Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A0F820AFD9B11EFAD19A758762E951A.roa
File: 7A0F820AFD9B11EFAD19A758762E951A.roa (raw, json)
Hash identifier: lEelNgf36776MF1RXo2z6QHfl00/fwvLfS/BmXJ0Zig=
Subject key identifier: ED:C0:76:BA:9C:5E:CF:58:A3:F2:17:0A:EC:2D:98:B4:52:A2:98:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017343
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A0F820AFD9B11EFAD19A758762E951A.roa
Signing time: Mon 10 Mar 2025 10:36:08 +0000
ROA not before: Mon 10 Mar 2025 10:36:04 +0000
ROA not after: Sat 29 Mar 2025 10:36:04 +0000
asID: 48529
IP address blocks: 154.206.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95043 (0x17343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 10 10:36:04 2025 GMT
Not After : Mar 29 10:36:04 2025 GMT
Subject: CN=67cec098-9a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:53:0c:40:08:4f:e8:e5:48:67:85:fc:79:
2f:0d:23:a0:4b:df:2d:5e:2f:f4:28:a7:c8:51:96:
8a:2c:8c:a8:d6:fb:85:b6:42:3d:f4:64:23:8d:66:
d2:7e:e0:0e:db:f8:21:e4:51:6d:cc:2c:9d:40:45:
26:f5:75:ca:a6:90:43:5b:6e:7a:d3:08:a2:ce:bf:
8f:79:f1:d8:40:90:cf:0f:8a:68:2d:e0:37:07:b4:
59:0b:9d:41:72:8c:50:e6:a4:ee:d8:77:9d:cf:b7:
28:ae:4c:9b:d6:d3:e3:b0:cf:bf:3f:31:27:3f:ad:
f1:e5:cb:9c:ec:55:d1:6d:91:49:bf:3d:67:f9:eb:
53:1a:6c:7a:f3:7e:15:34:bd:7d:a3:8c:e2:02:11:
76:a2:42:02:a5:f1:0f:e1:ed:87:70:4d:95:7c:11:
cb:6e:e1:6d:86:45:36:64:6a:7d:3c:e3:cc:f6:b0:
7e:d6:b8:79:e0:ad:ce:8c:c2:f3:74:57:0f:ed:b9:
93:60:23:a1:08:c0:c8:cf:ec:02:77:74:b6:5f:9d:
db:be:3e:2b:56:0c:16:61:24:fd:c2:8f:50:54:d3:
51:f2:fd:6b:dd:61:65:f4:1f:9c:cf:94:81:54:49:
ea:0e:89:21:97:98:89:fc:d2:74:da:52:5a:9d:e0:
f9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C0:76:BA:9C:5E:CF:58:A3:F2:17:0A:EC:2D:98:B4:52:A2:98:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A0F820AFD9B11EFAD19A758762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.46.0/24
Signature Algorithm: sha256WithRSAEncryption
93:bd:6c:c3:b1:7e:e5:a5:ec:c3:06:92:45:9e:50:f7:b8:85:
a2:56:bc:e9:f0:31:c3:5c:5e:df:23:c6:51:3e:35:71:bc:96:
cc:f5:b6:a8:c8:7b:c7:d9:5b:54:e4:f6:77:2e:13:3c:67:04:
85:6f:e2:ff:03:1c:d4:db:bf:96:d7:b1:55:3b:7c:01:d4:db:
64:ca:14:93:a4:7a:60:70:27:7f:be:f9:64:51:7e:79:c8:4e:
78:53:ac:af:9f:18:14:d8:fc:64:98:1d:55:10:40:11:b2:d6:
be:75:9a:26:fe:0f:da:c9:ba:58:f2:bf:b5:65:08:cd:07:73:
f2:ef:1a:ec:ea:70:e2:dd:60:2c:69:ed:02:bc:d2:21:df:e0:
73:6b:0b:be:1f:92:97:3e:5a:7f:54:75:4a:96:ab:0d:e9:42:
32:4d:19:0c:a1:a3:b7:e4:c9:fe:94:a5:0a:77:9f:2e:30:99:
3a:db:3f:d7:fa:39:90:67:18:00:47:86:4e:9b:03:4b:76:02:
cb:1a:13:3c:13:4c:35:3b:6e:9a:ef:76:4a:b3:f6:85:3d:ad:
76:37:54:aa:99:28:19:49:1b:01:49:ad:3a:69:54:b3:9e:e0:
79:f5:30:a8:55:c6:9e:2e:c0:94:7c:49:89:f7:56:50:ce:30:
d8:3a:90:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXNDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzEwMTAzNjA0WhcNMjUwMzI5MTAzNjA0WjAYMRYw
FAYDVQQDEw02N2NlYzA5OC05YTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAse5TDEAIT+jlSGeF/HkvDSOgS98tXi/0KKfIUZaKLIyo1vuFtkI99GQj
jWbSfuAO2/gh5FFtzCydQEUm9XXKppBDW2560wiizr+PefHYQJDPD4poLeA3B7RZ
C51BcoxQ5qTu2Hedz7corkyb1tPjsM+/PzEnP63x5cuc7FXRbZFJvz1n+etTGmx6
834VNL19o4ziAhF2okICpfEP4e2HcE2VfBHLbuFthkU2ZGp9POPM9rB+1rh54K3O
jMLzdFcP7bmTYCOhCMDIz+wCd3S2X53bvj4rVgwWYST9wo9QVNNR8v1r3WFl9B+c
z5SBVEnqDokhl5iJ/NJ02lJaneD5uwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFO3A
drqcXs9Yo/IXCuwtmLRSopiyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83QTBGODIwQUZEOUIxMUVGQUQxOUE3NTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms4uMA0GCSqGSIb3DQEB
CwUAA4IBAQCTvWzDsX7lpezDBpJFnlD3uIWiVrzp8DHDXF7fI8ZRPjVxvJbM9bao
yHvH2VtU5PZ3LhM8ZwSFb+L/AxzU27+W17FVO3wB1NtkyhSTpHpgcCd/vvlkUX55
yE54U6yvnxgU2PxkmB1VEEARsta+dZom/g/aybpY8r+1ZQjNB3Py7xrs6nDi3WAs
ae0CvNIh3+Bzawu+H5KXPlp/VHVKlqsN6UIyTRkMoaO35Mn+lKUKd58uMJk62z/X
+jmQZxgAR4ZOmwNLdgLLGhM8E0w1O26a73ZKs/aFPa12N1SqmSgZSRsBSa06aVSz
nuB59TCoVcaeLsCUfEmJ91ZQzjDYOpD5
-----END CERTIFICATE-----
Generated at Fri Apr 11 11:07:24 2025 by rpki-client