Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/295454BCF44A11EF88806F8C762E951A.roa
File: 295454BCF44A11EF88806F8C762E951A.roa (raw, json)
Hash identifier: re38YWEVFYt8G6zymPWk8NkSRrq4sUalcgvFDG+7Y9U=
Subject key identifier: B1:CE:96:32:F4:48:59:FF:A1:1C:B4:E9:96:EB:7C:95:17:9C:89:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01640F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/295454BCF44A11EF88806F8C762E951A.roa
Signing time: Wed 26 Feb 2025 14:01:23 +0000
ROA not before: Wed 26 Feb 2025 14:01:19 +0000
ROA not after: Thu 19 Feb 2026 14:01:19 +0000
asID: 984
IP address blocks: 154.210.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91151 (0x1640f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:01:19 2025 GMT
Not After : Feb 19 14:01:19 2026 GMT
Subject: CN=67bf1eb3-ba2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:84:34:dd:d5:5b:c7:e4:b3:90:07:47:b1:
c9:d6:9b:1f:6c:07:d6:26:51:3d:f7:19:18:14:ec:
a1:3c:d6:d6:6e:a7:e0:10:4b:d1:92:b1:6b:c0:e8:
a3:f9:7b:e3:30:fe:81:d8:a0:24:eb:02:fd:e7:38:
cc:7b:54:5b:11:6b:3a:99:a2:c2:b0:10:57:e8:af:
e8:00:10:78:2f:6d:75:5d:64:0a:66:43:3c:90:40:
5b:f0:9d:a1:e8:51:2e:3d:35:ce:db:63:a1:38:e7:
aa:78:ba:94:a6:08:6f:b6:04:90:93:08:e2:0e:88:
da:82:aa:9f:90:9e:22:ac:a7:72:ce:8c:9d:d5:7c:
5a:e1:b5:90:73:b0:86:88:7e:60:be:a1:a3:8f:7a:
94:ec:db:bf:eb:f7:ef:3d:b2:30:5c:d0:72:b8:fb:
e7:79:87:11:ff:f5:54:f4:b3:84:66:a8:07:b8:62:
91:9a:42:47:c6:b6:d9:b4:9d:c6:7e:ee:69:b3:c6:
4c:99:ed:30:77:cf:a2:a6:d0:22:90:4d:b2:93:53:
df:89:f2:c0:21:40:f8:49:fa:a6:60:9c:64:c8:eb:
46:9c:ae:47:f5:22:97:5c:df:43:ea:6a:82:b8:3c:
c7:9e:18:82:0a:3b:76:c0:7f:e3:80:4f:c8:ef:a0:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CE:96:32:F4:48:59:FF:A1:1C:B4:E9:96:EB:7C:95:17:9C:89:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/295454BCF44A11EF88806F8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.42.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:a4:02:b6:ff:4d:bb:50:fe:b4:21:a3:e8:ce:78:b5:59:60:
3a:33:dc:89:5d:77:2c:1c:82:8b:2d:26:5b:98:5e:ca:c8:7d:
bd:9d:e6:84:23:91:12:77:cb:5e:fe:d3:4e:bd:ca:9d:fd:1b:
0e:fc:ff:28:7e:84:00:81:56:67:5d:6f:98:09:21:ae:51:b7:
15:9b:29:a5:77:41:ae:44:bd:2a:18:6b:73:72:97:9d:64:70:
bb:8d:f8:c2:4d:3d:a5:a4:2e:05:9f:21:57:ba:cf:c2:20:fa:
8c:f6:f9:3e:4b:44:82:14:f9:cb:20:e3:69:4c:96:52:dd:e6:
ba:a7:09:cb:b7:93:b1:98:17:57:a1:09:0f:b7:1b:e8:7c:11:
12:0a:30:37:c2:3a:eb:b2:3d:56:33:c5:bb:ea:7f:ad:a3:89:
82:8d:5c:10:ee:53:10:37:1c:84:e5:fa:16:76:65:16:55:49:
c2:43:0c:16:99:a1:c7:49:46:4d:d9:5d:f8:db:4d:b4:a8:46:
94:7b:9e:74:e6:30:1d:6f:46:37:6b:80:92:a6:34:25:3e:fa:
7c:7e:c6:96:22:38:71:ac:46:82:c1:f8:c7:c8:a7:5c:9b:d5:
41:10:19:ba:e8:c1:c4:c5:b4:31:d1:fb:7f:a3:f5:97:b9:bc:
5a:98:67:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWQPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTQwMTE5WhcNMjYwMjE5MTQwMTE5WjAYMRYw
FAYDVQQDEw02N2JmMWViMy1iYTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw8uENN3VW8fks5AHR7HJ1psfbAfWJlE99xkYFOyhPNbWbqfgEEvRkrFr
wOij+XvjMP6B2KAk6wL95zjMe1RbEWs6maLCsBBX6K/oABB4L211XWQKZkM8kEBb
8J2h6FEuPTXO22OhOOeqeLqUpghvtgSQkwjiDojagqqfkJ4irKdyzoyd1Xxa4bWQ
c7CGiH5gvqGjj3qU7Nu/6/fvPbIwXNByuPvneYcR//VU9LOEZqgHuGKRmkJHxrbZ
tJ3Gfu5ps8ZMme0wd8+iptAikE2yk1PfifLAIUD4SfqmYJxkyOtGnK5H9SKXXN9D
6mqCuDzHnhiCCjt2wH/jgE/I76CvFQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLHO
ljL0SFn/oRy06ZbrfJUXnIkXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yOTU0NTRCQ0Y0NEExMUVGODg4MDZGOEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtIqMA0GCSqGSIb3DQEB
CwUAA4IBAQAspAK2/027UP60IaPozni1WWA6M9yJXXcsHIKLLSZbmF7KyH29neaE
I5ESd8te/tNOvcqd/RsO/P8ofoQAgVZnXW+YCSGuUbcVmymld0GuRL0qGGtzcped
ZHC7jfjCTT2lpC4FnyFXus/CIPqM9vk+S0SCFPnLIONpTJZS3ea6pwnLt5OxmBdX
oQkPtxvofBESCjA3wjrrsj1WM8W76n+to4mCjVwQ7lMQNxyE5foWdmUWVUnCQwwW
maHHSUZN2V342020qEaUe5505jAdb0Y3a4CSpjQlPvp8fsaWIjhxrEaCwfjHyKdc
m9VBEBm66MHExbQx0ft/o/WXubxamGcI
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:54:42 2025 by rpki-client