Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECAD62B6FB3711EF8F991EBE762E951A.roa
File: ECAD62B6FB3711EF8F991EBE762E951A.roa (raw, json)
Hash identifier: T4qtRp8nAxvOJSrWAq0KL/pMXmH4NgqrQFwSpHZfo3U=
Subject key identifier: 79:54:D4:B3:5A:0F:45:3B:35:5F:0F:6B:CF:5A:F5:C0:62:C7:53:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0172ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECAD62B6FB3711EF8F991EBE762E951A.roa
Signing time: Fri 07 Mar 2025 09:38:28 +0000
ROA not before: Fri 07 Mar 2025 09:38:25 +0000
ROA not after: Tue 08 Jul 2025 09:38:25 +0000
asID: 400619
IP address blocks: 154.204.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94957 (0x172ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 7 09:38:25 2025 GMT
Not After : Jul 8 09:38:25 2025 GMT
Subject: CN=67cabe94-b322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:39:69:73:b9:3b:39:86:ad:9a:23:93:82:2b:
f2:83:d9:11:93:38:3f:01:d2:77:0d:5d:41:7b:01:
65:bb:36:3d:90:35:4a:d0:19:cf:ec:5b:14:b6:7f:
fe:a9:cc:b0:0e:36:8f:2a:3d:c1:7b:75:70:1c:c9:
64:97:2e:9b:41:50:59:da:40:ec:b8:aa:39:ec:47:
5b:53:2e:ef:24:cf:da:94:5c:54:85:eb:a9:d3:15:
5c:cd:3c:ff:5e:a2:c6:8d:a0:4d:a6:55:57:11:a5:
07:9c:31:a7:ee:e0:a5:ed:b7:95:85:06:1b:9a:1b:
12:2d:dc:87:6e:51:c9:2e:88:b7:48:fb:57:14:93:
4f:a4:1c:42:55:f0:e1:80:93:fa:ab:6b:7e:12:6e:
d0:f6:4b:c8:49:bd:a1:34:12:e6:17:c9:69:a8:6f:
2d:f2:53:fd:ce:03:85:e6:66:aa:d2:0f:aa:59:44:
d9:95:5c:3b:25:95:e9:22:7f:01:5b:f4:40:c1:41:
dd:69:76:85:72:c5:4e:9e:de:38:d9:50:71:42:f4:
d1:b5:3c:7e:6c:95:7e:de:91:45:c4:9c:20:3b:51:
a2:37:1b:87:78:03:d8:c0:d3:ad:83:c4:c0:03:88:
01:63:fe:ce:2a:d0:ba:bd:14:bd:8c:d3:56:fb:f5:
0f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:54:D4:B3:5A:0F:45:3B:35:5F:0F:6B:CF:5A:F5:C0:62:C7:53:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECAD62B6FB3711EF8F991EBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.128.0/18
Signature Algorithm: sha256WithRSAEncryption
c0:8f:3c:ef:f2:f9:f4:59:51:69:d4:5e:df:e7:9d:a2:47:08:
62:fe:59:3e:18:6e:cb:d7:9e:1c:39:34:69:b4:d1:bb:59:c4:
a0:c3:41:1d:9f:e8:a6:ab:4f:33:81:89:15:d4:af:7e:a8:dd:
78:c1:5f:fb:88:65:f3:49:ba:04:e8:f0:04:97:9b:de:90:e5:
ca:ec:94:38:a2:67:f7:2f:68:2e:41:47:aa:96:5e:ec:a5:a2:
24:aa:4b:c5:13:69:15:07:31:30:a0:ee:a6:1f:78:53:06:19:
10:bb:90:3d:91:10:f7:ec:9c:f0:3f:a9:c0:49:d8:bc:65:d6:
76:65:e6:cc:ef:61:bc:5a:d9:53:27:67:bc:b4:d6:a7:a8:72:
09:db:ac:2d:1b:ce:82:e9:65:3c:ae:c8:0e:e6:7a:0e:2e:89:
da:43:9d:90:1a:8c:e4:dc:1d:4f:7d:1a:db:ad:96:4c:51:cd:
54:0b:b5:d3:68:13:c2:e5:1b:37:33:12:1f:06:08:32:ac:af:
f3:bc:58:96:f2:a5:44:d0:a1:38:17:a3:a7:99:06:a4:27:8f:
90:5f:14:40:c9:5b:72:e8:80:13:ad:12:2d:13:b5:2b:d5:93:
0a:69:3d:2d:eb:fa:7c:fc:a2:3d:81:2a:0b:72:9e:66:33:66:
3e:9f:b1:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXLtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzA3MDkzODI1WhcNMjUwNzA4MDkzODI1WjAYMRYw
FAYDVQQDEw02N2NhYmU5NC1iMzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6zlpc7k7OYatmiOTgivyg9kRkzg/AdJ3DV1BewFluzY9kDVK0BnP7FsU
tn/+qcywDjaPKj3Be3VwHMlkly6bQVBZ2kDsuKo57EdbUy7vJM/alFxUheup0xVc
zTz/XqLGjaBNplVXEaUHnDGn7uCl7beVhQYbmhsSLdyHblHJLoi3SPtXFJNPpBxC
VfDhgJP6q2t+Em7Q9kvISb2hNBLmF8lpqG8t8lP9zgOF5maq0g+qWUTZlVw7JZXp
In8BW/RAwUHdaXaFcsVOnt442VBxQvTRtTx+bJV+3pFFxJwgO1GiNxuHeAPYwNOt
g8TAA4gBY/7OKtC6vRS9jNNW+/UPQQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHlU
1LNaD0U7NV8Pa89a9cBix1M5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQ0FENjJCNkZCMzcxMUVGOEY5OTFFQkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmsyAMA0GCSqGSIb3DQEB
CwUAA4IBAQDAjzzv8vn0WVFp1F7f552iRwhi/lk+GG7L154cOTRptNG7WcSgw0Ed
n+imq08zgYkV1K9+qN14wV/7iGXzSboE6PAEl5vekOXK7JQ4omf3L2guQUeqll7s
paIkqkvFE2kVBzEwoO6mH3hTBhkQu5A9kRD37JzwP6nASdi8ZdZ2ZebM72G8WtlT
J2e8tNanqHIJ26wtG86C6WU8rsgO5noOLonaQ52QGozk3B1PfRrbrZZMUc1UC7XT
aBPC5Rs3MxIfBggyrK/zvFiW8qVE0KE4F6OnmQakJ4+QXxRAyVty6IATrRItE7Ur
1ZMKaT0t6/p8/KI9gSoLcp5mM2Y+n7GX
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:31 2025 by rpki-client