Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C76B276092E11F0B51D9D59762E951A.roa
File: 8C76B276092E11F0B51D9D59762E951A.roa (raw, json)
Hash identifier: 2iwSUxWQ8pkbwKq4nO82PMAbs3wjvHzwBI+zZpZnG2M=
Subject key identifier: 2E:20:B1:4F:60:83:8E:71:EB:1C:29:3D:DA:8F:F0:4B:56:19:2D:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C76B276092E11F0B51D9D59762E951A.roa
Signing time: Tue 25 Mar 2025 04:06:38 +0000
ROA not before: Tue 25 Mar 2025 04:06:34 +0000
ROA not after: Mon 14 Apr 2025 04:06:34 +0000
asID: 139880
IP address blocks: 154.209.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95711 (0x175df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 04:06:34 2025 GMT
Not After : Apr 14 04:06:34 2025 GMT
Subject: CN=67e22bce-9658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4f:7b:b5:aa:a2:e9:a1:ec:33:7f:85:a2:a7:
37:2a:aa:52:61:6c:52:e9:d4:8c:6e:4d:91:c7:ca:
20:4f:2d:b1:d7:f4:41:8b:b0:93:cf:4f:11:28:e9:
eb:9d:b3:3b:51:4f:51:60:93:d8:83:2c:b3:7d:95:
39:6b:a0:b4:19:ca:7e:01:ee:38:e8:cb:99:c7:8a:
fc:58:df:36:9e:f8:48:25:8b:11:e7:91:00:9d:ca:
6f:92:7d:cc:3b:3d:3f:49:c9:68:5e:65:2a:55:0d:
bb:da:90:d9:35:5e:f7:4e:22:4e:ef:4c:42:e4:ed:
5d:44:a1:e0:29:83:ad:a1:a0:d0:9a:88:c2:62:a5:
35:ad:25:f7:d4:b0:96:4c:33:03:86:42:9a:d7:e6:
36:2a:f1:cf:02:37:a6:24:5f:90:ed:a6:82:9a:1b:
ad:ca:46:e7:85:e1:0d:d7:b7:cb:26:a9:76:4e:2e:
59:33:c9:e0:ef:4b:9b:63:cf:49:07:83:78:c9:2d:
98:11:90:ba:33:0b:74:ec:31:d6:d2:19:81:91:7e:
6c:1e:f2:35:1d:cb:21:e0:1b:bd:83:40:06:6b:2f:
b5:83:98:c1:13:d9:e1:cb:09:79:28:19:70:c8:bd:
d6:a7:5c:df:f6:c0:82:2b:1f:37:91:f8:ad:d6:44:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:20:B1:4F:60:83:8E:71:EB:1C:29:3D:DA:8F:F0:4B:56:19:2D:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C76B276092E11F0B51D9D59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.160.0/19
Signature Algorithm: sha256WithRSAEncryption
8a:df:a5:75:eb:52:57:2f:02:40:e3:b8:ee:df:cd:af:13:e0:
ff:d6:86:50:1e:9d:2a:65:8d:ed:cd:2e:3b:90:0e:75:67:0e:
1c:c1:25:e7:44:27:bc:cc:ce:22:16:ac:78:c0:5b:fe:e3:e5:
97:34:c8:1f:c0:aa:c7:4f:fb:b3:b1:71:58:1c:2b:77:87:87:
c2:23:1e:35:da:33:df:ab:ec:1d:45:d4:63:93:bb:09:44:cb:
83:05:57:a2:f3:d1:25:a5:e7:73:dc:7e:54:48:2a:7d:f6:a8:
dc:83:dc:31:8b:c3:cf:88:9f:36:34:9a:50:2a:76:67:80:f7:
32:1b:06:eb:58:36:03:6b:c1:83:25:04:12:62:ae:8e:b9:80:
c6:f3:c9:25:9f:eb:e8:12:bc:ae:e0:a1:aa:75:72:74:51:21:
9e:0c:59:a9:13:74:15:88:6b:60:8a:e5:1b:ff:33:47:cd:6b:
72:40:ee:eb:2a:49:eb:45:80:82:c1:c9:e9:1d:3a:53:12:1a:
e7:0d:2a:f3:03:df:6c:2c:38:31:92:97:5b:7a:1b:26:2e:c7:
a6:d2:60:96:fc:a5:7a:2c:11:d6:85:ca:3c:9f:d9:9a:c1:06:
ba:d2:d6:5e:d0:a1:e7:7a:7b:52:ed:02:62:8a:b9:90:f9:63:
9a:46:72:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXXfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzI1MDQwNjM0WhcNMjUwNDE0MDQwNjM0WjAYMRYw
FAYDVQQDEw02N2UyMmJjZS05NjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqU97taqi6aHsM3+Foqc3KqpSYWxS6dSMbk2Rx8ogTy2x1/RBi7CTz08R
KOnrnbM7UU9RYJPYgyyzfZU5a6C0Gcp+Ae446MuZx4r8WN82nvhIJYsR55EAncpv
kn3MOz0/ScloXmUqVQ272pDZNV73TiJO70xC5O1dRKHgKYOtoaDQmojCYqU1rSX3
1LCWTDMDhkKa1+Y2KvHPAjemJF+Q7aaCmhutykbnheEN17fLJql2Ti5ZM8ng70ub
Y89JB4N4yS2YEZC6Mwt07DHW0hmBkX5sHvI1Hcsh4Bu9g0AGay+1g5jBE9nhywl5
KBlwyL3Wp1zf9sCCKx83kfit1kS49wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFC4g
sU9gg45x6xwpPdqP8EtWGS2SMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84Qzc2QjI3NjA5MkUxMUYwQjUxRDlENTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmtGgMA0GCSqGSIb3DQEB
CwUAA4IBAQCK36V161JXLwJA47ju382vE+D/1oZQHp0qZY3tzS47kA51Zw4cwSXn
RCe8zM4iFqx4wFv+4+WXNMgfwKrHT/uzsXFYHCt3h4fCIx412jPfq+wdRdRjk7sJ
RMuDBVei89Elpedz3H5USCp99qjcg9wxi8PPiJ82NJpQKnZngPcyGwbrWDYDa8GD
JQQSYq6OuYDG88kln+voEryu4KGqdXJ0USGeDFmpE3QViGtgiuUb/zNHzWtyQO7r
KknrRYCCwcnpHTpTEhrnDSrzA99sLDgxkpdbehsmLsem0mCW/KV6LBHWhco8n9ma
wQa60tZe0KHnentS7QJiirmQ+WOaRnLW
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:24:53 2025 by rpki-client