Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49D8E0B0E24611EFA7BD8D84762E951A.roa
File: 49D8E0B0E24611EFA7BD8D84762E951A.roa (raw, json)
Hash identifier: Wlgxs5prXt1Zazab69xGoJjSW5nm1Mus0Z8cC1e1CxQ=
Subject key identifier: 52:60:14:9D:A1:3B:E6:A8:09:53:B0:0C:59:DA:E6:D4:A9:03:F2:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01504D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49D8E0B0E24611EFA7BD8D84762E951A.roa
Signing time: Mon 03 Feb 2025 15:48:19 +0000
ROA not before: Mon 03 Feb 2025 15:48:15 +0000
ROA not after: Wed 30 Apr 2025 15:48:15 +0000
asID: 150008
IP address blocks: 154.206.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86093 (0x1504d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 15:48:15 2025 GMT
Not After : Apr 30 15:48:15 2025 GMT
Subject: CN=67a0e543-8079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:92:72:65:71:91:ae:f5:c4:c3:73:00:0f:32:
ea:7e:c7:f6:bc:4c:e0:01:d8:50:e3:fd:72:81:86:
8d:0f:e0:2c:7d:e7:ba:68:3a:d6:9c:6f:2f:06:68:
d9:66:e1:7e:f8:23:67:ae:01:b8:08:f9:14:9e:21:
22:09:ca:56:a3:7c:27:fa:d0:57:1c:ab:67:b6:8e:
9b:e9:55:0c:b2:da:7a:0b:b0:28:f6:b5:e4:cc:27:
a7:ca:f2:f4:a8:ef:54:12:bf:e2:ee:8c:94:6d:6c:
b5:3b:2f:45:22:23:0a:08:f6:fa:1a:b2:91:1b:98:
7a:34:2a:67:74:ce:92:02:83:9f:d7:31:8e:a3:6a:
e7:d1:be:fe:d4:30:30:ae:1d:be:25:9e:7a:ce:14:
04:f6:cd:d5:41:d5:93:bd:93:e7:55:24:13:6d:b4:
3d:42:a2:cf:36:1a:1c:2b:99:7b:a2:bf:6f:e7:16:
d1:21:03:58:a5:6c:ca:9f:b2:cb:c3:65:0f:ab:ef:
3c:6d:b0:7a:af:6a:b3:f0:17:61:b0:e9:27:1b:d3:
f7:3b:dd:ad:11:79:61:8e:3c:0d:e1:9d:79:5d:87:
18:64:e6:54:c4:23:84:51:b8:b2:30:b6:7a:f9:00:
66:de:f3:06:84:b6:ff:16:00:14:7b:bf:ec:14:6f:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:60:14:9D:A1:3B:E6:A8:09:53:B0:0C:59:DA:E6:D4:A9:03:F2:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49D8E0B0E24611EFA7BD8D84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.31.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ed:2e:66:44:ab:67:4a:d9:a3:be:e8:5d:d6:d7:87:29:7c:
02:3a:1d:9e:c4:a6:a2:32:14:1d:82:aa:15:13:1e:e5:ea:d1:
48:2a:37:aa:ea:f3:8f:30:f2:2f:42:79:5d:6c:bb:5b:6e:9f:
e8:63:bd:54:fc:93:7b:6b:ef:48:1e:e8:5c:c5:94:2e:d2:a5:
72:c9:a4:d2:a5:15:9a:d2:71:5b:52:20:e1:d1:7a:ab:47:42:
79:72:5d:f5:b7:c6:bc:fd:02:c9:ec:c7:39:71:7e:a1:63:83:
3b:1f:43:2c:f4:94:32:a9:9e:1f:fc:b4:9c:8d:e1:17:ba:c0:
09:92:1a:7f:52:a6:62:d5:27:44:38:fb:b2:40:de:6b:6c:5e:
5b:c2:ba:f7:22:4e:ff:22:7f:00:4b:83:b2:a9:f9:64:de:ef:
c5:94:fd:5e:11:10:1d:e1:6e:e6:08:db:91:e5:20:48:20:27:
55:49:78:fa:46:ea:b1:b9:f2:c8:fc:d0:fd:17:aa:f3:29:a0:
f8:cf:7d:bf:a2:e4:95:2f:86:5f:04:da:92:bf:3d:a4:5d:d7:
e2:54:22:8c:a2:8a:7a:d9:68:ab:42:29:78:a3:d5:e9:21:e0:
c1:94:84:be:de:0c:1d:2d:44:d0:55:68:8b:7e:05:3e:38:d5:
8b:6d:55:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVBNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjAzMTU0ODE1WhcNMjUwNDMwMTU0ODE1WjAYMRYw
FAYDVQQDEw02N2EwZTU0My04MDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzpJyZXGRrvXEw3MADzLqfsf2vEzgAdhQ4/1ygYaND+Asfee6aDrWnG8v
BmjZZuF++CNnrgG4CPkUniEiCcpWo3wn+tBXHKtnto6b6VUMstp6C7Ao9rXkzCen
yvL0qO9UEr/i7oyUbWy1Oy9FIiMKCPb6GrKRG5h6NCpndM6SAoOf1zGOo2rn0b7+
1DAwrh2+JZ56zhQE9s3VQdWTvZPnVSQTbbQ9QqLPNhocK5l7or9v5xbRIQNYpWzK
n7LLw2UPq+88bbB6r2qz8BdhsOknG9P3O92tEXlhjjwN4Z15XYcYZOZUxCOEUbiy
MLZ6+QBm3vMGhLb/FgAUe7/sFG/KkwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFJg
FJ2hO+aoCVOwDFna5tSpA/IcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80OUQ4RTBCMEUyNDYxMUVGQTdCRDhEODQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms4fMA0GCSqGSIb3DQEB
CwUAA4IBAQBE7S5mRKtnStmjvuhd1teHKXwCOh2exKaiMhQdgqoVEx7l6tFIKjeq
6vOPMPIvQnldbLtbbp/oY71U/JN7a+9IHuhcxZQu0qVyyaTSpRWa0nFbUiDh0Xqr
R0J5cl31t8a8/QLJ7Mc5cX6hY4M7H0Ms9JQyqZ4f/LScjeEXusAJkhp/UqZi1SdE
OPuyQN5rbF5bwrr3Ik7/In8AS4Oyqflk3u/FlP1eERAd4W7mCNuR5SBIICdVSXj6
RuqxufLI/ND9F6rzKaD4z32/ouSVL4ZfBNqSvz2kXdfiVCKMoop62WirQil4o9Xp
IeDBlIS+3gwdLUTQVWiLfgU+ONWLbVW2
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:58 2025 by rpki-client