Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/193475C8F81C11EFAA20E5B1762E951A.roa
File: 193475C8F81C11EFAA20E5B1762E951A.roa (raw, json)
Hash identifier: uRKaz6l44F/yZncjFfCq6fzPLiBpbFrr63hkHUK8hKs=
Subject key identifier: 93:F4:24:A1:04:A5:2D:2F:2A:6D:A9:F1:D3:E7:4E:23:67:FC:44:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017031
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/193475C8F81C11EFAA20E5B1762E951A.roa
Signing time: Mon 03 Mar 2025 10:41:44 +0000
ROA not before: Mon 03 Mar 2025 10:41:40 +0000
ROA not after: Wed 30 Apr 2025 10:41:40 +0000
asID: 63139
IP address blocks: 154.93.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94257 (0x17031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 10:41:40 2025 GMT
Not After : Apr 30 10:41:40 2025 GMT
Subject: CN=67c58768-39d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:1b:0c:ec:06:2e:6b:f1:12:ee:7e:92:01:
0a:96:6a:32:f5:76:33:b5:c6:00:87:85:2b:35:9b:
4c:41:9e:1e:04:ea:c9:62:cb:4b:1f:d7:f9:69:a3:
03:cb:9f:b3:11:ea:73:80:02:67:e4:03:3d:1a:0f:
8f:bb:43:8a:8c:2f:6f:2f:bc:6e:6b:b8:21:54:9c:
6b:7b:e3:bf:bf:49:16:20:55:14:74:3a:23:64:c0:
43:8d:8d:31:7e:9c:77:3d:26:5e:3a:44:53:6b:ed:
e4:ac:8a:f9:59:6d:41:32:a0:a8:43:1a:ca:13:a3:
da:0b:82:09:c2:96:45:e6:a5:ec:4e:fe:03:a9:34:
14:24:bd:c0:50:a8:03:fd:14:f8:38:a8:5e:5c:ae:
91:68:a2:d1:42:f3:26:58:2a:01:5a:ee:13:02:e4:
5c:c0:0c:34:f5:ae:d4:76:a8:65:c7:02:fa:6a:60:
f5:30:5a:8a:e6:74:3d:8b:47:93:39:f7:b1:41:cc:
bf:1f:77:80:3a:80:90:49:e9:7e:02:bb:03:16:26:
ea:c9:b0:73:41:32:ff:0a:f2:7c:a8:33:38:cc:4b:
25:54:e3:98:43:ec:d2:8a:ef:89:07:d2:42:d5:bb:
78:4d:48:84:1a:7b:ba:ba:3c:36:8a:5d:cf:c8:c6:
f9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F4:24:A1:04:A5:2D:2F:2A:6D:A9:F1:D3:E7:4E:23:67:FC:44:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/193475C8F81C11EFAA20E5B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.82.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:b6:96:ca:fb:f0:92:b3:e2:c5:e9:a2:a1:e1:7b:46:0b:8d:
3f:e5:b3:78:69:8f:cb:12:88:1e:af:95:5e:a2:55:17:80:01:
bd:53:ed:09:6a:af:a8:28:4b:52:31:e3:fd:13:eb:f1:47:57:
c9:6d:0e:e3:49:60:2b:d9:20:7d:8c:28:b6:7e:ea:1f:cc:59:
f5:b7:b9:2e:d0:a3:80:07:0f:00:2c:f7:ae:eb:f1:d0:34:0c:
ff:86:cf:c1:7c:6a:51:11:6a:ac:0c:9f:da:7a:15:10:f6:36:
6c:9d:85:23:7a:f6:9a:c1:c0:5d:79:91:2f:90:9e:95:ba:ec:
cc:a4:67:35:bf:01:ed:80:65:4c:d8:85:82:c8:0a:36:d6:63:
8b:c7:1b:41:c4:12:af:19:99:e0:ad:e0:5c:b9:91:60:7b:b9:
37:52:a2:a3:cc:23:bd:10:3e:4a:42:cc:8e:1a:31:08:e7:2e:
dd:c2:16:cb:3d:35:8e:cb:4f:51:06:62:84:e7:c6:1d:46:6a:
53:1b:8d:bd:37:8d:d3:53:10:88:8c:1c:2a:bd:b2:3f:6c:fe:
08:2b:7a:6c:44:34:90:b1:1b:b7:e1:1a:35:73:14:32:32:14:
ce:ea:0b:bf:09:be:41:42:2a:b5:fe:6e:74:11:41:fd:6e:b2:
11:4d:e5:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXAxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAzMTA0MTQwWhcNMjUwNDMwMTA0MTQwWjAYMRYw
FAYDVQQDEw02N2M1ODc2OC0zOWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvlYbDOwGLmvxEu5+kgEKlmoy9XYztcYAh4UrNZtMQZ4eBOrJYstLH9f5
aaMDy5+zEepzgAJn5AM9Gg+Pu0OKjC9vL7xua7ghVJxre+O/v0kWIFUUdDojZMBD
jY0xfpx3PSZeOkRTa+3krIr5WW1BMqCoQxrKE6PaC4IJwpZF5qXsTv4DqTQUJL3A
UKgD/RT4OKheXK6RaKLRQvMmWCoBWu4TAuRcwAw09a7UdqhlxwL6amD1MFqK5nQ9
i0eTOfexQcy/H3eAOoCQSel+ArsDFibqybBzQTL/CvJ8qDM4zEslVOOYQ+zSiu+J
B9JC1bt4TUiEGnu6ujw2il3PyMb5tQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJP0
JKEEpS0vKm2p8dPnTiNn/ETnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xOTM0NzVDOEY4MUMxMUVGQUEyMEU1QjE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml1SMA0GCSqGSIb3DQEB
CwUAA4IBAQDXtpbK+/CSs+LF6aKh4XtGC40/5bN4aY/LEoger5VeolUXgAG9U+0J
aq+oKEtSMeP9E+vxR1fJbQ7jSWAr2SB9jCi2fuofzFn1t7ku0KOABw8ALPeu6/HQ
NAz/hs/BfGpREWqsDJ/aehUQ9jZsnYUjevaawcBdeZEvkJ6VuuzMpGc1vwHtgGVM
2IWCyAo21mOLxxtBxBKvGZngreBcuZFge7k3UqKjzCO9ED5KQsyOGjEI5y7dwhbL
PTWOy09RBmKE58YdRmpTG429N43TUxCIjBwqvbI/bP4IK3psRDSQsRu34Ro1cxQy
MhTO6gu/Cb5BQiq1/m50EUH9brIRTeUc
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:45 2025 by rpki-client