Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3FD0A3CF16811EFB5F40F49762E951A.roa
File: E3FD0A3CF16811EFB5F40F49762E951A.roa (raw, json)
Hash identifier: f3S+LJLjDFpaLu0vS+m7+mqPGExxGkXG0FJfCOhIgF8=
Subject key identifier: 3E:3D:CE:DE:2D:0C:C1:EF:F4:F9:17:A7:69:44:21:7D:91:9C:89:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015AA5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3FD0A3CF16811EFB5F40F49762E951A.roa
Signing time: Sat 22 Feb 2025 22:03:48 +0000
ROA not before: Sat 22 Feb 2025 22:03:44 +0000
ROA not after: Wed 01 Oct 2025 22:03:44 +0000
asID: 36671
IP address blocks: 154.210.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88741 (0x15aa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 22 22:03:44 2025 GMT
Not After : Oct 1 22:03:44 2025 GMT
Subject: CN=67ba49c3-7f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:f0:06:92:61:d8:d4:98:06:21:9e:76:77:
56:a7:37:6f:f3:6f:33:af:01:31:63:ff:79:79:7f:
40:61:e5:22:0f:b6:de:83:c4:72:e0:a7:ee:fc:0c:
ab:07:54:3b:b5:84:55:b2:8b:d9:a6:b8:90:58:84:
3a:ef:17:fc:43:43:eb:0e:ce:fc:ff:3b:d2:2b:1a:
aa:74:44:13:84:10:23:5e:25:17:f5:a2:26:66:ac:
99:45:44:bd:cd:86:46:56:b7:f8:32:bc:48:f3:80:
e8:bc:4c:24:f1:ff:27:59:d6:3a:a4:e5:86:9c:4d:
98:8c:96:84:2f:bb:4e:6d:ad:bd:54:7b:05:6f:63:
bf:60:70:f4:06:bd:c4:43:df:bc:ac:66:b2:4f:ac:
98:93:e3:95:e6:55:af:64:1a:02:54:35:f1:ac:81:
47:65:94:58:12:df:e3:dd:6d:26:9d:32:1e:8f:04:
0d:73:11:df:62:2f:45:f8:a3:84:50:7d:c3:5a:ec:
5e:37:5c:b9:46:c0:3c:a7:01:67:a2:fd:5f:cb:f6:
38:1a:d6:9e:dd:71:43:0b:f9:b5:04:76:bb:a5:ec:
8d:2d:44:0a:50:ec:a0:82:eb:f3:25:b4:5d:a8:3e:
57:cb:92:09:b5:b1:ad:f4:50:bc:be:5b:a7:f6:e5:
d3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3D:CE:DE:2D:0C:C1:EF:F4:F9:17:A7:69:44:21:7D:91:9C:89:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3FD0A3CF16811EFB5F40F49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.0.0/24
Signature Algorithm: sha256WithRSAEncryption
26:f5:3c:e3:55:cb:5c:a0:c1:22:60:7a:85:02:27:dd:f3:21:
35:06:82:5d:95:9b:8c:2e:e8:a7:3c:33:57:b7:2a:08:d0:f9:
23:65:a1:5a:2e:a4:32:36:8e:bf:ec:f6:51:08:c2:74:19:69:
18:14:33:6c:c7:a8:8d:de:0d:e0:33:38:c1:a6:01:4e:f1:97:
2c:0f:72:2b:8b:93:b7:58:8f:dc:d8:37:ed:12:36:03:bd:9c:
be:32:18:70:83:e5:2e:af:ad:b8:00:e7:be:26:e8:61:bd:64:
a9:77:bf:c4:cd:c9:61:62:f3:2b:4e:ac:87:ff:2a:64:98:16:
77:b6:76:36:6e:cf:38:a5:9d:7e:82:8d:16:3f:81:01:ab:69:
7e:dd:1d:90:e0:57:3e:da:7e:85:58:25:7a:4f:e5:1d:8e:98:
0d:81:0d:2b:1c:0c:52:c2:76:7b:f5:f9:69:24:50:9b:56:ca:
23:00:3b:32:b0:c4:1f:a4:fa:ea:96:30:bc:7f:11:e8:ac:b4:
97:55:5a:a7:ba:47:f6:d1:43:53:0c:fe:9b:74:54:d4:4f:0c:
c4:04:db:58:e3:09:6c:d6:14:52:78:6e:80:0e:7f:4a:e8:35:
83:33:ed:bc:e8:85:8a:50:65:dc:f9:3c:f2:9d:73:f5:98:c0:
0a:d9:17:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAVqlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjIyMjIwMzQ0WhcNMjUxMDAxMjIwMzQ0WjAYMRYw
FAYDVQQDEw02N2JhNDljMy03ZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuYfwBpJh2NSYBiGedndWpzdv828zrwExY/95eX9AYeUiD7beg8Ry4Kfu
/AyrB1Q7tYRVsovZpriQWIQ67xf8Q0PrDs78/zvSKxqqdEQThBAjXiUX9aImZqyZ
RUS9zYZGVrf4MrxI84DovEwk8f8nWdY6pOWGnE2YjJaEL7tOba29VHsFb2O/YHD0
Br3EQ9+8rGayT6yYk+OV5lWvZBoCVDXxrIFHZZRYEt/j3W0mnTIejwQNcxHfYi9F
+KOEUH3DWuxeN1y5RsA8pwFnov1fy/Y4Gtae3XFDC/m1BHa7peyNLUQKUOygguvz
JbRdqD5Xy5IJtbGt9FC8vlun9uXTbQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFD49
zt4tDMHv9PkXp2lEIX2RnIkVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FM0ZEMEEzQ0YxNjgxMUVGQjVGNDBGNDk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtIAMA0GCSqGSIb3DQEB
CwUAA4IBAQAm9TzjVctcoMEiYHqFAifd8yE1BoJdlZuMLuinPDNXtyoI0PkjZaFa
LqQyNo6/7PZRCMJ0GWkYFDNsx6iN3g3gMzjBpgFO8ZcsD3Iri5O3WI/c2DftEjYD
vZy+Mhhwg+Uur624AOe+JuhhvWSpd7/EzclhYvMrTqyH/ypkmBZ3tnY2bs84pZ1+
go0WP4EBq2l+3R2Q4Fc+2n6FWCV6T+UdjpgNgQ0rHAxSwnZ79flpJFCbVsojADsy
sMQfpPrqljC8fxHorLSXVVqnukf20UNTDP6bdFTUTwzEBNtY4wls1hRSeG6ADn9K
6DWDM+286IWKUGXc+TzynXP1mMAK2ReL
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:12 2025 by rpki-client