Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2A59176F42511EFAAAFD08D762E951A.roa
File: E2A59176F42511EFAAAFD08D762E951A.roa (raw, json)
Hash identifier: URsP/Fu2JKiz96qiWGERkm1Cgfj1CIm5ilGqbB2Xves=
Subject key identifier: D7:19:0A:E2:31:74:78:B1:C1:A7:AA:14:11:81:44:07:5C:4E:62:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0161F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2A59176F42511EFAAAFD08D762E951A.roa
Signing time: Wed 26 Feb 2025 09:41:42 +0000
ROA not before: Wed 26 Feb 2025 09:41:39 +0000
ROA not after: Thu 19 Feb 2026 09:41:39 +0000
asID: 984
IP address blocks: 154.206.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90609 (0x161f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:41:39 2025 GMT
Not After : Feb 19 09:41:39 2026 GMT
Subject: CN=67bee1d6-55a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:d6:ee:f5:d7:04:2a:16:27:c2:ed:aa:ec:
b9:9f:f1:4b:c7:67:7f:33:31:bf:7b:0d:2f:97:b7:
9a:da:e6:c8:8c:f4:e9:b5:56:ec:40:7e:f8:38:bf:
39:17:b7:29:f3:9c:07:33:47:10:6f:ff:6b:19:ce:
18:25:e3:b5:07:27:fd:4b:95:89:ea:ff:ed:86:77:
a5:cf:34:03:07:e3:73:8b:71:90:1b:ee:60:ec:a6:
f8:60:14:b8:7e:bc:47:c4:c1:26:5b:8a:5d:e9:eb:
62:ec:59:7a:4a:a5:da:4d:69:8c:32:13:df:11:a6:
e2:9f:3d:31:a3:49:96:83:dd:86:63:63:b6:68:17:
9d:82:db:bc:d3:60:d7:67:c7:e8:b1:74:a5:db:2a:
16:67:90:06:9c:28:e4:a6:87:6a:d8:43:01:ce:47:
3d:25:a3:c8:8e:bc:d2:b3:4b:6d:7b:68:49:c2:d8:
59:7a:52:02:6b:b6:f0:9e:37:8c:73:0c:89:bc:91:
f7:84:13:fa:65:a2:bc:e0:e6:80:4c:52:dd:39:84:
6e:1f:10:94:13:de:6e:4c:43:e7:39:85:81:c9:03:
7d:e4:10:5e:fe:65:b6:18:f3:69:44:ad:7c:ea:92:
dc:01:43:de:27:d3:76:73:f0:be:17:a5:56:e1:34:
6e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:19:0A:E2:31:74:78:B1:C1:A7:AA:14:11:81:44:07:5C:4E:62:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2A59176F42511EFAAAFD08D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.244.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:41:58:71:b1:3a:0a:42:a9:31:3e:a4:ba:34:a2:f7:37:9e:
d4:a8:1b:ce:a7:4b:3a:c4:c7:db:d2:2a:c8:5c:7e:0b:da:19:
e6:5c:b4:0b:8a:f2:d6:af:3f:61:ca:37:66:b5:3e:64:c1:06:
a8:42:ff:d2:3e:f4:36:cc:0e:c6:f2:74:bf:04:79:18:34:16:
ca:8f:38:e4:90:3a:1b:46:4a:c0:f2:d1:f6:27:eb:4b:64:fb:
95:f9:33:fd:3f:3e:c9:bf:e5:5f:c4:29:90:01:c0:06:4d:fb:
59:38:b3:fa:2f:0c:36:87:02:e1:df:27:41:ff:69:e3:3a:78:
c8:96:3a:1c:ae:53:e1:87:bb:b6:b9:2a:48:62:93:03:31:76:
71:8f:d2:ca:81:94:a3:6b:a4:78:7f:a9:cc:3f:a8:c8:4a:79:
51:3e:0b:16:51:6f:3f:92:65:58:65:25:ce:a1:88:83:4f:f7:
3a:ef:07:19:1f:7c:ce:b6:67:44:b7:9f:db:91:05:dc:83:c4:
e6:15:c5:36:be:08:e2:fb:b6:b7:5b:b3:f4:a3:3b:a6:b6:c6:
b2:ac:81:11:cc:37:6a:df:c7:af:09:94:3b:31:66:cc:93:b1:
d4:2a:e1:88:13:f9:7f:bb:c2:7d:56:50:b3:2c:09:7d:c8:d9:
19:62:17:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWHxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDk0MTM5WhcNMjYwMjE5MDk0MTM5WjAYMRYw
FAYDVQQDEw02N2JlZTFkNi01NWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0I7W7vXXBCoWJ8Ltquy5n/FLx2d/MzG/ew0vl7ea2ubIjPTptVbsQH74
OL85F7cp85wHM0cQb/9rGc4YJeO1Byf9S5WJ6v/thnelzzQDB+Nzi3GQG+5g7Kb4
YBS4frxHxMEmW4pd6eti7Fl6SqXaTWmMMhPfEabinz0xo0mWg92GY2O2aBedgtu8
02DXZ8fosXSl2yoWZ5AGnCjkpodq2EMBzkc9JaPIjrzSs0tte2hJwthZelICa7bw
njeMcwyJvJH3hBP6ZaK84OaATFLdOYRuHxCUE95uTEPnOYWByQN95BBe/mW2GPNp
RK186pLcAUPeJ9N2c/C+F6VW4TRuywIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNcZ
CuIxdHixwaeqFBGBRAdcTmJDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMkE1OTE3NkY0MjUxMUVGQUFBRkQwOEQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms70MA0GCSqGSIb3DQEB
CwUAA4IBAQCtQVhxsToKQqkxPqS6NKL3N57UqBvOp0s6xMfb0irIXH4L2hnmXLQL
ivLWrz9hyjdmtT5kwQaoQv/SPvQ2zA7G8nS/BHkYNBbKjzjkkDobRkrA8tH2J+tL
ZPuV+TP9Pz7Jv+VfxCmQAcAGTftZOLP6Lww2hwLh3ydB/2njOnjIljocrlPhh7u2
uSpIYpMDMXZxj9LKgZSja6R4f6nMP6jISnlRPgsWUW8/kmVYZSXOoYiDT/c67wcZ
H3zOtmdEt5/bkQXcg8TmFcU2vgji+7a3W7P0ozumtsayrIERzDdq38evCZQ7MWbM
k7HUKuGIE/l/u8J9VlCzLAl9yNkZYhda
-----END CERTIFICATE-----
Generated at Fri Apr 4 01:45:17 2025 by rpki-client