Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4084FC16017B11F0AC57A77A762E951A.roa
File: 4084FC16017B11F0AC57A77A762E951A.roa (raw, json)
Hash identifier: o1Wr/x8rTZji7BjaGs3QHjjW3vICMrgeO/byUaq/DHg=
Subject key identifier: E9:A7:65:1D:16:C9:04:F1:3E:D2:C5:F3:07:CF:0F:80:F4:39:53:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017459
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4084FC16017B11F0AC57A77A762E951A.roa
Signing time: Sat 15 Mar 2025 08:55:32 +0000
ROA not before: Sat 15 Mar 2025 08:55:28 +0000
ROA not after: Mon 21 Apr 2025 08:55:28 +0000
asID: 272854
IP address blocks: 154.194.13.0/24 maxlen: 24
154.194.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95321 (0x17459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 15 08:55:28 2025 GMT
Not After : Apr 21 08:55:28 2025 GMT
Subject: CN=67d54084-be8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b3:45:3f:10:54:87:4e:6c:19:33:bc:af:5f:
47:b7:6e:52:a0:af:e1:ed:67:2a:2d:3e:1d:fd:8e:
ee:32:a6:a1:89:3e:84:0d:f3:94:56:e3:30:ca:30:
ef:25:6a:af:5d:ee:bd:98:50:c5:49:10:17:05:a5:
39:92:a8:1f:fe:4b:0b:2b:ea:93:10:b7:25:6d:8b:
f2:91:9a:40:6b:03:5b:f4:5e:84:8a:51:2e:e1:ec:
05:76:14:7f:c4:5e:15:f5:37:d1:5c:b4:cd:a8:d6:
97:7d:2a:9d:56:62:b3:9c:c2:88:0f:f9:b0:5e:99:
c7:04:1d:e1:87:3c:39:11:d3:de:27:15:1b:85:32:
91:8b:f4:f4:18:78:c2:2b:0b:8d:a8:8d:f1:77:db:
40:79:8c:4c:fa:a1:04:1e:25:ba:1e:73:1c:86:5a:
19:24:dd:95:6b:cc:35:b5:97:14:9d:e8:62:ab:d7:
ce:23:79:70:3d:0b:1a:ec:7b:e3:82:78:e1:1f:3e:
8f:bf:a6:a1:f2:b3:7f:9f:f3:7a:72:ef:ca:5b:fd:
42:8b:45:39:83:0a:35:b0:da:77:7f:d7:f4:f9:98:
30:8c:f5:ba:52:42:d0:62:e3:b1:6d:7e:83:a7:9d:
55:1e:fd:3c:13:a6:96:2b:76:35:3e:e4:c1:9c:65:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A7:65:1D:16:C9:04:F1:3E:D2:C5:F3:07:CF:0F:80:F4:39:53:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4084FC16017B11F0AC57A77A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.13.0-154.194.14.255
Signature Algorithm: sha256WithRSAEncryption
0f:a0:12:b9:32:49:63:b4:5f:39:0b:0f:65:2d:f2:4c:b5:19:
1f:4f:e8:96:66:ab:fc:aa:85:76:52:81:03:c8:c9:76:7b:3b:
5e:57:2c:16:e3:71:81:3e:8a:a1:7e:2d:8c:ea:67:72:19:89:
61:c2:28:ac:9d:08:76:82:2c:8d:49:1f:77:9b:f7:cb:ce:6a:
f2:c2:2b:60:17:2d:cc:72:63:bd:0b:7e:e2:8a:93:d9:e1:bd:
d0:a4:b6:64:d8:d6:e5:7b:09:50:8b:cb:eb:f0:e9:50:e1:da:
3f:97:f8:f8:46:63:d3:52:ab:4a:c7:94:66:f5:e9:e4:58:39:
71:25:6f:94:c1:d6:e0:f9:bb:e6:b3:35:39:0f:85:26:52:45:
7b:91:a8:94:55:5d:95:07:fb:9d:b8:c8:bd:1a:e4:88:42:34:
09:64:2f:6d:f8:e7:96:78:e4:7f:66:4f:c6:99:cb:0e:50:31:
bb:43:16:27:12:b3:cd:ec:7e:a9:64:7f:dc:b3:ec:7f:c0:b2:
ce:c9:32:f6:ea:5b:02:52:3d:ef:dc:25:f0:2f:c1:b6:03:b2:
d7:c8:c6:62:e7:f6:d0:06:ce:38:19:7b:30:e0:6a:5c:83:64:
f6:96:17:89:9c:9b:24:a0:f3:c0:87:d8:33:c7:f9:38:af:a8:
9a:e1:c5:70
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAXRZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzE1MDg1NTI4WhcNMjUwNDIxMDg1NTI4WjAYMRYw
FAYDVQQDEw02N2Q1NDA4NC1iZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAybNFPxBUh05sGTO8r19Ht25SoK/h7WcqLT4d/Y7uMqahiT6EDfOUVuMw
yjDvJWqvXe69mFDFSRAXBaU5kqgf/ksLK+qTELclbYvykZpAawNb9F6EilEu4ewF
dhR/xF4V9TfRXLTNqNaXfSqdVmKznMKID/mwXpnHBB3hhzw5EdPeJxUbhTKRi/T0
GHjCKwuNqI3xd9tAeYxM+qEEHiW6HnMchloZJN2Va8w1tZcUnehiq9fOI3lwPQsa
7HvjgnjhHz6Pv6ah8rN/n/N6cu/KW/1Ci0U5gwo1sNp3f9f0+ZgwjPW6UkLQYuOx
bX6Dp51VHv08E6aWK3Y1PuTBnGUQ+wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFOmn
ZR0WyQTxPtLF8wfPD4D0OVMPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MDg0RkMxNjAxN0IxMUYwQUM1N0E3N0E3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACawg0DBACawg4wDQYJ
KoZIhvcNAQELBQADggEBAA+gErkySWO0XzkLD2Ut8ky1GR9P6JZmq/yqhXZSgQPI
yXZ7O15XLBbjcYE+iqF+LYzqZ3IZiWHCKKydCHaCLI1JH3eb98vOavLCK2AXLcxy
Y70LfuKKk9nhvdCktmTY1uV7CVCLy+vw6VDh2j+X+PhGY9NSq0rHlGb16eRYOXEl
b5TB1uD5u+azNTkPhSZSRXuRqJRVXZUH+524yL0a5IhCNAlkL23455Z45H9mT8aZ
yw5QMbtDFicSs83sfqlkf9yz7H/Ass7JMvbqWwJSPe/cJfAvwbYDstfIxmLn9tAG
zjgZezDgalyDZPaWF4mcmySg88CH2DPH+TivqJrhxXA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:04 2025 by rpki-client