Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E81BF46CFCD411EFBAB8339E762E951A.roa
File: E81BF46CFCD411EFBAB8339E762E951A.roa (raw, json)
Hash identifier: E2JlkJWM+AmXE/2aGlZsmsXmGtMNx9Sl/qp/aAH0gMU=
Subject key identifier: 7A:19:CA:CB:D4:F8:B9:3F:33:CC:B0:99:1F:A8:83:2E:D8:47:CD:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017320
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E81BF46CFCD411EFBAB8339E762E951A.roa
Signing time: Sun 09 Mar 2025 10:54:43 +0000
ROA not before: Sun 09 Mar 2025 10:54:39 +0000
ROA not after: Thu 15 May 2025 10:54:39 +0000
asID: 397423
IP address blocks: 154.202.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95008 (0x17320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 9 10:54:39 2025 GMT
Not After : May 15 10:54:39 2025 GMT
Subject: CN=67cd7373-01f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:b2:70:6f:1d:cf:f1:0d:47:08:48:45:a9:
51:85:6b:1c:2d:42:f8:59:a7:4c:3d:c2:d9:ba:77:
bd:fd:7e:b7:15:c0:a1:a0:ec:9b:52:28:85:61:95:
67:e5:13:30:f6:01:7a:5c:8f:0c:dc:4a:c1:be:d6:
fd:7c:d3:89:dd:3a:4e:a2:cc:c0:10:b4:36:37:d7:
e4:7e:47:e8:89:00:c5:2c:aa:ca:13:72:4c:5b:47:
bf:d8:fa:44:0c:bd:f2:8c:db:57:28:b5:e4:d2:af:
ec:81:be:40:b1:39:1d:a2:df:75:5a:5c:bc:e7:3a:
30:d7:fd:90:dd:34:23:8c:9c:86:62:fe:6f:87:c1:
73:b1:3f:64:18:8c:21:b0:e7:89:4a:56:40:ec:d8:
ab:d7:99:6e:93:d0:6c:0f:8d:46:ed:69:70:d7:c2:
56:61:68:9d:cc:56:71:c2:35:3b:e9:9e:4d:b4:80:
11:f2:3a:8b:b2:b5:a1:2f:ac:49:f2:cc:36:90:97:
4f:2a:a2:93:13:d2:c8:f6:e2:2e:dd:01:fd:a1:3f:
a4:bc:a2:78:2b:a3:93:00:1f:73:d2:59:14:aa:f4:
47:67:0a:6e:d9:59:88:f1:75:d5:61:03:ab:2c:ec:
93:92:a3:b0:74:9c:20:3d:63:77:c0:1f:13:75:d1:
6c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:19:CA:CB:D4:F8:B9:3F:33:CC:B0:99:1F:A8:83:2E:D8:47:CD:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E81BF46CFCD411EFBAB8339E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.3.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e8:25:41:3f:38:40:61:29:e3:c0:6f:70:86:54:eb:65:80:
06:37:f5:6b:44:6b:9d:59:6a:e5:27:12:5a:67:ee:ad:bb:74:
1a:4a:9a:2e:80:1d:e4:3b:aa:d2:74:b7:fd:95:fe:fe:60:59:
ad:61:a8:7f:2a:fd:8d:74:70:dc:f8:11:16:a4:78:a5:2a:1a:
d3:07:d9:77:a3:39:03:92:0b:f7:2e:d8:44:ed:66:bf:24:98:
cb:91:6b:93:ac:03:2d:75:45:55:60:f7:f9:08:c1:a8:c6:0b:
b6:82:5c:30:0b:f2:d0:96:e8:c9:42:af:66:f0:40:53:45:79:
c1:5c:62:96:c7:c4:8c:80:4e:f4:72:55:57:26:a9:b7:d5:98:
67:0b:d7:09:85:61:f5:05:5a:b9:b0:db:77:35:f3:8d:09:99:
80:c9:2c:7e:a8:cf:72:1c:8e:4c:4a:b6:ab:7d:30:45:3c:ee:
f3:b8:b8:a0:c3:53:17:bb:30:60:6c:90:dc:dd:e7:76:7c:c9:
5c:74:8d:09:95:35:a6:78:f6:ec:ea:89:2b:39:12:44:30:8f:
3d:57:e8:6f:f4:4a:51:0e:04:7d:cd:f3:b9:be:c6:8f:ae:44:
60:df:d4:bf:d7:d0:f5:8a:7c:9e:d1:a0:a7:6d:2a:2c:0a:57:
38:dc:88:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXMgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzA5MTA1NDM5WhcNMjUwNTE1MTA1NDM5WjAYMRYw
FAYDVQQDEw02N2NkNzM3My0wMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvOKycG8dz/ENRwhIRalRhWscLUL4WadMPcLZune9/X63FcChoOybUiiF
YZVn5RMw9gF6XI8M3ErBvtb9fNOJ3TpOoszAELQ2N9fkfkfoiQDFLKrKE3JMW0e/
2PpEDL3yjNtXKLXk0q/sgb5AsTkdot91Wly85zow1/2Q3TQjjJyGYv5vh8FzsT9k
GIwhsOeJSlZA7Nir15luk9BsD41G7Wlw18JWYWidzFZxwjU76Z5NtIAR8jqLsrWh
L6xJ8sw2kJdPKqKTE9LI9uIu3QH9oT+kvKJ4K6OTAB9z0lkUqvRHZwpu2VmI8XXV
YQOrLOyTkqOwdJwgPWN3wB8TddFsNQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHoZ
ysvU+Lk/M8ywmR+ogy7YR81iMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FODFCRjQ2Q0ZDRDQxMUVGQkFCODMzOUU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsoDMA0GCSqGSIb3DQEB
CwUAA4IBAQBV6CVBPzhAYSnjwG9whlTrZYAGN/VrRGudWWrlJxJaZ+6tu3QaSpou
gB3kO6rSdLf9lf7+YFmtYah/Kv2NdHDc+BEWpHilKhrTB9l3ozkDkgv3LthE7Wa/
JJjLkWuTrAMtdUVVYPf5CMGoxgu2glwwC/LQlujJQq9m8EBTRXnBXGKWx8SMgE70
clVXJqm31ZhnC9cJhWH1BVq5sNt3NfONCZmAySx+qM9yHI5MSrarfTBFPO7zuLig
w1MXuzBgbJDc3ed2fMlcdI0JlTWmePbs6okrORJEMI89V+hv9EpRDgR9zfO5vsaP
rkRg39S/19D1inye0aCnbSosClc43IiB
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:43:38 2025 by rpki-client