Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58D87BD8F45D11EF964DE393762E951A.roa
File: 58D87BD8F45D11EF964DE393762E951A.roa (raw, json)
Hash identifier: 0b3OJeWSEol6F3n4sT27f1wnxll2amWV3ompwIx9d8A=
Subject key identifier: 75:C1:72:B3:F3:BC:53:56:72:F1:C1:07:10:7E:C3:E2:C1:32:3D:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01651A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58D87BD8F45D11EF964DE393762E951A.roa
Signing time: Wed 26 Feb 2025 16:18:43 +0000
ROA not before: Wed 26 Feb 2025 16:18:39 +0000
ROA not after: Thu 19 Feb 2026 16:18:39 +0000
asID: 984
IP address blocks: 154.210.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91418 (0x1651a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 16:18:39 2025 GMT
Not After : Feb 19 16:18:39 2026 GMT
Subject: CN=67bf3ee3-ef28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:e3:67:f1:32:e5:55:1b:bb:82:78:f9:f9:
14:89:76:02:8b:bd:e9:14:0f:08:ed:85:be:ef:e9:
f5:8a:d4:2e:fa:cc:1d:e3:8d:e7:ec:7d:e0:4f:00:
ef:b3:17:71:24:1c:5a:b0:be:76:21:28:fd:c2:55:
e4:45:82:e0:f5:fe:cb:26:21:54:ef:46:2e:3f:07:
f4:fd:81:16:9a:5e:0e:cf:c1:39:f2:76:15:fa:f6:
50:d5:4a:3d:4a:06:e4:d7:d4:9b:88:75:04:60:ef:
98:1f:b1:3f:65:9d:65:aa:40:bc:f3:85:dc:f0:6d:
1d:ad:56:19:62:d3:65:f9:87:6a:40:1b:f3:3f:1f:
2a:bc:3a:ec:a8:ee:b9:eb:45:c4:16:02:32:95:cb:
7d:8c:cc:5a:c1:d4:cb:c7:ad:8c:13:97:07:4e:34:
c0:ab:d8:4d:50:df:59:e1:5b:66:d2:00:19:e8:50:
19:37:cf:78:10:0d:1a:d1:be:ab:1d:73:82:4d:e5:
34:9d:89:53:b1:8a:85:e5:8c:ef:40:1f:43:6b:33:
b9:27:bb:3f:7f:18:8b:d8:79:a1:5a:cc:d5:4f:0f:
7d:56:48:f0:6f:e6:6c:c4:3a:e2:71:15:67:b3:cc:
0f:49:60:f7:4a:d4:ab:8c:f5:d9:e6:85:5b:1d:94:
9a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C1:72:B3:F3:BC:53:56:72:F1:C1:07:10:7E:C3:E2:C1:32:3D:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58D87BD8F45D11EF964DE393762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.114.0/24
Signature Algorithm: sha256WithRSAEncryption
07:02:8a:39:de:29:e7:84:14:96:72:10:1b:02:86:d6:32:cd:
3f:ed:22:59:06:01:cb:18:f2:53:1e:29:40:0e:29:3a:4f:13:
58:28:c4:b5:99:8d:d5:a8:97:1e:3e:a9:dc:ed:ff:46:7b:35:
df:92:4d:a5:3c:42:51:19:0a:6b:4e:37:75:03:f6:4d:c2:92:
7b:6b:e2:bf:35:50:3c:d2:2b:3a:94:47:69:33:8c:90:c3:2d:
f6:6f:d1:0c:06:cc:a1:db:a7:d1:53:66:96:46:65:38:ad:7c:
63:1a:5e:4f:03:c8:5d:ca:74:a9:c0:e0:4b:da:4e:6f:64:72:
bf:a3:37:3b:e8:bf:0a:2d:aa:13:2f:c9:4b:e4:aa:fa:54:da:
48:12:c7:fc:97:b4:4b:56:44:b9:b0:34:ab:c4:91:4f:e3:a2:
e0:2e:7f:9e:27:36:d2:9f:ec:c8:15:bc:77:1a:b5:6a:ee:48:
86:0e:f2:13:fd:b2:54:2b:bf:2d:36:b7:33:ac:62:e4:0f:7f:
2a:ce:eb:9f:88:c0:d1:e5:8e:e6:62:d4:55:cd:39:e2:e3:89:
66:b7:4e:bf:39:bc:17:a0:f4:10:04:62:49:d5:7f:c7:1b:39:
b0:7e:f4:b7:e5:5f:bf:28:76:e0:de:28:35:f8:7d:fd:a5:bb:
17:31:fe:e2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWUaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTYxODM5WhcNMjYwMjE5MTYxODM5WjAYMRYw
FAYDVQQDEw02N2JmM2VlMy1lZjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwJ/jZ/Ey5VUbu4J4+fkUiXYCi73pFA8I7YW+7+n1itQu+swd443n7H3g
TwDvsxdxJBxasL52ISj9wlXkRYLg9f7LJiFU70YuPwf0/YEWml4Oz8E58nYV+vZQ
1Uo9Sgbk19SbiHUEYO+YH7E/ZZ1lqkC884Xc8G0drVYZYtNl+YdqQBvzPx8qvDrs
qO6560XEFgIylct9jMxawdTLx62ME5cHTjTAq9hNUN9Z4Vtm0gAZ6FAZN894EA0a
0b6rHXOCTeU0nYlTsYqF5YzvQB9DazO5J7s/fxiL2HmhWszVTw99Vkjwb+ZsxDri
cRVns8wPSWD3StSrjPXZ5oVbHZSaVwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHXB
crPzvFNWcvHBBxB+w+LBMj2iMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81OEQ4N0JEOEY0NUQxMUVGOTY0REUzOTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtJyMA0GCSqGSIb3DQEB
CwUAA4IBAQAHAoo53innhBSWchAbAobWMs0/7SJZBgHLGPJTHilADik6TxNYKMS1
mY3VqJcePqnc7f9GezXfkk2lPEJRGQprTjd1A/ZNwpJ7a+K/NVA80is6lEdpM4yQ
wy32b9EMBsyh26fRU2aWRmU4rXxjGl5PA8hdynSpwOBL2k5vZHK/ozc76L8KLaoT
L8lL5Kr6VNpIEsf8l7RLVkS5sDSrxJFP46LgLn+eJzbSn+zIFbx3GrVq7kiGDvIT
/bJUK78tNrczrGLkD38qzuufiMDR5Y7mYtRVzTni44lmt06/ObwXoPQQBGJJ1X/H
GzmwfvS35V+/KHbg3ig1+H39pbsXMf7i
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:52 2025 by rpki-client