Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECA23B90FCCA11EF8E195A5D762E951A.roa
File: ECA23B90FCCA11EF8E195A5D762E951A.roa (raw, json)
Hash identifier: joe3tfHLK6mSQtCnxTWoCUgF6eFSUxA76Wh1fcofU70=
Subject key identifier: 2B:72:F1:53:1F:F1:8A:9A:C9:8F:CB:7B:BE:65:E1:66:55:F3:1A:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017308
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECA23B90FCCA11EF8E195A5D762E951A.roa
Signing time: Sun 09 Mar 2025 09:43:16 +0000
ROA not before: Sun 09 Mar 2025 09:43:12 +0000
ROA not after: Tue 08 Apr 2025 09:43:12 +0000
asID: 45194
IP address blocks: 154.84.192.0/24 maxlen: 24
154.84.193.0/24 maxlen: 24
154.84.194.0/24 maxlen: 24
154.84.195.0/24 maxlen: 24
154.84.196.0/24 maxlen: 24
154.84.197.0/24 maxlen: 24
154.84.198.0/24 maxlen: 24
154.84.199.0/24 maxlen: 24
154.84.200.0/24 maxlen: 24
154.84.201.0/24 maxlen: 24
154.84.202.0/24 maxlen: 24
154.84.203.0/24 maxlen: 24
154.84.204.0/24 maxlen: 24
154.84.205.0/24 maxlen: 24
154.84.206.0/24 maxlen: 24
154.84.208.0/24 maxlen: 24
154.84.211.0/24 maxlen: 24
154.84.242.0/24 maxlen: 24
154.84.247.0/24 maxlen: 24
154.84.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94984 (0x17308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 9 09:43:12 2025 GMT
Not After : Apr 8 09:43:12 2025 GMT
Subject: CN=67cd62b3-8986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:37:8f:17:8b:8a:c9:27:12:fd:fd:76:4c:18:
d3:90:35:54:4a:0e:7e:a3:b0:7c:db:99:47:08:f7:
0d:75:3d:8c:b5:02:de:6f:ac:3c:62:b7:74:cf:36:
ac:d9:bd:a8:b7:50:4c:be:45:2f:59:81:29:1b:18:
28:2c:7b:91:f3:4a:da:d9:1b:e5:ed:bf:4e:34:8a:
40:68:42:82:5d:d7:d8:a8:ba:94:88:77:5d:8b:fa:
6e:a9:e9:9b:17:3c:f7:79:18:bf:52:de:e9:4e:46:
6b:2e:f1:70:af:cd:06:d5:05:22:13:a8:d5:3a:4e:
16:28:57:29:e6:af:9e:44:f1:c9:69:5c:34:24:a6:
c3:c4:37:85:49:be:82:5a:82:c0:9a:3c:63:e4:70:
78:a6:40:a0:30:4d:1f:8a:07:25:2e:c0:71:ae:1a:
a7:1a:a3:bd:0e:f9:27:07:70:5b:57:d8:f6:95:f8:
0f:50:de:00:b3:80:80:73:e4:cf:1a:c8:be:4c:1a:
91:dc:d5:f5:f6:55:db:b0:3d:4e:ad:42:45:3d:59:
2b:3b:0c:c4:b2:3a:df:91:ee:23:2f:c0:f9:89:92:
df:8c:00:9d:e4:e2:b5:75:95:c2:b1:75:ea:84:3d:
fa:d5:64:1c:51:63:d6:6e:7c:42:48:7a:52:80:84:
6e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:72:F1:53:1F:F1:8A:9A:C9:8F:CB:7B:BE:65:E1:66:55:F3:1A:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECA23B90FCCA11EF8E195A5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.192.0-154.84.206.255
