:da:b5:a8:a2:d2:97:04:
c2:39:7d:81:2c:ca:22:13:a2:a0:04:f1:ff:fd:76:55:db:15:
7b:66:b6:bf:a6:4d:22:ea:50:7a:3c:67:88:76:fa:30:55:e3:
94:8e:ac:bd:66:a7:70:10:20:ce:1e:47:7d:5b:bf:f4:9d:9e:
6b:d3:bb:73:67:91:1b:5b:87:b0:50:69:4f:aa:5e:c8:af:ff:
dd:29:b8:fc:20:29:8f:47:ed:ce:a9:8d:33:cd:42:55:ba:56:
1c:f4:dc:bd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWB8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDIxMTQ2WhcNMjYwMjE5MDIxMTQ2WjAYMRYw
FAYDVQQDEw02N2JlNzg2Ni02OWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt/rEmsFBbaVYFl+62ppUzzntmsYMPSrSsKxZ0v7s8skUdOdMUSOfjzF4
beajUp+fVMlDe0CfLAKIh0rfP1GP0Fs5oi/ki7wkHL/Jmc+Zgw1d+q+T5fPB8S2c
hiUdLIMSgzwkkpckMgsVMpAPKQ8GOhcE/axyFmYB2bLOdqyGAvbc/VzAeQpg+Y5e
ewhpiDn9kf4laFrcXvFBh9T8z0LNY+qpBTfqIhJBwFw7Gvu4anQqGr+W4SEwh+ib
WqbKymMXCymp9PcqnOcEwfV0aMLajcnC2o5094UXsDYIdxrEa9ylbGyca3A6HN9e
jtFngknbQ4ZuNAja8STrWLoCJhdqzwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDS2
H+yFELlOG+0dCwrIHs56THBLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQTFBNzA0NEYzRTcxMUVGQjc4ODExNTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmssJMA0GCSqGSIb3DQEB
CwUAA4IBAQDMDStVImaGZAcfoOXTuXYIzD8LDzWgl6x36OHBbAIrBsum/MtiQ7wU
hQyig8IIA45HTFX/Y4LB94B+0GcCo4S240eJZPIOtaxOWahTKohDmuOYbD+1JsZZ
7bS+msxNXzUuxezMJYTy6aJEh3Z7VDEEZCDfBLhrftupW50uJGU9npmDDDgbv+xZ
mqwgdQSov7z56ug3N+voWQn/Ddq1qKLSlwTCOX2BLMoiE6KgBPH//XZV2xV7Zra/
pk0i6lB6PGeIdvowVeOUjqy9ZqdwECDOHkd9W7/0nZ5r07tzZ5EbW4ewUGlPql7I
r//dKbj8ICmPR+3OqY0zzUJVulYc9Ny9
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:08 2025 by rpki-client