Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10E874E0F3DB11EF92C3067B762E951A.roa
File: 10E874E0F3DB11EF92C3067B762E951A.roa (raw, json)
Hash identifier: jzL4Jjnm28gqRFv2pJEH1IhlqJAjXQMskpt1G7bufU4=
Subject key identifier: 19:22:D9:C5:F8:F9:96:B4:DC:F9:4F:1D:D2:11:34:7C:84:C1:AC:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016049
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10E874E0F3DB11EF92C3067B762E951A.roa
Signing time: Wed 26 Feb 2025 00:46:08 +0000
ROA not before: Wed 26 Feb 2025 00:00:04 +0000
ROA not after: Thu 19 Feb 2026 00:00:04 +0000
asID: 984
IP address blocks: 154.92.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90185 (0x16049)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 00:00:04 2025 GMT
Not After : Feb 19 00:00:04 2026 GMT
Subject: CN=67be6450-7d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:e6:11:dc:04:37:75:65:6e:c2:57:d1:42:
4b:ea:9d:93:3c:75:24:b3:25:cf:ee:bf:8d:44:76:
f8:58:84:aa:93:9c:08:75:df:c1:0a:ea:e3:2e:26:
ce:95:41:b7:6d:4b:1d:a1:85:be:3b:9b:02:c3:88:
11:67:86:15:32:78:e5:79:97:cd:9e:9f:f0:5e:0b:
8a:a6:dc:03:7f:d0:49:93:e3:36:c8:45:3d:14:31:
2e:61:cf:bf:f6:7f:71:8e:b6:87:b6:2b:ab:7b:b9:
66:69:54:98:6e:af:22:74:56:0e:a9:f6:61:ec:a3:
83:ac:9b:7a:d5:69:de:f4:f8:13:23:b7:6b:13:60:
59:69:94:7c:c6:9f:84:8e:d4:c2:e9:f5:c6:f9:78:
41:ed:19:b3:22:a4:5d:3b:1b:b4:2c:25:03:6e:6b:
18:bb:b4:ca:7b:98:99:0c:86:33:64:0e:22:8c:4b:
6b:67:e0:e2:36:37:50:78:f5:1a:e1:ef:2a:5f:69:
37:92:8e:5e:92:fd:4e:b8:47:70:a7:2f:21:50:2e:
47:3f:f2:99:23:0d:31:44:b0:01:b5:10:1d:43:7e:
eb:b6:3b:fc:cb:ce:19:f9:27:76:e0:a4:2a:b1:d5:
1b:8d:c5:f7:c1:e0:da:4c:7e:de:9a:98:9a:7b:b6:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:22:D9:C5:F8:F9:96:B4:DC:F9:4F:1D:D2:11:34:7C:84:C1:AC:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10E874E0F3DB11EF92C3067B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.226.0/24
Signature Algorithm: sha256WithRSAEncryption
75:83:44:52:f6:93:22:15:ce:1d:7c:15:69:2e:42:ba:26:16:
68:b1:ef:49:0f:b2:44:e3:cd:5f:fb:a3:21:b2:26:72:d8:c1:
f7:7a:d0:ec:0a:66:84:cc:8a:c5:bd:3c:f2:f8:9c:ff:12:96:
b0:55:2f:5e:4f:08:f5:76:da:99:ea:f1:05:d0:83:d9:d7:76:
89:b5:2a:8b:9f:9c:df:f9:a2:c0:a7:b0:ed:03:87:c5:7e:ae:
68:a0:02:18:a5:2a:eb:71:a8:19:8e:0e:0c:22:73:7f:90:55:
85:54:cc:9b:28:55:5f:cc:dd:24:6e:de:db:f8:f7:46:23:51:
a5:d5:bb:ff:09:22:86:a7:a7:4c:fd:07:da:fb:68:10:bb:1d:
dc:6e:d3:ba:47:00:76:ed:85:5d:5d:b0:a2:90:5d:c3:79:a9:
32:1e:f5:b3:e2:e5:7b:b4:0c:6e:54:b8:3a:fe:e5:b0:70:81:
41:9d:7e:b0:9b:3d:d5:7a:3c:00:7d:ea:bf:de:d8:5a:48:c2:
05:66:c3:36:6a:58:9b:35:24:4a:a1:49:cb:58:95:1d:27:b2:
9f:3c:2e:a2:40:0e:aa:1b:d9:5c:6f:e4:f5:13:1b:29:5e:f9:
7d:d2:19:ab:69:61:02:1f:31:6e:05:5d:0d:90:f4:5f:05:a4:
67:3d:dc:72
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWBJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDAwMDA0WhcNMjYwMjE5MDAwMDA0WjAYMRYw
FAYDVQQDEw02N2JlNjQ1MC03ZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApYrmEdwEN3VlbsJX0UJL6p2TPHUksyXP7r+NRHb4WISqk5wIdd/BCurj
LibOlUG3bUsdoYW+O5sCw4gRZ4YVMnjleZfNnp/wXguKptwDf9BJk+M2yEU9FDEu
Yc+/9n9xjraHtiure7lmaVSYbq8idFYOqfZh7KODrJt61Wne9PgTI7drE2BZaZR8
xp+EjtTC6fXG+XhB7RmzIqRdOxu0LCUDbmsYu7TKe5iZDIYzZA4ijEtrZ+DiNjdQ
ePUa4e8qX2k3ko5ekv1OuEdwpy8hUC5HP/KZIw0xRLABtRAdQ37rtjv8y84Z+Sd2
4KQqsdUbjcX3weDaTH7empiae7Z7iQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBki
2cX4+Za03PlPHdIRNHyEwazwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMEU4NzRFMEYzREIxMUVGOTJDMzA2N0I3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlziMA0GCSqGSIb3DQEB
CwUAA4IBAQB1g0RS9pMiFc4dfBVpLkK6JhZose9JD7JE481f+6MhsiZy2MH3etDs
CmaEzIrFvTzy+Jz/EpawVS9eTwj1dtqZ6vEF0IPZ13aJtSqLn5zf+aLAp7DtA4fF
fq5ooAIYpSrrcagZjg4MInN/kFWFVMybKFVfzN0kbt7b+PdGI1Gl1bv/CSKGp6dM
/Qfa+2gQux3cbtO6RwB27YVdXbCikF3DeakyHvWz4uV7tAxuVLg6/uWwcIFBnX6w
mz3VejwAfeq/3thaSMIFZsM2alibNSRKoUnLWJUdJ7KfPC6iQA6qG9lcb+T1Exsp
Xvl90hmraWECHzFuBV0NkPRfBaRnPdxy
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:40 2025 by rpki-client