Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3F744C6F2C611EFAC3F8BAF762E951A.roa
File: E3F744C6F2C611EFAC3F8BAF762E951A.roa (raw, json)
Hash identifier: 5p9bCTPyDRUvvgUNEQKfpNlScZEx3pADqqC6Y0q4eDw=
Subject key identifier: 47:81:EE:8F:AD:53:95:A2:CF:84:39:B2:AB:D0:93:8A:6F:B8:1E:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3F744C6F2C611EFAC3F8BAF762E951A.roa
Signing time: Mon 24 Feb 2025 15:49:11 +0000
ROA not before: Mon 24 Feb 2025 15:49:08 +0000
ROA not after: Sat 29 Mar 2025 15:49:08 +0000
asID: 203020
IP address blocks: 154.223.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89162 (0x15c4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 15:49:08 2025 GMT
Not After : Mar 29 15:49:08 2025 GMT
Subject: CN=67bc94f7-6fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:3e:be:4e:33:70:5d:66:55:6b:a4:76:11:
2f:3c:f9:10:6b:3e:ac:57:b5:8b:c6:01:d7:f7:e2:
53:02:8e:56:84:8f:8c:7a:4b:3a:10:d2:b2:47:2c:
38:2d:b8:61:99:7d:56:36:8e:d8:84:d1:fe:e3:f2:
f7:eb:04:79:1f:34:95:39:05:0b:24:90:30:58:1c:
56:7c:af:38:b7:88:b6:a4:67:5a:8c:0a:52:88:30:
86:f5:d1:4c:f6:22:e6:78:81:15:ed:09:ab:fb:a9:
36:b0:13:ec:5c:52:3b:87:a8:06:1e:52:b4:73:a7:
2f:17:84:aa:c2:51:fb:5f:0a:ef:c3:a0:ab:95:11:
3b:50:06:13:10:7b:01:f5:5f:c3:7b:1c:de:5a:59:
59:fc:d1:44:7b:69:8f:f9:6c:ba:48:25:09:29:c3:
a6:80:d0:6f:2c:62:3c:9c:9c:a7:a8:55:fb:ba:82:
06:74:ea:8e:42:49:d9:6d:6a:68:1e:61:14:64:75:
35:36:7b:48:cc:51:97:62:c6:90:7b:91:b2:62:e9:
88:67:57:2c:e0:16:b7:ca:c0:b1:0b:d0:ed:13:33:
89:ee:64:b5:8d:56:50:ce:1e:40:53:30:46:fa:9a:
9e:3f:9c:fd:9b:20:f4:3b:fb:13:89:98:ea:13:77:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:81:EE:8F:AD:53:95:A2:CF:84:39:B2:AB:D0:93:8A:6F:B8:1E:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3F744C6F2C611EFAC3F8BAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.144.0/20
Signature Algorithm: sha256WithRSAEncryption
8b:06:fa:59:e0:83:a7:84:d7:ac:76:8a:a9:41:5d:f6:46:3f:
d3:ed:2e:92:d2:9d:4d:cb:a0:2d:b5:e4:cb:3a:9f:72:66:58:
89:a9:e5:8d:0f:fc:b5:b6:57:d6:05:a2:3f:f3:7d:97:2c:b9:
47:49:f5:c2:90:f9:4b:3a:d7:db:24:58:3c:1a:59:b4:90:23:
04:1e:c8:e1:16:b1:1c:d4:10:61:7c:e9:bc:8e:f9:18:3d:52:
f6:42:86:a1:f4:40:d1:80:d2:86:59:81:3e:d4:39:52:0b:38:
b4:f6:84:03:a7:14:57:27:68:df:da:77:69:65:2b:46:0e:11:
35:25:4b:c1:50:33:64:b2:5d:f4:d9:db:78:3f:e6:af:d2:af:
e1:8a:a2:ac:90:1a:2e:0e:1f:2c:82:c7:62:4c:27:a5:a1:d9:
94:08:12:b6:27:ca:2c:3d:95:c7:67:5c:1e:af:2f:62:e9:f3:
a6:dd:9d:b1:d2:a7:7a:88:b0:67:93:8a:56:3a:af:92:ff:04:
42:fc:e9:f9:a7:27:29:73:06:76:8e:57:e0:d4:d0:95:14:ec:
2d:f1:a4:b7:d6:34:53:dc:fd:d4:f1:c2:4c:73:53:7b:32:ed:
69:4e:a1:44:04:40:ae:ed:f2:83:77:e9:56:b4:44:da:de:05:
de:31:8c:73
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVxKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI0MTU0OTA4WhcNMjUwMzI5MTU0OTA4WjAYMRYw
FAYDVQQDEw02N2JjOTRmNy02ZmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvbI+vk4zcF1mVWukdhEvPPkQaz6sV7WLxgHX9+JTAo5WhI+Meks6ENKy
Ryw4LbhhmX1WNo7YhNH+4/L36wR5HzSVOQULJJAwWBxWfK84t4i2pGdajApSiDCG
9dFM9iLmeIEV7Qmr+6k2sBPsXFI7h6gGHlK0c6cvF4SqwlH7Xwrvw6CrlRE7UAYT
EHsB9V/DexzeWllZ/NFEe2mP+Wy6SCUJKcOmgNBvLGI8nJynqFX7uoIGdOqOQknZ
bWpoHmEUZHU1NntIzFGXYsaQe5GyYumIZ1cs4Ba3ysCxC9DtEzOJ7mS1jVZQzh5A
UzBG+pqeP5z9myD0O/sTiZjqE3dkOQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEeB
7o+tU5Wiz4Q5sqvQk4pvuB7dMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FM0Y3NDRDNkYyQzYxMUVGQUMzRjhCQUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmt+QMA0GCSqGSIb3DQEB
CwUAA4IBAQCLBvpZ4IOnhNesdoqpQV32Rj/T7S6S0p1Ny6AtteTLOp9yZliJqeWN
D/y1tlfWBaI/832XLLlHSfXCkPlLOtfbJFg8Glm0kCMEHsjhFrEc1BBhfOm8jvkY
PVL2Qoah9EDRgNKGWYE+1DlSCzi09oQDpxRXJ2jf2ndpZStGDhE1JUvBUDNksl30
2dt4P+av0q/hiqKskBouDh8sgsdiTCelodmUCBK2J8osPZXHZ1wery9i6fOm3Z2x
0qd6iLBnk4pWOq+S/wRC/On5pycpcwZ2jlfg1NCVFOwt8aS31jRT3P3U8cJMc1N7
Mu1pTqFEBECu7fKDd+lWtETa3gXeMYxz
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:02:43 2025 by rpki-client