Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2FA36FCF6B311EFB310A6A3762E951A.roa
File: C2FA36FCF6B311EFB310A6A3762E951A.roa (raw, json)
Hash identifier: WK2JZTWaBtDDJ2/p5zpuezs/oQGuWh3K3BPAC8+rB8w=
Subject key identifier: 0F:D3:3E:07:51:1A:F0:D0:19:B4:96:17:5F:FA:52:BF:AB:CE:A3:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016EB7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2FA36FCF6B311EFB310A6A3762E951A.roa
Signing time: Sat 01 Mar 2025 15:42:20 +0000
ROA not before: Sat 01 Mar 2025 15:42:17 +0000
ROA not after: Sat 05 Apr 2025 15:42:17 +0000
asID: 203020
IP address blocks: 154.207.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93879 (0x16eb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 15:42:17 2025 GMT
Not After : Apr 5 15:42:17 2025 GMT
Subject: CN=67c32adc-b04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:93:fa:06:ef:f4:bd:3d:f0:28:b1:3b:7e:45:
90:56:ff:32:8b:c0:30:d2:e0:11:08:a8:e2:c8:e8:
5a:26:f9:11:9e:b1:bf:8e:29:8e:d1:05:19:42:f9:
43:37:f0:0c:4a:dd:77:ad:8f:4e:8e:bc:ed:91:b1:
a5:33:e5:e0:3d:84:c6:e2:bf:06:fe:f6:7b:5a:4b:
7e:98:44:11:da:b8:63:fd:bf:af:45:3a:28:26:13:
89:49:5c:0c:08:7a:1c:ee:20:1d:7b:d3:e8:b9:6f:
b3:45:96:df:70:92:95:76:39:5c:b2:40:72:dc:3b:
98:56:fc:81:6b:cb:cc:50:d5:3f:df:6d:05:09:9b:
6c:de:a2:0f:f8:48:40:7e:fa:59:bb:6a:7c:15:f2:
d5:d6:af:c7:97:d6:42:65:62:ae:79:e7:c2:25:78:
34:da:d2:68:90:5b:78:b4:dd:1a:61:9d:3f:b4:f0:
9e:62:27:6d:ce:be:ba:e0:3f:aa:71:68:db:8e:fa:
97:a3:18:7f:4a:80:8e:e2:83:a2:25:ce:9d:a2:ab:
62:52:9d:66:3f:f1:4a:49:5f:35:61:cb:ab:a3:65:
33:db:d3:6d:3f:21:14:ae:f3:a4:ed:21:aa:40:2a:
e8:48:6f:ce:5d:56:9c:d4:b5:3e:9b:aa:b7:2b:14:
36:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D3:3E:07:51:1A:F0:D0:19:B4:96:17:5F:FA:52:BF:AB:CE:A3:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2FA36FCF6B311EFB310A6A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.136.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:dd:8a:51:75:8a:d1:2e:78:0b:5a:d5:10:92:18:83:ea:1c:
51:7e:7a:d2:6f:51:ec:77:01:f4:49:33:10:1e:b4:40:f1:7d:
6c:21:fc:f6:31:3a:dc:68:86:e6:56:ee:e9:ba:f7:34:c8:8b:
2a:36:dc:4d:a8:e2:6f:49:09:66:3d:00:8e:77:7b:9f:a7:98:
37:26:9a:ca:7c:21:fb:85:23:af:0c:97:8b:64:cd:29:89:c7:
7c:82:79:0a:ce:0f:5c:b3:61:4c:19:dc:1d:e9:6a:d3:f1:8a:
41:a3:7e:70:dc:70:cf:1b:9b:26:fd:7e:c0:fe:93:eb:ea:2e:
ca:f8:3f:8c:0a:b7:f5:f3:93:86:10:ca:52:de:c0:6b:48:c7:
c2:8e:f8:27:d8:de:03:ac:61:bc:fb:7e:5c:11:d3:ac:bd:a9:
e1:99:5a:68:4b:52:e2:87:52:0f:a4:f0:65:62:ec:9d:6d:26:
1f:42:2f:d9:9d:35:1e:c1:9f:80:15:31:8f:73:eb:30:76:15:
3d:7f:5f:e4:82:2e:40:7b:e9:f6:a3:6f:41:48:0e:5e:af:de:
9c:41:56:b1:be:32:19:67:ae:5e:94:e0:4d:f7:3c:60:83:e8:
5d:90:e4:7f:43:39:67:b4:49:4d:91:db:72:46:1d:75:8f:b3:
8c:1a:33:42
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW63MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTU0MjE3WhcNMjUwNDA1MTU0MjE3WjAYMRYw
FAYDVQQDEw02N2MzMmFkYy1iMDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA55P6Bu/0vT3wKLE7fkWQVv8yi8Aw0uARCKjiyOhaJvkRnrG/jimO0QUZ
QvlDN/AMSt13rY9OjrztkbGlM+XgPYTG4r8G/vZ7Wkt+mEQR2rhj/b+vRTooJhOJ
SVwMCHoc7iAde9PouW+zRZbfcJKVdjlcskBy3DuYVvyBa8vMUNU/320FCZts3qIP
+EhAfvpZu2p8FfLV1q/Hl9ZCZWKueefCJXg02tJokFt4tN0aYZ0/tPCeYidtzr66
4D+qcWjbjvqXoxh/SoCO4oOiJc6doqtiUp1mP/FKSV81Ycuro2Uz29NtPyEUrvOk
7SGqQCroSG/OXVac1LU+m6q3KxQ2RQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFA/T
PgdRGvDQGbSWF1/6Ur+rzqMTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMkZBMzZGQ0Y2QjMxMUVGQjMxMEE2QTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCms+IMA0GCSqGSIb3DQEB
CwUAA4IBAQB93YpRdYrRLngLWtUQkhiD6hxRfnrSb1HsdwH0STMQHrRA8X1sIfz2
MTrcaIbmVu7puvc0yIsqNtxNqOJvSQlmPQCOd3ufp5g3JprKfCH7hSOvDJeLZM0p
icd8gnkKzg9cs2FMGdwd6WrT8YpBo35w3HDPG5sm/X7A/pPr6i7K+D+MCrf185OG
EMpS3sBrSMfCjvgn2N4DrGG8+35cEdOsvanhmVpoS1Lih1IPpPBlYuydbSYfQi/Z
nTUewZ+AFTGPc+swdhU9f1/kgi5Ae+n2o29BSA5er96cQVaxvjIZZ65elOBN9zxg
g+hdkOR/QzlntElNkdtyRh11j7OMGjNC
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:45:15 2025 by rpki-client