Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B011A56F5CF11EF9C64C18B762E951A.roa
File: 9B011A56F5CF11EF9C64C18B762E951A.roa (raw, json)
Hash identifier: vkTT9fqM7oc/laFiPqeRUd+IdkuuWLMwUIULeIxn4NA=
Subject key identifier: F8:49:C3:53:29:E5:0E:F1:62:D3:EF:93:F7:A3:C4:9F:22:B6:0C:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B011A56F5CF11EF9C64C18B762E951A.roa
Signing time: Fri 28 Feb 2025 12:29:08 +0000
ROA not before: Fri 28 Feb 2025 12:29:04 +0000
ROA not after: Fri 11 Apr 2025 12:29:04 +0000
asID: 138915
IP address blocks: 154.203.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92966 (0x16b26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 12:29:04 2025 GMT
Not After : Apr 11 12:29:04 2025 GMT
Subject: CN=67c1ac14-35ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6c:b1:77:38:fe:bd:44:3f:00:a3:3e:95:53:
0a:f9:4c:7c:3a:9f:cb:4c:d6:42:39:1b:33:44:17:
17:ad:62:0f:b2:a6:76:ed:a6:12:89:3c:8b:07:b9:
e2:db:3a:24:e1:fb:e5:6d:cb:08:de:be:93:ab:e4:
3b:2c:6c:2b:c1:a0:e9:3c:3a:0c:35:a9:7b:2b:2e:
3e:4a:f1:4d:0a:7d:01:5c:39:5e:ed:ad:3d:e2:ea:
3f:01:69:6d:ce:3c:77:16:57:32:d3:a5:84:da:e7:
40:a3:84:d1:37:e9:a0:b5:b8:27:01:79:72:b1:48:
df:32:45:98:ed:7e:8a:3e:4b:ec:05:54:08:b6:05:
a7:72:de:7b:bb:1b:88:72:fa:ef:c3:4e:19:c4:61:
8d:eb:ff:21:d1:2c:3d:15:35:4c:f2:a3:39:c8:b6:
04:3e:c3:ca:bc:4a:b4:f2:7b:7f:b8:6f:d0:3b:91:
50:82:34:79:63:20:31:fc:e0:9c:c3:f1:b3:37:14:
a9:83:7c:c0:51:11:42:a0:b4:c5:39:aa:f0:0b:32:
b0:94:5a:95:19:4d:c1:45:db:c0:d7:1d:ec:5f:f5:
df:cc:08:0a:e8:e2:3d:ec:f4:b9:0f:b4:3b:c1:81:
ee:8b:8d:1d:0c:1a:9e:12:26:ee:d0:5f:e0:eb:46:
e8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:49:C3:53:29:E5:0E:F1:62:D3:EF:93:F7:A3:C4:9F:22:B6:0C:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B011A56F5CF11EF9C64C18B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.133.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f5:a3:bf:eb:32:d3:15:5c:0f:98:3d:b1:6a:41:ef:e4:1f:
01:93:20:7a:9b:bf:d6:6b:d9:05:cf:d5:6f:9e:39:47:4a:0d:
11:e5:be:ee:f9:e0:a7:c1:b1:17:f4:84:0f:4a:01:bd:ed:75:
43:56:a3:c9:a6:4f:f9:a7:1c:74:0c:06:de:da:ef:bf:25:e9:
0d:62:af:c0:b7:7f:f7:87:25:da:11:97:1d:03:38:07:ab:95:
e8:03:ed:92:05:6b:d3:b7:d2:41:76:e2:33:a9:6c:78:4e:dc:
27:da:09:b8:9c:5d:93:29:06:20:6f:15:97:47:76:9e:c4:3d:
66:e0:f4:5b:52:15:99:fe:f0:18:20:bc:a5:dc:23:06:b2:05:
24:0c:c6:5c:37:03:5d:f1:53:4b:8f:a8:f1:66:26:bf:ee:ac:
d9:90:38:02:8a:47:08:8c:bf:34:09:2b:09:0b:13:a8:96:5b:
2d:d3:63:9a:16:d2:ac:b7:24:75:14:ae:7d:4e:bc:d2:33:3c:
12:26:31:f8:63:b4:35:df:df:ec:ec:5a:e5:89:c3:fa:92:38:
fc:7a:c6:b4:3d:25:28:0b:ea:45:c7:62:e0:87:dd:83:87:c4:
c8:99:e7:66:6d:01:8f:c8:46:ee:6d:b5:01:8c:e0:88:73:60:
9d:27:94:fd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWsmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI4MTIyOTA0WhcNMjUwNDExMTIyOTA0WjAYMRYw
FAYDVQQDEw02N2MxYWMxNC0zNWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA22yxdzj+vUQ/AKM+lVMK+Ux8Op/LTNZCORszRBcXrWIPsqZ27aYSiTyL
B7ni2zok4fvlbcsI3r6Tq+Q7LGwrwaDpPDoMNal7Ky4+SvFNCn0BXDle7a094uo/
AWltzjx3Flcy06WE2udAo4TRN+mgtbgnAXlysUjfMkWY7X6KPkvsBVQItgWnct57
uxuIcvrvw04ZxGGN6/8h0Sw9FTVM8qM5yLYEPsPKvEq08nt/uG/QO5FQgjR5YyAx
/OCcw/GzNxSpg3zAURFCoLTFOarwCzKwlFqVGU3BRdvA1x3sX/XfzAgK6OI97PS5
D7Q7wYHui40dDBqeEibu0F/g60bo0QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPhJ
w1Mp5Q7xYtPvk/ejxJ8itgzjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QjAxMUE1NkY1Q0YxMUVGOUM2NEMxOEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsuFMA0GCSqGSIb3DQEB
CwUAA4IBAQBE9aO/6zLTFVwPmD2xakHv5B8BkyB6m7/Wa9kFz9VvnjlHSg0R5b7u
+eCnwbEX9IQPSgG97XVDVqPJpk/5pxx0DAbe2u+/JekNYq/At3/3hyXaEZcdAzgH
q5XoA+2SBWvTt9JBduIzqWx4Ttwn2gm4nF2TKQYgbxWXR3aexD1m4PRbUhWZ/vAY
ILyl3CMGsgUkDMZcNwNd8VNLj6jxZia/7qzZkDgCikcIjL80CSsJCxOollst02Oa
FtKstyR1FK59TrzSMzwSJjH4Y7Q139/s7FrlicP6kjj8esa0PSUoC+pFx2Lgh92D
h8TImedmbQGPyEbubbUBjOCIc2CdJ5T9
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:44 2025 by rpki-client