Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2050F48AF68C11EFA813EC98762E951A.roa
File: 2050F48AF68C11EFA813EC98762E951A.roa (raw, json)
Hash identifier: MdZiY7kJYNX1KxQZmrP6oBViPQW75NmWr5J/D2+Q1dM=
Subject key identifier: 2E:21:72:CF:B7:D8:B5:B3:F8:6E:8F:A3:FF:BF:66:BB:98:B2:DC:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016DED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2050F48AF68C11EFA813EC98762E951A.roa
Signing time: Sat 01 Mar 2025 10:58:37 +0000
ROA not before: Sat 01 Mar 2025 10:58:33 +0000
ROA not after: Sat 05 Apr 2025 10:58:33 +0000
asID: 203020
IP address blocks: 154.204.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93677 (0x16ded)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 10:58:33 2025 GMT
Not After : Apr 5 10:58:33 2025 GMT
Subject: CN=67c2e85d-e1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:14:f6:1e:aa:ce:3e:f3:45:7f:8a:b9:81:
d9:6a:2c:c8:1b:62:16:50:90:ae:fa:37:f2:3c:6b:
ab:49:28:52:68:2a:4a:af:42:14:b1:06:d1:99:4d:
b4:21:a9:e9:e2:62:de:a4:49:e1:14:6c:2e:24:15:
1b:30:34:bc:dc:bd:d5:8b:30:01:39:8b:14:4e:75:
32:4e:2d:3c:b1:0f:7f:66:48:56:90:d2:9d:e6:f1:
ee:18:11:2b:f2:16:ad:a9:cd:2b:bc:7d:f1:ab:65:
5d:38:cf:ae:39:84:5d:be:ff:73:05:fc:22:b1:ed:
4a:f1:e2:f8:c8:3f:03:99:4a:fe:65:ce:5a:e5:9b:
72:af:92:c2:c1:90:83:54:c5:34:8e:41:22:ee:8c:
d3:d7:ab:ea:25:0d:d1:e1:f6:ff:c7:9a:a7:d3:a4:
cc:dc:64:ca:d3:44:5b:36:d6:c8:a5:e2:20:25:d2:
ee:1b:cf:18:e7:ca:be:60:56:be:26:1c:34:3d:dc:
f8:a2:eb:26:d0:58:64:30:6d:3c:49:6b:70:c0:8e:
c0:6e:7d:11:ba:b8:9c:a3:b1:09:3e:1b:17:1f:2b:
eb:d1:05:5e:2b:23:80:29:7f:11:fd:3b:51:85:e3:
54:c3:d4:04:9e:62:5a:72:ad:f3:a8:ac:76:e1:07:
4a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:21:72:CF:B7:D8:B5:B3:F8:6E:8F:A3:FF:BF:66:BB:98:B2:DC:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2050F48AF68C11EFA813EC98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.42.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:bc:7c:9f:9f:25:5b:2f:f6:d5:f7:7d:ae:78:bf:73:74:31:
04:5a:a5:5f:ca:3f:9f:49:d1:bd:51:b9:3e:44:af:a3:92:f2:
96:be:0c:6b:67:0e:3e:91:c8:9d:53:e8:23:48:fc:1c:c6:d6:
a1:1a:e1:ea:48:2c:ff:50:ee:58:52:cc:db:de:57:b8:09:f5:
cb:d5:5e:77:0b:31:e1:db:ef:79:12:59:22:3c:d0:2c:aa:66:
8a:0c:f0:1d:5e:0e:7a:cb:84:5b:cf:d0:1d:df:4a:12:42:65:
bb:04:69:86:58:de:0a:fa:1f:14:51:af:99:d3:00:94:70:22:
c9:45:98:f9:8d:e2:fb:5e:74:97:4d:a2:cd:8a:15:76:07:0d:
c6:3d:de:c0:89:4e:62:90:6d:35:31:10:8e:45:b8:93:80:63:
7e:f4:eb:e4:b4:7c:e3:20:94:77:a7:7f:c9:be:6a:3e:e2:c4:
68:8c:9d:1b:4c:36:af:d3:af:4a:06:2d:b0:f8:3a:54:6d:3e:
cf:19:70:14:2d:0a:7d:b1:42:bd:6c:74:d7:5f:f2:3b:95:fd:
2b:bd:45:bd:a1:73:3f:17:d5:bf:16:c6:52:a8:77:8c:1e:c0:
e1:72:13:b9:8d:98:1b:f0:d5:c0:e5:e7:33:67:c3:e2:04:4c:
30:db:09:6b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW3tMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTA1ODMzWhcNMjUwNDA1MTA1ODMzWjAYMRYw
FAYDVQQDEw02N2MyZTg1ZC1lMWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1iwU9h6qzj7zRX+KuYHZaizIG2IWUJCu+jfyPGurSShSaCpKr0IUsQbR
mU20Ianp4mLepEnhFGwuJBUbMDS83L3VizABOYsUTnUyTi08sQ9/ZkhWkNKd5vHu
GBEr8hatqc0rvH3xq2VdOM+uOYRdvv9zBfwise1K8eL4yD8DmUr+Zc5a5Ztyr5LC
wZCDVMU0jkEi7ozT16vqJQ3R4fb/x5qn06TM3GTK00RbNtbIpeIgJdLuG88Y58q+
YFa+Jhw0Pdz4ousm0FhkMG08SWtwwI7Abn0Rurico7EJPhsXHyvr0QVeKyOAKX8R
/TtRheNUw9QEnmJacq3zqKx24QdKBQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFC4h
cs+32LWz+G6Po/+/ZruYstz5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMDUwRjQ4QUY2OEMxMUVGQTgxM0VDOTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmswqMA0GCSqGSIb3DQEB
CwUAA4IBAQC1vHyfnyVbL/bV932ueL9zdDEEWqVfyj+fSdG9Ubk+RK+jkvKWvgxr
Zw4+kcidU+gjSPwcxtahGuHqSCz/UO5YUszb3le4CfXL1V53CzHh2+95ElkiPNAs
qmaKDPAdXg56y4Rbz9Ad30oSQmW7BGmGWN4K+h8UUa+Z0wCUcCLJRZj5jeL7XnSX
TaLNihV2Bw3GPd7AiU5ikG01MRCORbiTgGN+9OvktHzjIJR3p3/Jvmo+4sRojJ0b
TDav069KBi2w+DpUbT7PGXAULQp9sUK9bHTXX/I7lf0rvUW9oXM/F9W/FsZSqHeM
HsDhchO5jZgb8NXA5eczZ8PiBEww2wlr
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:36 2025 by rpki-client