Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9508229CF81411EFA4CEB380762E951A.roa
File: 9508229CF81411EFA4CEB380762E951A.roa (raw, json)
Hash identifier: ZlHJlX8o3QTDFznRNN6FFEjr1R7QFqDT2M1MbYjFjWQ=
Subject key identifier: 5E:AF:DC:66:95:E0:B8:AE:FA:99:3A:98:FC:D9:01:FD:9E:91:0A:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FD0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9508229CF81411EFA4CEB380762E951A.roa
Signing time: Mon 03 Mar 2025 09:47:55 +0000
ROA not before: Mon 03 Mar 2025 09:47:51 +0000
ROA not after: Wed 30 Apr 2025 09:47:51 +0000
asID: 63139
IP address blocks: 154.94.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94160 (0x16fd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 09:47:51 2025 GMT
Not After : Apr 30 09:47:51 2025 GMT
Subject: CN=67c57acb-08d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:c2:ad:69:8a:36:c6:e8:a8:f0:a9:1e:57:
9f:31:8e:dd:e6:83:f6:52:03:f1:74:0d:27:0a:82:
45:2d:01:26:5e:d4:75:6d:7b:29:51:b5:4c:66:25:
2d:e7:6d:75:f4:5e:b1:d6:a4:f7:ab:f3:4d:7a:05:
e8:7b:ba:04:f5:da:1e:0c:33:df:50:99:f2:91:b1:
65:9c:ba:44:92:35:98:4a:6f:a4:64:90:d4:b0:d8:
f8:e9:b6:83:bf:e8:8e:a1:78:0f:59:8b:8e:32:f0:
b9:c8:be:c8:88:a6:eb:ae:4c:15:17:75:ab:bc:c7:
10:ad:16:0d:92:23:0c:ee:15:a0:8d:97:f9:5d:5f:
b6:b5:b3:8a:82:69:e5:5c:b2:7b:9f:48:8e:a6:90:
d9:6d:25:4c:14:38:87:d0:e9:c5:6e:9a:22:81:83:
70:0b:20:22:96:41:96:49:53:df:a2:bb:37:4c:45:
68:70:e8:1f:77:87:98:f2:f1:b8:17:f2:e5:e6:69:
18:61:2e:b7:76:9c:e8:3d:91:b4:68:f1:7a:c2:5c:
78:da:15:8e:7b:a9:3b:c2:82:24:63:fa:a5:0b:8a:
39:13:94:55:12:02:3f:4c:38:9c:fc:f5:09:b8:8e:
97:d9:96:29:ba:ba:6f:6b:c0:a6:c2:38:f6:f3:29:
ad:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AF:DC:66:95:E0:B8:AE:FA:99:3A:98:FC:D9:01:FD:9E:91:0A:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9508229CF81411EFA4CEB380762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.114.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:29:98:e8:43:54:da:62:6a:7f:84:88:2f:6e:37:47:09:c2:
78:88:f3:a3:33:0d:ab:22:33:9e:9a:96:cc:66:97:a8:33:2f:
69:3f:d4:f4:f2:0d:4c:aa:c0:10:b0:04:29:df:e6:b8:20:64:
77:d1:cd:ec:cb:05:a2:eb:71:a3:33:1e:d6:f9:c8:fb:6c:7c:
68:e1:25:ee:ee:ce:df:5f:19:d1:e7:02:6a:e0:39:09:0f:d4:
9f:60:be:71:e8:64:bd:94:81:d7:f4:c6:7c:97:b5:56:cf:02:
b5:85:15:29:cb:ae:78:32:3a:b5:84:63:e0:ef:6f:b3:dd:8e:
fa:f6:91:b4:71:e8:99:e1:af:eb:66:86:29:d3:8a:46:bc:b8:
c8:dc:04:5d:77:a8:17:7f:70:70:a1:a9:d1:cb:49:83:c7:38:
7c:37:82:7e:1e:c8:70:06:09:7e:d6:25:56:88:74:6c:93:cf:
aa:57:d4:56:2b:1b:50:62:8e:b4:5f:e9:d5:1b:61:94:e3:96:
d2:c0:88:5f:e3:21:a2:35:3e:2a:7f:f2:af:73:33:46:6f:ed:
f4:a9:ac:cf:77:07:9d:48:f9:41:2c:c8:4c:b3:25:37:2a:c4:
22:bf:7a:cf:73:9b:94:ae:a9:72:50:38:d3:f2:12:6c:5d:f4:
b4:58:a1:52
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW/QMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAzMDk0NzUxWhcNMjUwNDMwMDk0NzUxWjAYMRYw
FAYDVQQDEw02N2M1N2FjYi0wOGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxBjCrWmKNsboqPCpHlefMY7d5oP2UgPxdA0nCoJFLQEmXtR1bXspUbVM
ZiUt52119F6x1qT3q/NNegXoe7oE9doeDDPfUJnykbFlnLpEkjWYSm+kZJDUsNj4
6baDv+iOoXgPWYuOMvC5yL7IiKbrrkwVF3WrvMcQrRYNkiMM7hWgjZf5XV+2tbOK
gmnlXLJ7n0iOppDZbSVMFDiH0OnFbpoigYNwCyAilkGWSVPfors3TEVocOgfd4eY
8vG4F/Ll5mkYYS63dpzoPZG0aPF6wlx42hWOe6k7woIkY/qlC4o5E5RVEgI/TDic
/PUJuI6X2ZYpurpva8Cmwjj28ymt3QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF6v
3GaV4Liu+pk6mPzZAf2ekQoiMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NTA4MjI5Q0Y4MTQxMUVGQTRDRUIzODA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5yMA0GCSqGSIb3DQEB
CwUAA4IBAQCNKZjoQ1TaYmp/hIgvbjdHCcJ4iPOjMw2rIjOempbMZpeoMy9pP9T0
8g1MqsAQsAQp3+a4IGR30c3sywWi63GjMx7W+cj7bHxo4SXu7s7fXxnR5wJq4DkJ
D9SfYL5x6GS9lIHX9MZ8l7VWzwK1hRUpy654Mjq1hGPg72+z3Y769pG0ceiZ4a/r
ZoYp04pGvLjI3ARdd6gXf3BwoanRy0mDxzh8N4J+HshwBgl+1iVWiHRsk8+qV9RW
KxtQYo60X+nVG2GU45bSwIhf4yGiNT4qf/KvczNGb+30qazPdwedSPlBLMhMsyU3
KsQiv3rPc5uUrqlyUDjT8hJsXfS0WKFS
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:09 2025 by rpki-client