Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50E211ECF43E11EF845574B8762E951A.roa
File: 50E211ECF43E11EF845574B8762E951A.roa (raw, json)
Hash identifier: QjwvuF0J/CUpw8TuvQ1lvPtapPwd7YyumQSkDmjmXFc=
Subject key identifier: CB:98:CF:FF:A5:B7:17:D1:FC:92:A6:8A:CC:A6:B7:D5:9F:35:C5:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016331
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50E211ECF43E11EF845574B8762E951A.roa
Signing time: Wed 26 Feb 2025 12:36:35 +0000
ROA not before: Wed 26 Feb 2025 12:36:32 +0000
ROA not after: Thu 19 Feb 2026 12:36:32 +0000
asID: 984
IP address blocks: 154.208.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90929 (0x16331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:36:32 2025 GMT
Not After : Feb 19 12:36:32 2026 GMT
Subject: CN=67bf0ad3-6bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:81:5b:46:12:99:1e:cb:0b:3e:b5:5f:fa:
b0:24:9f:3a:25:e0:f2:ac:36:d5:31:ae:68:55:9f:
61:64:37:41:1b:72:e0:a8:e9:f8:df:1f:84:e8:eb:
f5:92:63:74:e1:cb:3b:c5:fc:71:e2:30:bd:54:9a:
07:ef:f6:29:9e:5d:b8:0f:2a:37:a2:1c:69:14:64:
65:59:e2:7f:41:64:79:22:a2:24:20:ab:a2:e6:15:
10:a6:4a:86:86:d2:86:8b:18:1b:83:2b:6f:60:8f:
3f:02:58:ef:d7:39:c2:9f:fc:ce:1f:e2:57:a3:bd:
e0:51:e6:10:3c:0f:81:da:2f:de:7a:3a:e3:2d:85:
98:1a:71:52:cf:b8:9d:78:08:b6:91:e1:9a:5b:31:
bf:71:17:de:c1:fe:f8:63:e6:c0:0e:f6:b5:ab:c4:
a1:d5:9a:38:9d:8d:e5:9b:eb:6f:3e:23:3b:c4:ea:
26:5e:53:f5:3b:32:2d:ad:19:65:9d:de:5b:87:ae:
4b:26:0a:0b:66:c6:0a:d9:c8:ff:09:89:1e:dc:ee:
e4:aa:a1:e2:c7:48:6c:09:6b:ef:cc:15:c7:c0:4f:
ca:58:c1:22:aa:f0:cf:18:3d:52:11:f7:25:0a:bd:
d5:18:b5:06:d9:54:31:6e:32:c6:92:29:02:85:86:
55:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:98:CF:FF:A5:B7:17:D1:FC:92:A6:8A:CC:A6:B7:D5:9F:35:C5:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50E211ECF43E11EF845574B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.123.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:47:ab:eb:03:d1:fc:f4:f1:7b:0c:0d:5b:6b:ff:81:58:5b:
62:8b:90:50:da:5d:ef:75:c0:e4:5e:e9:ec:57:3e:aa:10:76:
81:c0:01:4b:3a:d7:3b:ad:32:b5:a7:88:ff:d4:cc:0b:b2:29:
e8:45:ce:d3:96:31:2b:db:78:88:1b:fd:f8:e1:27:65:a0:3f:
b4:f7:b6:a0:89:cb:e2:0f:c4:d4:5b:a3:17:d0:db:0b:3e:97:
38:5c:52:92:3c:e8:55:06:e7:d6:d9:dd:e3:92:d4:e1:48:90:
ad:b3:7e:79:2c:7b:6d:dd:78:74:a5:ec:c0:b8:0d:a1:4c:50:
97:9b:6e:24:30:31:53:a4:c2:d9:76:88:10:77:d5:d0:4f:52:
c0:b7:8b:8f:cf:f0:af:b9:f3:ca:59:e8:90:6c:85:15:73:4d:
d6:25:5e:47:2f:73:02:0f:b5:28:1e:a6:b6:74:ba:cd:4e:5e:
60:88:0d:8f:4b:2f:e5:87:8e:ea:7a:64:01:f5:5d:bd:c0:ca:
33:92:ab:32:77:6c:df:15:06:f6:55:99:33:74:d6:06:3f:e0:
8e:17:6f:d2:a1:75:ca:00:93:87:57:e0:77:7a:c1:67:08:2f:
c4:73:07:2e:e4:80:fe:d1:80:02:56:7d:dd:96:e9:c7:f7:80:
41:2e:ba:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWMxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTIzNjMyWhcNMjYwMjE5MTIzNjMyWjAYMRYw
FAYDVQQDEw02N2JmMGFkMy02YmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmuSBW0YSmR7LCz61X/qwJJ86JeDyrDbVMa5oVZ9hZDdBG3LgqOn43x+E
6Ov1kmN04cs7xfxx4jC9VJoH7/Ypnl24Dyo3ohxpFGRlWeJ/QWR5IqIkIKui5hUQ
pkqGhtKGixgbgytvYI8/Aljv1znCn/zOH+JXo73gUeYQPA+B2i/eejrjLYWYGnFS
z7ideAi2keGaWzG/cRfewf74Y+bADva1q8Sh1Zo4nY3lm+tvPiM7xOomXlP1OzIt
rRllnd5bh65LJgoLZsYK2cj/CYke3O7kqqHix0hsCWvvzBXHwE/KWMEiqvDPGD1S
EfclCr3VGLUG2VQxbjLGkikChYZVlQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMuY
z/+ltxfR/JKmisymt9WfNcU6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MEUyMTFFQ0Y0M0UxMUVGODQ1NTc0Qjg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtB7MA0GCSqGSIb3DQEB
CwUAA4IBAQAuR6vrA9H89PF7DA1ba/+BWFtii5BQ2l3vdcDkXunsVz6qEHaBwAFL
Otc7rTK1p4j/1MwLsinoRc7TljEr23iIG/344SdloD+097agicviD8TUW6MX0NsL
Ppc4XFKSPOhVBufW2d3jktThSJCts355LHtt3Xh0pezAuA2hTFCXm24kMDFTpMLZ
dogQd9XQT1LAt4uPz/CvufPKWeiQbIUVc03WJV5HL3MCD7UoHqa2dLrNTl5giA2P
Sy/lh47qemQB9V29wMozkqsyd2zfFQb2VZkzdNYGP+COF2/SoXXKAJOHV+B3esFn
CC/Ecwcu5ID+0YACVn3dlunH94BBLrqY
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:49 2025 by rpki-client