Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49F7EC84F3F411EFABF39ABC762E951A.roa
File: 49F7EC84F3F411EFABF39ABC762E951A.roa (raw, json)
Hash identifier: 8Xp7CFutjdk9osZDN/WJiQ9FeBD6ofurbC2n3UItJKM=
Subject key identifier: B0:8E:21:40:54:FD:7E:22:59:98:6E:19:1F:C9:79:B7:E9:54:0D:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49F7EC84F3F411EFABF39ABC762E951A.roa
Signing time: Wed 26 Feb 2025 03:46:41 +0000
ROA not before: Wed 26 Feb 2025 03:46:37 +0000
ROA not after: Thu 19 Feb 2026 03:46:37 +0000
asID: 984
IP address blocks: 154.203.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90293 (0x160b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 03:46:37 2025 GMT
Not After : Feb 19 03:46:37 2026 GMT
Subject: CN=67be8ea1-2557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:ac:12:9d:51:ff:33:bc:8b:63:13:dc:d7:
84:2e:03:92:2d:03:66:39:1c:73:e5:40:c0:e7:86:
24:a5:ce:35:61:99:56:a2:d9:7a:88:32:06:7f:d0:
9b:24:1b:42:16:13:41:3d:a8:04:b3:90:7c:c5:84:
d8:3c:07:80:ef:2c:29:d1:f9:3b:4a:39:f7:34:8e:
ba:94:98:02:32:bc:9a:c1:7e:bc:d8:18:2d:48:4a:
3e:98:2b:10:26:8d:ae:c7:37:9c:64:f7:6f:35:91:
86:21:6c:c7:89:5d:77:d5:44:f9:19:58:9c:49:b9:
6b:14:40:95:7f:6b:58:74:eb:b8:8e:ee:d4:d0:c2:
c5:16:d3:94:eb:76:7a:23:6f:d9:90:6d:75:74:2d:
00:d2:8b:fd:c5:1f:2c:e1:41:5e:3f:cc:eb:a2:89:
1f:fa:e7:a8:58:a9:d3:ae:e9:7d:84:45:63:21:f1:
ee:cc:42:c2:96:28:b1:54:49:51:1b:96:fd:dd:c1:
f7:09:e3:1a:5a:e9:82:a3:ee:61:46:aa:24:b6:a9:
62:48:37:e7:e9:0f:6a:0e:59:f0:e9:ee:ca:3b:a1:
2c:b4:c4:47:de:80:09:14:4a:bb:22:f7:8d:c1:75:
a4:c1:dc:dc:33:19:8f:44:49:64:cb:a7:54:b6:a1:
5a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8E:21:40:54:FD:7E:22:59:98:6E:19:1F:C9:79:B7:E9:54:0D:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49F7EC84F3F411EFABF39ABC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.114.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:83:1c:77:42:3e:36:ab:bd:67:46:9b:70:b9:c4:19:8e:0a:
b7:c9:88:34:d5:e6:00:96:13:5e:0f:86:21:68:90:8c:dc:c7:
06:a2:64:50:68:8d:d2:1f:40:45:0e:29:75:2b:be:3a:cb:9d:
ba:8c:d8:a8:36:79:06:c0:04:2c:13:13:f1:e0:40:b5:35:15:
a9:5f:94:7a:57:bc:82:6e:f8:8b:15:9d:74:f2:d6:52:52:da:
1f:45:fd:01:5a:54:d6:51:d4:83:4b:50:f9:a4:9e:90:17:3e:
df:8d:fa:1b:36:49:65:b8:e0:9e:ba:54:e8:e0:61:78:c2:20:
8d:ad:ad:b2:a1:70:e3:21:e1:22:61:f9:83:e9:dd:4b:44:59:
41:fc:cd:8c:52:6d:7e:bc:71:79:18:7f:04:51:8f:d3:e4:61:
73:c8:36:8f:79:b5:8b:a3:31:b0:a9:1d:6b:86:07:97:04:5e:
fc:e0:70:06:67:71:87:c0:67:96:86:0b:37:60:75:13:26:a8:
0b:1f:aa:ad:9f:22:f6:51:4e:55:33:57:98:85:ea:03:06:fe:
22:d0:ef:e5:5a:2b:6d:b8:ed:cd:ca:95:e4:48:98:c6:7f:9f:
8f:69:87:f1:3a:e9:da:3a:3d:1b:f9:16:bf:01:b0:40:3a:5a:
f2:6d:45:2e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWC1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDM0NjM3WhcNMjYwMjE5MDM0NjM3WjAYMRYw
FAYDVQQDEw02N2JlOGVhMS0yNTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnCqsEp1R/zO8i2MT3NeELgOSLQNmORxz5UDA54Ykpc41YZlWotl6iDIG
f9CbJBtCFhNBPagEs5B8xYTYPAeA7ywp0fk7Sjn3NI66lJgCMryawX682BgtSEo+
mCsQJo2uxzecZPdvNZGGIWzHiV131UT5GVicSblrFECVf2tYdOu4ju7U0MLFFtOU
63Z6I2/ZkG11dC0A0ov9xR8s4UFeP8zrookf+ueoWKnTrul9hEVjIfHuzELCliix
VElRG5b93cH3CeMaWumCo+5hRqoktqliSDfn6Q9qDlnw6e7KO6EstMRH3oAJFEq7
IveNwXWkwdzcMxmPRElky6dUtqFa1QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLCO
IUBU/X4iWZhuGR/JebfpVA0rMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80OUY3RUM4NEYzRjQxMUVGQUJGMzlBQkM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmstyMA0GCSqGSIb3DQEB
CwUAA4IBAQA8gxx3Qj42q71nRptwucQZjgq3yYg01eYAlhNeD4YhaJCM3McGomRQ
aI3SH0BFDil1K746y526jNioNnkGwAQsExPx4EC1NRWpX5R6V7yCbviLFZ108tZS
UtofRf0BWlTWUdSDS1D5pJ6QFz7fjfobNklluOCeulTo4GF4wiCNra2yoXDjIeEi
YfmD6d1LRFlB/M2MUm1+vHF5GH8EUY/T5GFzyDaPebWLozGwqR1rhgeXBF784HAG
Z3GHwGeWhgs3YHUTJqgLH6qtnyL2UU5VM1eYheoDBv4i0O/lWittuO3NypXkSJjG
f5+PaYfxOunaOj0b+Ra/AbBAOlrybUUu
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:50:49 2025 by rpki-client