Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FCBC3A203DB11F09CE86AB7762E951A.roa
File: 2FCBC3A203DB11F09CE86AB7762E951A.roa (raw, json)
Hash identifier: s0NBwT2RH+d2JCjkxFRE4c+KjvA1P2Ef+DNehgjXFtQ=
Subject key identifier: 9B:31:B8:D9:0B:A0:D6:E7:68:D4:27:61:9E:0B:6B:84:E2:2F:AF:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01747E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FCBC3A203DB11F09CE86AB7762E951A.roa
Signing time: Tue 18 Mar 2025 09:27:18 +0000
ROA not before: Tue 18 Mar 2025 09:27:15 +0000
ROA not after: Sat 19 Apr 2025 09:27:15 +0000
asID: 9304
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95358 (0x1747e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 18 09:27:15 2025 GMT
Not After : Apr 19 09:27:15 2025 GMT
Subject: CN=67d93c76-02ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:8d:9a:a4:08:5d:b9:ab:a9:4e:55:f9:9b:
cf:8a:88:bb:56:a8:52:02:79:d6:b3:80:4c:f4:f4:
bf:14:3b:8f:26:32:54:6a:29:64:7e:b6:cc:fd:b0:
89:be:5f:40:d3:b0:4f:6e:c8:7d:89:18:77:bf:c6:
20:e7:c1:fa:44:67:af:d1:df:ce:90:bb:55:a8:83:
f6:4d:78:30:aa:cf:09:a4:97:a2:79:a2:5a:fa:18:
cb:35:6f:37:ae:64:04:9e:cc:b9:19:f5:f0:2e:ea:
89:61:b4:80:f7:a2:ac:54:24:a9:28:00:e0:c0:b7:
1b:2a:2c:c4:c0:e9:1c:c1:30:e4:16:47:a6:b4:04:
41:15:d9:f9:72:a3:f1:24:94:71:78:d4:e1:9b:37:
08:b7:4e:17:bb:7c:45:be:57:d1:d6:83:23:c1:a2:
58:43:83:61:d7:ac:99:59:10:e1:6f:d0:01:d9:85:
72:b4:19:16:f9:99:84:0f:bb:42:e4:3c:31:b0:86:
fd:95:70:c3:2e:5a:a9:39:c4:83:e3:02:24:42:f2:
5e:db:18:3f:f5:84:df:2e:08:76:a0:33:83:e7:0b:
60:48:0d:8d:fa:80:66:77:24:74:4a:62:74:ab:de:
26:4a:3f:78:7a:8f:41:f5:62:f8:fc:ed:af:05:92:
f3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:31:B8:D9:0B:A0:D6:E7:68:D4:27:61:9E:0B:6B:84:E2:2F:AF:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2FCBC3A203DB11F09CE86AB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0-154.92.198.255
Signature Algorithm: sha256WithRSAEncryption
37:eb:91:c9:e2:6a:5d:5c:58:da:02:ad:12:78:4a:b0:e6:63:
fc:9f:82:bd:4a:88:99:10:7b:26:be:cd:c4:e2:64:4d:37:f6:
93:4a:d3:d3:85:a6:31:53:aa:69:a4:57:0c:57:46:c9:fc:95:
c0:e8:c3:5e:13:4d:d9:4e:d8:92:0a:b6:28:31:e1:36:26:4a:
3d:c9:3e:3b:c7:21:8e:41:5d:d2:2a:69:a0:bc:73:96:7e:4d:
cb:29:15:98:9e:95:71:0c:99:bc:ef:66:c4:5a:4e:e5:96:54:
80:e1:fd:eb:a3:d5:ee:7d:fe:84:fb:ff:c1:1b:db:af:f9:0e:
6d:58:15:87:fc:82:81:bb:64:e4:84:08:05:3e:8e:5f:54:a0:
cc:a1:82:f4:f4:6d:00:5f:a1:8f:b5:94:ad:2e:80:31:7d:df:
52:c8:4b:98:80:03:9f:97:ec:31:7f:e9:da:73:8d:4c:0f:72:
18:a3:69:26:de:b2:19:c2:2c:b2:32:95:ca:54:44:bb:34:1b:
c0:ea:9c:eb:66:96:c1:ac:8b:ed:50:85:bb:7e:12:84:dd:1e:
5c:9e:34:29:3b:31:b2:87:9f:7f:3a:51:5a:a4:b4:6b:6b:bc:
45:42:dc:94:fe:cb:69:19:92:08:c8:87:ce:92:18:b7:8d:7f:
ff:fa:a7:74
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAXR+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzE4MDkyNzE1WhcNMjUwNDE5MDkyNzE1WjAYMRYw
FAYDVQQDEw02N2Q5M2M3Ni0wMmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuMONmqQIXbmrqU5V+ZvPioi7VqhSAnnWs4BM9PS/FDuPJjJUailkfrbM
/bCJvl9A07BPbsh9iRh3v8Yg58H6RGev0d/OkLtVqIP2TXgwqs8JpJeieaJa+hjL
NW83rmQEnsy5GfXwLuqJYbSA96KsVCSpKADgwLcbKizEwOkcwTDkFkemtARBFdn5
cqPxJJRxeNThmzcIt04Xu3xFvlfR1oMjwaJYQ4Nh16yZWRDhb9AB2YVytBkW+ZmE
D7tC5DwxsIb9lXDDLlqpOcSD4wIkQvJe2xg/9YTfLgh2oDOD5wtgSA2N+oBmdyR0
SmJ0q94mSj94eo9B9WL4/O2vBZLz3wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJsx
uNkLoNbnaNQnYZ4La4TiL688MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRkNCQzNBMjAzREIxMUYwOUNFODZBQjc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAaaXMADBACaXMYwDQYJ
KoZIhvcNAQELBQADggEBADfrkcnial1cWNoCrRJ4SrDmY/yfgr1KiJkQeya+zcTi
ZE039pNK09OFpjFTqmmkVwxXRsn8lcDow14TTdlO2JIKtigx4TYmSj3JPjvHIY5B
XdIqaaC8c5Z+TcspFZielXEMmbzvZsRaTuWWVIDh/euj1e59/oT7/8Eb26/5Dm1Y
FYf8goG7ZOSECAU+jl9UoMyhgvT0bQBfoY+1lK0ugDF931LIS5iAA5+X7DF/6dpz
jUwPchijaSbeshnCLLIylcpURLs0G8DqnOtmlsGsi+1Qhbt+EoTdHlyeNCk7MbKH
n386UVqktGtrvEVC3JT+y2kZkgjIh86SGLeNf//6p3Q=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:26:21 2025 by rpki-client