Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E30B38AF42211EF97261C77762E951A.roa
File: 8E30B38AF42211EF97261C77762E951A.roa (raw, json)
Hash identifier: sFsOEVEVYeJNuwQ1XCHd44bzzVjyNKjIUFLTeJo2Q7A=
Subject key identifier: 4F:FA:52:B6:B0:C0:13:A6:12:DC:B5:21:BE:1B:2F:96:D0:B1:48:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0161B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E30B38AF42211EF97261C77762E951A.roa
Signing time: Wed 26 Feb 2025 09:17:52 +0000
ROA not before: Wed 26 Feb 2025 09:17:49 +0000
ROA not after: Thu 19 Feb 2026 09:17:49 +0000
asID: 984
IP address blocks: 154.206.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90548 (0x161b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:17:49 2025 GMT
Not After : Feb 19 09:17:49 2026 GMT
Subject: CN=67bedc40-4de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1d:ca:1b:cf:b0:83:81:9f:0e:af:0e:d1:44:
08:e7:04:ae:b5:ad:f0:51:82:f6:f4:9e:a8:b9:23:
91:f5:e5:28:9b:71:3b:d8:5e:35:8f:44:f5:81:5c:
44:86:44:8b:43:1e:1b:5b:00:7f:35:8d:48:83:c4:
2a:c7:fa:bb:93:11:f8:5b:49:bf:bc:25:57:6d:2e:
14:0e:3a:0f:71:89:c4:57:3b:0b:ae:07:6b:4e:cf:
cf:f3:bd:98:d7:c8:c5:0a:56:7c:31:61:6b:47:ed:
84:cd:62:d5:f4:d7:65:23:18:66:96:ca:10:80:fb:
22:01:9d:e7:04:06:f3:63:79:44:82:b9:43:fb:7a:
3d:61:7d:02:60:1a:d0:14:6e:e0:37:d1:ba:f9:62:
0f:00:ad:e1:fe:3e:b6:c9:0d:a1:61:57:52:52:82:
e4:d5:48:e1:6a:9a:fa:3e:44:b7:7a:6a:8a:f9:87:
a5:39:6d:d3:f8:6c:86:a3:0e:e2:cf:e0:56:fc:f1:
88:68:cb:13:52:92:a8:41:37:3b:37:d0:38:18:ec:
0e:34:93:2c:bd:cd:7b:bd:cc:43:fe:36:5c:75:b6:
cb:a6:f6:b9:94:bf:ee:41:b4:b1:72:d0:47:a4:62:
a7:4a:f1:1d:3c:a5:53:5c:82:3e:5b:40:ab:a6:ba:
be:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FA:52:B6:B0:C0:13:A6:12:DC:B5:21:BE:1B:2F:96:D0:B1:48:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E30B38AF42211EF97261C77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.231.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d3:f2:3a:09:55:c1:32:ce:2c:0f:be:14:e0:9e:10:d7:b6:
17:53:c6:57:c5:87:33:de:ad:54:8a:18:29:ad:47:fa:63:36:
a5:d9:ac:3e:f8:0f:99:2e:e3:16:8f:28:38:74:ab:53:85:a1:
7b:cd:7e:25:55:e8:53:6a:f7:0c:31:9c:05:e3:cb:a2:42:8d:
ad:7b:67:fd:f4:b5:6f:90:39:b3:ad:da:bd:9d:1c:dd:32:b6:
34:a0:11:24:02:6a:12:27:9e:b8:14:2d:df:1b:c8:51:e9:c8:
4a:59:e2:52:2d:0a:3b:17:b5:0a:58:a9:4b:26:cb:56:b2:a2:
97:95:5d:a3:f1:22:db:16:35:04:52:f8:6c:ca:6c:8b:4d:f5:
aa:72:4d:6b:41:9d:f1:9a:69:c4:c8:bf:c5:dc:09:1f:6c:d3:
86:7e:a7:54:df:aa:fa:66:eb:ca:55:29:a3:14:ba:cb:5c:03:
16:ca:eb:10:d4:38:4f:1f:80:70:27:6f:0f:03:76:0c:86:fc:
e9:e6:76:27:a3:66:dd:59:19:d8:8d:ac:87:88:99:1e:f1:63:
66:f2:66:7c:06:a0:10:17:e5:bd:91:24:64:de:f0:40:9f:31:
4e:49:dd:1f:6d:81:27:c7:a0:c9:38:46:a4:5b:0b:a5:6d:b5:
e3:75:59:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWG0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDkxNzQ5WhcNMjYwMjE5MDkxNzQ5WjAYMRYw
FAYDVQQDEw02N2JlZGM0MC00ZGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxh3KG8+wg4GfDq8O0UQI5wSuta3wUYL29J6ouSOR9eUom3E72F41j0T1
gVxEhkSLQx4bWwB/NY1Ig8Qqx/q7kxH4W0m/vCVXbS4UDjoPcYnEVzsLrgdrTs/P
872Y18jFClZ8MWFrR+2EzWLV9NdlIxhmlsoQgPsiAZ3nBAbzY3lEgrlD+3o9YX0C
YBrQFG7gN9G6+WIPAK3h/j62yQ2hYVdSUoLk1Ujhapr6PkS3emqK+YelOW3T+GyG
ow7iz+BW/PGIaMsTUpKoQTc7N9A4GOwONJMsvc17vcxD/jZcdbbLpva5lL/uQbSx
ctBHpGKnSvEdPKVTXII+W0Crprq+jwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE/6
UrawwBOmEty1Ib4bL5bQsUjJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RTMwQjM4QUY0MjIxMUVGOTcyNjFDNzc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms7nMA0GCSqGSIb3DQEB
CwUAA4IBAQB40/I6CVXBMs4sD74U4J4Q17YXU8ZXxYcz3q1UihgprUf6Yzal2aw+
+A+ZLuMWjyg4dKtThaF7zX4lVehTavcMMZwF48uiQo2te2f99LVvkDmzrdq9nRzd
MrY0oBEkAmoSJ564FC3fG8hR6chKWeJSLQo7F7UKWKlLJstWsqKXlV2j8SLbFjUE
UvhsymyLTfWqck1rQZ3xmmnEyL/F3AkfbNOGfqdU36r6ZuvKVSmjFLrLXAMWyusQ
1DhPH4BwJ28PA3YMhvzp5nYno2bdWRnYjayHiJke8WNm8mZ8BqAQF+W9kSRk3vBA
nzFOSd0fbYEnx6DJOEakWwulbbXjdVkz
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:10 2025 by rpki-client