Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/810CB24CF3E811EFBB0DA664762E951A.roa
File: 810CB24CF3E811EFBB0DA664762E951A.roa (raw, json)
Hash identifier: xNSprpSl66XTh8f3HXjM7yTrAqDQRgDqWgtWlGSl69M=
Subject key identifier: BB:26:31:06:07:C0:E2:D6:09:DA:FC:2A:F4:A0:5E:33:B4:C6:11:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016084
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/810CB24CF3E811EFBB0DA664762E951A.roa
Signing time: Wed 26 Feb 2025 02:22:20 +0000
ROA not before: Wed 26 Feb 2025 02:22:15 +0000
ROA not after: Thu 19 Feb 2026 02:22:15 +0000
asID: 984
IP address blocks: 154.203.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90244 (0x16084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 02:22:15 2025 GMT
Not After : Feb 19 02:22:15 2026 GMT
Subject: CN=67be7adb-0b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:5e:92:14:df:44:da:c3:d6:7f:1b:d1:cb:
6c:20:9c:9a:a4:ee:70:2b:64:b4:db:e3:50:77:a9:
27:60:7c:68:8d:1c:f7:09:ae:4a:e0:82:40:0b:27:
0c:19:07:38:b5:86:3e:6b:d8:37:fb:40:3d:27:e7:
41:ba:d5:2a:e2:8e:f4:2c:28:09:03:b0:c9:7f:28:
fe:f5:31:f5:b8:05:7a:52:33:34:eb:9e:03:dd:c6:
3c:0c:d1:49:47:dd:90:8b:fe:1e:9a:7a:ac:59:91:
3b:79:97:63:9c:6c:7b:8e:d4:ef:49:81:3f:5b:3f:
54:a4:44:3d:86:8b:36:6f:a5:72:39:d2:4c:3f:af:
9d:99:23:e0:af:49:0f:d8:64:2c:d8:e6:e8:d6:a1:
cd:9c:81:52:12:fa:8c:0b:a4:71:b7:db:13:38:6d:
15:c3:2c:30:52:48:25:04:38:ce:01:24:d3:99:bb:
53:bd:a9:5d:45:b1:e2:2b:14:86:73:03:1e:27:dd:
27:56:ec:56:db:6b:62:52:42:95:6d:63:71:99:fd:
04:8d:61:de:34:21:21:72:e0:b1:a0:5e:d4:68:c6:
82:de:e7:24:e0:93:c9:3a:af:1a:4a:07:1d:e3:b4:
00:da:0c:09:91:e4:87:27:58:26:a1:0e:67:4e:ff:
d0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:26:31:06:07:C0:E2:D6:09:DA:FC:2A:F4:A0:5E:33:B4:C6:11:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/810CB24CF3E811EFBB0DA664762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.13.0/24
Signature Algorithm: sha256WithRSAEncryption
21:3c:e8:69:a3:49:1b:a4:43:27:26:a4:fb:60:f2:3b:f4:b3:
a8:23:3c:8e:73:d8:60:1b:70:fd:3c:bf:44:9c:a0:40:71:d2:
c4:3d:30:a5:3f:36:d4:92:6c:e1:c2:39:94:cb:e4:89:43:d3:
51:04:7f:89:ef:75:01:18:40:98:7f:cd:bc:fc:ad:d5:6c:97:
fb:2c:fd:a3:51:98:6d:0f:99:6a:c0:e7:c1:12:0f:e7:07:97:
2e:9b:e5:f0:4c:a1:4a:a8:9f:ea:ae:ca:dd:30:ad:d7:81:90:
10:1a:98:21:60:10:16:c3:cf:00:c1:23:51:e4:36:29:c2:f8:
60:e3:9f:d4:d1:68:ec:65:fb:00:1e:84:0d:44:e0:fd:d5:41:
91:1d:eb:89:9d:7f:5c:c8:9d:98:99:1d:06:e2:69:f0:87:18:
09:65:2d:78:44:c8:ec:f0:de:ba:71:f0:da:16:78:a5:c8:b3:
cc:aa:55:7b:4c:eb:93:87:06:61:bd:12:2b:a5:32:c0:b7:aa:
8f:20:34:72:14:bd:0f:53:af:dd:03:bd:bf:07:7b:82:58:a8:
21:c4:e1:1c:f6:4e:aa:70:dc:83:62:27:04:f9:10:7c:93:14:
01:bb:65:32:e9:ef:fd:32:e0:1c:6c:38:20:3d:9f:1a:80:e0:
41:d4:f2:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWCEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDIyMjE1WhcNMjYwMjE5MDIyMjE1WjAYMRYw
FAYDVQQDEw02N2JlN2FkYi0wYjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtIBekhTfRNrD1n8b0ctsIJyapO5wK2S02+NQd6knYHxojRz3Ca5K4IJA
CycMGQc4tYY+a9g3+0A9J+dButUq4o70LCgJA7DJfyj+9TH1uAV6UjM0654D3cY8
DNFJR92Qi/4emnqsWZE7eZdjnGx7jtTvSYE/Wz9UpEQ9hos2b6VyOdJMP6+dmSPg
r0kP2GQs2Obo1qHNnIFSEvqMC6Rxt9sTOG0VwywwUkglBDjOASTTmbtTvaldRbHi
KxSGcwMeJ90nVuxW22tiUkKVbWNxmf0EjWHeNCEhcuCxoF7UaMaC3uck4JPJOq8a
Sgcd47QA2gwJkeSHJ1gmoQ5nTv/QsQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLsm
MQYHwOLWCdr8KvSgXjO0xhHjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MTBDQjI0Q0YzRTgxMUVGQkIwREE2NjQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmssNMA0GCSqGSIb3DQEB
CwUAA4IBAQAhPOhpo0kbpEMnJqT7YPI79LOoIzyOc9hgG3D9PL9EnKBAcdLEPTCl
PzbUkmzhwjmUy+SJQ9NRBH+J73UBGECYf828/K3VbJf7LP2jUZhtD5lqwOfBEg/n
B5cum+XwTKFKqJ/qrsrdMK3XgZAQGpghYBAWw88AwSNR5DYpwvhg45/U0WjsZfsA
HoQNROD91UGRHeuJnX9cyJ2YmR0G4mnwhxgJZS14RMjs8N66cfDaFnilyLPMqlV7
TOuThwZhvRIrpTLAt6qPIDRyFL0PU6/dA72/B3uCWKghxOEc9k6qcNyDYicE+RB8
kxQBu2Uy6e/9MuAcbDggPZ8agOBB1PK7
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:45:24 2025 by rpki-client