Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C95B1FAF6B611EFB6DC53B7762E951A.roa
File: 9C95B1FAF6B611EFB6DC53B7762E951A.roa (raw, json)
Hash identifier: f6KNmz33YlhwmdXPi6kbmWtMym2FC5Ryq5nr4ei3QHY=
Subject key identifier: DB:12:56:1F:2F:0E:A7:AF:A6:51:41:C9:FD:F9:6A:7D:5B:25:8B:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016ECF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C95B1FAF6B611EFB6DC53B7762E951A.roa
Signing time: Sat 01 Mar 2025 16:02:44 +0000
ROA not before: Sat 01 Mar 2025 16:02:41 +0000
ROA not after: Sat 05 Apr 2025 16:02:41 +0000
asID: 203020
IP address blocks: 154.206.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93903 (0x16ecf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 16:02:41 2025 GMT
Not After : Apr 5 16:02:41 2025 GMT
Subject: CN=67c32fa4-3ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:a7:ec:16:1a:c4:73:29:7f:13:46:91:a6:
a9:f4:34:36:dc:03:6a:db:6e:0f:62:c9:ba:65:5e:
58:08:31:0f:98:5f:24:23:e4:7e:66:09:89:0d:2f:
0c:68:27:f7:23:23:88:23:fb:e8:14:94:b0:9e:3f:
a5:14:98:87:dc:73:16:64:f6:2f:91:11:92:80:64:
78:fc:16:fe:8c:37:16:1e:8b:7a:82:66:6f:4e:3a:
e1:d3:7e:b4:33:74:26:cd:fa:f3:02:79:8d:35:b6:
cf:d6:e6:39:62:36:97:a9:52:37:96:4f:79:c3:b6:
a5:6c:9f:2b:3e:7a:0e:35:23:80:bd:9a:89:12:40:
14:c6:bc:02:c9:df:6d:cb:40:1b:7e:50:d7:d3:9b:
52:44:08:0e:87:99:99:56:82:06:13:74:04:df:8c:
83:3c:9d:44:84:64:23:52:cb:15:5d:a7:3a:3c:39:
e3:d8:66:2f:5b:a2:f1:5e:d0:f4:b7:d4:9c:ae:99:
c0:cb:02:27:9f:b1:43:6c:ba:74:71:4b:e7:19:bf:
c1:da:54:e4:d6:b2:87:12:bd:d7:77:f5:f1:32:0c:
6b:ae:c0:ce:6a:89:b2:8f:99:fe:64:7e:2a:dc:cb:
52:82:21:fb:e9:43:b5:a3:d4:c2:3f:9f:31:83:4d:
9a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:12:56:1F:2F:0E:A7:AF:A6:51:41:C9:FD:F9:6A:7D:5B:25:8B:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9C95B1FAF6B611EFB6DC53B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.0.0/22
Signature Algorithm: sha256WithRSAEncryption
79:61:92:b9:cd:96:6c:4f:34:72:25:6b:cf:c3:e0:f7:52:4a:
73:95:4b:b1:ac:7f:92:b1:ae:39:43:c9:6d:c9:40:98:0f:e2:
84:f0:ae:28:d9:21:45:b2:43:c9:16:73:74:bf:00:d0:41:c0:
c3:36:d3:8f:62:01:e4:53:ac:19:c6:ad:33:8e:a6:32:83:fd:
96:4f:37:b7:0d:ab:58:7c:bb:09:ca:82:a5:22:87:1d:f0:bb:
58:79:f0:bf:d0:f0:21:9c:23:32:c1:00:c2:c3:e0:bd:1d:05:
ea:c2:ee:9f:2f:83:96:bd:0d:11:53:dc:64:2b:7f:63:7c:b3:
e2:65:b4:34:d2:9e:71:83:28:62:09:90:a7:1b:ff:3d:4b:e4:
93:8c:ef:47:0f:94:11:e8:4d:e9:02:2e:b0:6f:9d:e5:3e:6a:
fa:20:c7:c3:eb:49:ce:66:9f:4d:93:fc:f8:73:dd:9a:55:a9:
b4:3e:4d:c9:78:a1:ef:d0:9e:81:f9:c5:b4:ae:bc:51:ca:c4:
52:b3:9c:15:4a:96:43:a8:48:b0:4e:57:e2:a2:96:21:90:33:
b9:a6:64:0f:2b:db:3a:8a:ed:b1:5e:65:64:57:ee:ff:d6:86:
87:26:56:05:4e:18:d7:af:8e:70:d2:93:97:5d:d7:7c:07:7f:
5a:83:af:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW7PMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTYwMjQxWhcNMjUwNDA1MTYwMjQxWjAYMRYw
FAYDVQQDEw02N2MzMmZhNC0zZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtE+n7BYaxHMpfxNGkaap9DQ23ANq224PYsm6ZV5YCDEPmF8kI+R+ZgmJ
DS8MaCf3IyOII/voFJSwnj+lFJiH3HMWZPYvkRGSgGR4/Bb+jDcWHot6gmZvTjrh
0360M3QmzfrzAnmNNbbP1uY5YjaXqVI3lk95w7albJ8rPnoONSOAvZqJEkAUxrwC
yd9ty0AbflDX05tSRAgOh5mZVoIGE3QE34yDPJ1EhGQjUssVXac6PDnj2GYvW6Lx
XtD0t9ScrpnAywInn7FDbLp0cUvnGb/B2lTk1rKHEr3Xd/XxMgxrrsDOaomyj5n+
ZH4q3MtSgiH76UO1o9TCP58xg02aGwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNsS
Vh8vDqevplFByf35an1bJYulMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85Qzk1QjFGQUY2QjYxMUVGQjZEQzUzQjc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCms4AMA0GCSqGSIb3DQEB
CwUAA4IBAQB5YZK5zZZsTzRyJWvPw+D3UkpzlUuxrH+Ssa45Q8ltyUCYD+KE8K4o
2SFFskPJFnN0vwDQQcDDNtOPYgHkU6wZxq0zjqYyg/2WTze3DatYfLsJyoKlIocd
8LtYefC/0PAhnCMywQDCw+C9HQXqwu6fL4OWvQ0RU9xkK39jfLPiZbQ00p5xgyhi
CZCnG/89S+STjO9HD5QR6E3pAi6wb53lPmr6IMfD60nOZp9Nk/z4c92aVam0Pk3J
eKHv0J6B+cW0rrxRysRSs5wVSpZDqEiwTlfiopYhkDO5pmQPK9s6iu2xXmVkV+7/
1oaHJlYFThjXr45w0pOXXdd8B39ag6/U
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:13 2025 by rpki-client