Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/741AAFD8F4A311EFAE1F0D71762E951A.roa
File: 741AAFD8F4A311EFAE1F0D71762E951A.roa (raw, json)
Hash identifier: YbK5v5VlMH7PMmDo1/rb2XfrR7j4vkSrmW/dGmgGHPk=
Subject key identifier: 4C:6D:CC:7F:EA:D6:39:A9:89:74:80:C1:C5:60:4C:58:39:4D:21:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01660D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/741AAFD8F4A311EFAE1F0D71762E951A.roa
Signing time: Thu 27 Feb 2025 00:40:34 +0000
ROA not before: Thu 27 Feb 2025 00:00:30 +0000
ROA not after: Thu 19 Feb 2026 00:00:30 +0000
asID: 984
IP address blocks: 154.200.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91661 (0x1660d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 00:00:30 2025 GMT
Not After : Feb 19 00:00:30 2026 GMT
Subject: CN=67bfb482-c926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:75:ee:c4:c4:68:3c:76:46:16:41:09:43:
63:62:15:22:b8:10:6f:15:85:2f:49:1d:06:b8:48:
8b:b5:21:fa:94:24:a8:4c:9a:f1:eb:ed:0a:88:27:
ff:2d:7a:0a:04:a3:c8:36:0a:d4:b2:21:04:0e:f6:
72:04:2b:ea:62:82:e3:22:e5:83:4d:31:a8:5a:57:
48:10:20:e4:7a:4f:e1:b9:69:9e:0b:62:05:0c:31:
27:50:d0:57:87:d0:02:69:16:20:43:fc:12:5a:47:
a4:d2:fd:99:59:11:86:73:30:06:16:02:61:9c:4a:
c7:a5:d6:f5:a9:68:55:5e:aa:ae:5d:93:02:e6:e6:
cc:7e:2d:b9:bf:9b:0a:af:52:87:f9:25:42:9c:91:
94:31:d8:c3:d2:81:12:dc:b1:91:85:15:e9:04:cc:
d9:06:8d:f4:30:5c:bb:74:8c:6e:1c:2a:45:af:c4:
e6:ca:32:c1:b2:f4:11:84:81:f4:65:d9:60:59:f2:
5a:4c:c4:32:bb:3b:3a:e2:5c:75:12:a3:ae:38:c1:
07:4d:66:fd:3d:2b:ce:df:a8:b0:be:bb:28:56:ba:
7d:38:5c:20:b7:18:c0:74:2d:e3:a0:81:b3:05:0a:
33:5f:ec:44:bf:bc:97:bf:aa:fd:88:2b:33:d4:56:
52:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6D:CC:7F:EA:D6:39:A9:89:74:80:C1:C5:60:4C:58:39:4D:21:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/741AAFD8F4A311EFAE1F0D71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.46.0/24
Signature Algorithm: sha256WithRSAEncryption
57:c7:9f:7a:be:d1:88:3f:70:8d:ad:bc:d7:01:fa:21:82:87:
44:cc:38:83:10:1e:29:4b:b2:24:5c:d5:ba:d2:4d:0e:2e:b1:
d2:31:77:01:c0:e6:1e:fb:99:b0:6d:58:bb:93:ab:5c:94:18:
8e:0b:4e:56:29:f3:b3:d7:f9:83:b6:67:f1:82:49:a9:50:62:
f7:0a:29:42:11:a9:83:28:ed:3a:1b:9c:64:e3:27:af:ab:f3:
80:8e:cd:91:da:8d:ba:58:4e:80:3c:ad:f9:b9:9a:8b:3d:83:
35:cb:e9:93:36:4e:62:fc:14:91:dd:2e:90:7b:94:7a:9b:a3:
a5:69:69:23:32:28:e8:5e:19:71:f5:98:ee:02:df:65:41:46:
75:fa:68:1c:aa:fa:a9:73:ef:03:55:93:fb:10:5b:9f:8f:eb:
3b:03:27:e6:72:e5:a3:49:0b:f9:4a:0d:e8:cc:40:2d:a2:49:
14:3d:9e:51:10:b1:6a:11:8e:67:16:36:70:83:3f:0c:08:02:
91:81:e2:ec:04:62:cc:1b:95:9b:05:01:63:6a:d6:7c:f6:d2:
d0:0d:71:f0:dd:62:6d:f5:76:e7:ac:72:26:88:32:73:b2:c9:
b0:d9:ed:8f:41:e3:d0:32:4b:7b:78:cf:25:80:a5:cf:f5:fe:
5b:6e:c3:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWYNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MDAwMDMwWhcNMjYwMjE5MDAwMDMwWjAYMRYw
FAYDVQQDEw02N2JmYjQ4Mi1jOTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw5h17sTEaDx2RhZBCUNjYhUiuBBvFYUvSR0GuEiLtSH6lCSoTJrx6+0K
iCf/LXoKBKPINgrUsiEEDvZyBCvqYoLjIuWDTTGoWldIECDkek/huWmeC2IFDDEn
UNBXh9ACaRYgQ/wSWkek0v2ZWRGGczAGFgJhnErHpdb1qWhVXqquXZMC5ubMfi25
v5sKr1KH+SVCnJGUMdjD0oES3LGRhRXpBMzZBo30MFy7dIxuHCpFr8TmyjLBsvQR
hIH0ZdlgWfJaTMQyuzs64lx1EqOuOMEHTWb9PSvO36iwvrsoVrp9OFwgtxjAdC3j
oIGzBQozX+xEv7yXv6r9iCsz1FZSBQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFExt
zH/q1jmpiXSAwcVgTFg5TSG7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NDFBQUZEOEY0QTMxMUVGQUUxRjBENzE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsguMA0GCSqGSIb3DQEB
CwUAA4IBAQBXx596vtGIP3CNrbzXAfohgodEzDiDEB4pS7IkXNW60k0OLrHSMXcB
wOYe+5mwbVi7k6tclBiOC05WKfOz1/mDtmfxgkmpUGL3CilCEamDKO06G5xk4yev
q/OAjs2R2o26WE6APK35uZqLPYM1y+mTNk5i/BSR3S6Qe5R6m6OlaWkjMijoXhlx
9ZjuAt9lQUZ1+mgcqvqpc+8DVZP7EFufj+s7AyfmcuWjSQv5Sg3ozEAtokkUPZ5R
ELFqEY5nFjZwgz8MCAKRgeLsBGLMG5WbBQFjatZ89tLQDXHw3WJt9XbnrHImiDJz
ssmw2e2PQePQMkt7eM8lgKXP9f5bbsON
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:21 2025 by rpki-client