154.84.208.0/24
154.84.211.0/24
154.84.242.0/24
154.84.247.0-154.84.248.255
Signature Algorithm: sha256WithRSAEncryption
9c:52:f9:cc:94:96:4b:7f:c2:8d:a8:eb:2b:cd:da:3b:9a:f5:
cd:d5:73:29:19:92:77:19:a4:03:a0:dd:bc:6e:62:f5:0f:db:
f0:d5:57:f0:0e:1c:a1:be:46:eb:9d:33:ef:15:90:f1:01:6e:
7e:cb:76:fe:14:fe:29:2f:6e:e8:4e:67:d2:fd:72:17:64:f9:
87:db:40:97:25:80:01:6a:a1:f0:79:67:c6:25:50:e4:bb:0a:
9c:50:78:6a:a7:e7:f1:5b:dc:82:93:48:9f:e7:70:49:bd:a6:
59:01:f0:19:00:c5:e0:22:fd:d8:cf:c0:38:d7:10:42:55:54:
7f:61:de:f4:91:9b:63:da:16:4f:36:4e:09:9e:0a:54:90:cd:
ce:7e:7f:10:33:44:1b:ab:15:05:e6:43:d9:94:d9:f7:1d:72:
ac:0e:da:64:82:1b:e2:70:09:fc:d7:90:ef:e0:9d:c2:9b:ca:
97:f9:96:7b:00:e7:da:79:c8:bd:4f:20:38:d9:78:1c:88:d6:
a6:06:0e:4a:57:61:4b:99:c2:57:e8:ae:f8:94:21:39:74:bd:
35:01:e9:37:a5:13:a9:84:bb:43:09:9a:54:36:0f:32:11:d9:
96:18:2b:c7:92:af:27:8a:e3:f0:ba:08:2f:d1:11:15:05:2b:
a7:6d:5a:38
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIDAXMIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzA5MDk0MzEyWhcNMjUwNDA4MDk0MzEyWjAYMRYw
FAYDVQQDEw02N2NkNjJiMy04OTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8zePF4uKyScS/f12TBjTkDVUSg5+o7B825lHCPcNdT2MtQLeb6w8Yrd0
zzas2b2ot1BMvkUvWYEpGxgoLHuR80ra2Rvl7b9ONIpAaEKCXdfYqLqUiHddi/pu
qembFzz3eRi/Ut7pTkZrLvFwr80G1QUiE6jVOk4WKFcp5q+eRPHJaVw0JKbDxDeF
Sb6CWoLAmjxj5HB4pkCgME0figclLsBxrhqnGqO9DvknB3BbV9j2lfgPUN4As4CA
c+TPGsi+TBqR3NX19lXbsD1OrUJFPVkrOwzEsjrfke4jL8D5iZLfjACd5OK1dZXC
sXXqhD361WQcUWPWbnxCSHpSgIRuGQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFCty
8VMf8YqayY/Le75l4WZV8xo4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQ0EyM0I5MEZDQ0ExMUVGOEUxOTVBNUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBAaaVMADBACaVM4DBACa
VNADBACaVNMDBACaVPIwDAMEAJpU9wMEAJpU+DANBgkqhkiG9w0BAQsFAAOCAQEA
nFL5zJSWS3/CjajrK83aO5r1zdVzKRmSdxmkA6DdvG5i9Q/b8NVX8A4cob5G650z
7xWQ8QFufst2/hT+KS9u6E5n0v1yF2T5h9tAlyWAAWqh8HlnxiVQ5LsKnFB4aqfn
8VvcgpNIn+dwSb2mWQHwGQDF4CL92M/AONcQQlVUf2He9JGbY9oWTzZOCZ4KVJDN
zn5/EDNEG6sVBeZD2ZTZ9x1yrA7aZIIb4nAJ/NeQ7+CdwpvKl/mWewDn2nnIvU8g
ONl4HIjWpgYOSldhS5nCV+iu+JQhOXS9NQHpN6UTqYS7QwmaVDYPMhHZlhgrx5Kv
J4rj8LoIL9ERFQUrp21aOA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:06 2025 by rpki-client