Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECD0CEE0F3F311EF8145F6B7762E951A.roa
File: ECD0CEE0F3F311EF8145F6B7762E951A.roa (raw, json)
Hash identifier: GE9n2K05kQJpdSp21CoII72yU4FmjoL210JIE/8jtCM=
Subject key identifier: 13:2C:CC:B0:E9:28:51:DA:79:EF:A7:25:26:C4:F6:3C:34:81:CD:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECD0CEE0F3F311EF8145F6B7762E951A.roa
Signing time: Wed 26 Feb 2025 03:44:05 +0000
ROA not before: Wed 26 Feb 2025 03:44:01 +0000
ROA not after: Thu 19 Feb 2026 03:44:01 +0000
asID: 984
IP address blocks: 154.203.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90291 (0x160b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 03:44:01 2025 GMT
Not After : Feb 19 03:44:01 2026 GMT
Subject: CN=67be8e05-c2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:2a:bf:68:57:89:49:40:c7:ea:73:26:60:
0a:b9:eb:4b:39:3e:b5:86:1d:8f:a5:c5:3a:89:02:
da:39:aa:bc:8c:cf:6e:15:cb:5a:f9:e4:e9:e5:bf:
10:69:bd:28:f3:a0:38:dc:a9:b7:20:64:e8:5a:cf:
4b:51:3b:33:dd:ba:26:9d:63:91:d2:70:0f:5c:44:
66:0a:28:4f:4f:1c:bc:f2:b8:46:90:ca:66:ec:d5:
da:c0:b8:2b:23:99:a2:2a:f6:0c:4f:2d:f0:3c:d6:
67:dd:8e:4e:29:8d:51:eb:e9:a8:98:e4:cd:10:b2:
a0:b9:75:ca:49:e1:3b:91:b3:a6:4c:c7:d7:9f:ef:
df:04:65:ae:ea:69:d8:93:7d:bd:83:5a:2e:0a:6c:
7d:62:e8:59:37:bb:f6:f7:1b:c2:86:ef:f8:50:14:
32:73:2e:43:fb:f9:f7:41:3d:a4:93:a2:7d:38:d3:
a6:59:64:af:5b:24:27:32:e8:48:44:1c:24:ec:b4:
7a:0a:0b:c0:fd:92:de:18:4c:2f:67:c2:30:38:92:
73:01:99:7d:4d:3d:e3:87:99:51:ad:30:dc:94:49:
cd:f2:44:9b:5f:a6:67:65:b1:ac:e5:af:3f:7d:e1:
94:49:c8:a9:2d:e4:6c:87:b7:f4:48:5c:d7:b6:33:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2C:CC:B0:E9:28:51:DA:79:EF:A7:25:26:C4:F6:3C:34:81:CD:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECD0CEE0F3F311EF8145F6B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.113.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:96:18:c2:72:1f:1d:a5:c2:c3:af:18:2f:6d:54:82:53:59:
9c:29:12:26:7b:bb:96:2b:db:f6:7d:e8:72:80:57:af:2a:50:
4c:f0:1b:55:a5:bf:5a:0a:06:8f:53:6d:fa:5c:49:5a:d4:76:
73:da:41:c9:db:c0:35:27:f6:c6:3c:fe:9d:46:b1:c2:45:32:
7f:51:52:84:c2:5b:5b:3c:cb:87:32:b8:ab:9e:4c:74:91:80:
aa:65:b9:d0:79:04:64:66:7c:fe:9a:05:0c:25:d6:b8:ab:9c:
b2:f3:bc:60:d9:23:38:d3:08:63:cc:71:bd:c8:0d:cd:01:f4:
f9:aa:98:e7:2f:65:7b:09:b5:df:e1:cc:ab:15:a7:b5:9c:80:
cc:59:12:c1:79:3a:e3:38:6b:14:f2:9c:04:29:d5:a4:cc:28:
82:0d:bc:70:49:71:16:36:3f:2a:07:e9:67:c4:1b:9c:a5:e4:
ec:34:08:39:e7:f6:9e:d8:99:20:6c:f1:61:a8:91:3b:a2:97:
28:a5:73:b4:db:a5:94:22:da:07:e7:d0:40:33:d1:23:cc:03:
f2:92:a6:4b:20:a7:5c:ab:df:01:c9:ee:bc:91:99:e5:cf:b4:
13:68:54:77:61:4a:15:01:1f:25:a9:a7:d5:b5:f9:23:7f:57:
2f:e6:6a:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWCzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDM0NDAxWhcNMjYwMjE5MDM0NDAxWjAYMRYw
FAYDVQQDEw02N2JlOGUwNS1jMmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtvwqv2hXiUlAx+pzJmAKuetLOT61hh2PpcU6iQLaOaq8jM9uFcta+eTp
5b8Qab0o86A43Km3IGToWs9LUTsz3bomnWOR0nAPXERmCihPTxy88rhGkMpm7NXa
wLgrI5miKvYMTy3wPNZn3Y5OKY1R6+momOTNELKguXXKSeE7kbOmTMfXn+/fBGWu
6mnYk329g1ouCmx9YuhZN7v29xvChu/4UBQycy5D+/n3QT2kk6J9ONOmWWSvWyQn
MuhIRBwk7LR6CgvA/ZLeGEwvZ8IwOJJzAZl9TT3jh5lRrTDclEnN8kSbX6ZnZbGs
5a8/feGUScipLeRsh7f0SFzXtjPtOwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBMs
zLDpKFHaee+nJSbE9jw0gc3GMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQ0QwQ0VFMEYzRjMxMUVGODE0NUY2Qjc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmstxMA0GCSqGSIb3DQEB
CwUAA4IBAQB/lhjCch8dpcLDrxgvbVSCU1mcKRIme7uWK9v2fehygFevKlBM8BtV
pb9aCgaPU236XEla1HZz2kHJ28A1J/bGPP6dRrHCRTJ/UVKEwltbPMuHMrirnkx0
kYCqZbnQeQRkZnz+mgUMJda4q5yy87xg2SM40whjzHG9yA3NAfT5qpjnL2V7CbXf
4cyrFae1nIDMWRLBeTrjOGsU8pwEKdWkzCiCDbxwSXEWNj8qB+lnxBucpeTsNAg5
5/ae2JkgbPFhqJE7opcopXO026WUItoH59BAM9EjzAPykqZLIKdcq98Bye68kZnl
z7QTaFR3YUoVAR8lqafVtfkjf1cv5mo3
-----END CERTIFICATE-----
Generated at Tue Apr 8 02:55:13 2025 by rpki-client