Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F5BDD88F41E11EFAF42E65A762E951A.roa
File: 8F5BDD88F41E11EFAF42E65A762E951A.roa (raw, json)
Hash identifier: je2UOEg8FBBQPPg40W6rilLiN52OzQQx/7RrhIIeAIA=
Subject key identifier: 38:57:4F:43:F2:7C:36:57:F4:6E:CE:A9:C2:13:71:1C:C5:D2:6D:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016179
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F5BDD88F41E11EFAF42E65A762E951A.roa
Signing time: Wed 26 Feb 2025 08:49:16 +0000
ROA not before: Wed 26 Feb 2025 08:49:13 +0000
ROA not after: Thu 19 Feb 2026 08:49:13 +0000
asID: 328608
IP address blocks: 154.200.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90489 (0x16179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:49:13 2025 GMT
Not After : Feb 19 08:49:13 2026 GMT
Subject: CN=67bed58c-9e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:59:83:f6:77:10:62:4e:57:a7:9e:8c:cc:
23:a7:69:91:91:0c:e1:e6:de:5b:dc:da:6c:32:4b:
5c:2b:62:18:0f:00:11:eb:2b:0a:64:b1:db:4e:88:
5e:c8:6e:59:3a:67:13:b7:82:fa:2c:0b:11:dc:87:
f9:b3:56:94:ee:b2:74:a9:63:47:b9:33:3b:a7:92:
a6:d4:d5:a9:64:f6:fe:40:8a:61:72:af:70:11:90:
8b:c1:99:cf:9f:06:00:d1:c5:2c:80:14:11:6b:46:
0f:4f:95:2e:95:ff:70:1a:d0:13:43:98:11:bb:64:
64:21:4a:2b:4e:38:34:63:32:73:80:4a:b4:e5:1e:
83:c0:21:96:e7:77:3c:b0:79:58:9a:a3:ac:47:1b:
36:7f:9c:93:b6:7c:50:00:aa:fd:e9:85:18:e7:06:
ce:94:04:7c:13:2c:15:37:20:45:c3:28:89:2d:a9:
9e:a3:9b:fa:ec:9b:80:ff:f7:bf:fb:6b:e1:b0:bf:
8e:1c:98:64:1d:d0:25:35:fb:22:b5:3d:27:11:ff:
46:7b:cf:14:fa:f2:c8:59:5f:5f:03:21:9b:d7:a5:
4f:2d:2e:62:31:96:af:d0:30:b7:5a:e3:c5:22:04:
4c:ee:0c:2b:3b:d9:ac:12:34:e0:47:8f:f1:29:e1:
5e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:57:4F:43:F2:7C:36:57:F4:6E:CE:A9:C2:13:71:1C:C5:D2:6D:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F5BDD88F41E11EFAF42E65A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.199.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:12:07:be:ae:c9:22:f4:72:46:d9:fb:76:68:00:cb:be:3e:
2b:c5:cd:0d:e1:f8:48:7c:b7:c0:3b:ca:b2:ba:ab:13:24:32:
c7:9f:dc:95:8a:f2:cb:fb:e1:90:0f:80:3b:c0:63:b7:15:fb:
b1:d8:58:1e:da:3f:a8:29:c9:0e:18:8c:72:2c:98:65:bf:dc:
3a:0e:b1:dc:28:62:4c:80:9d:bd:3a:4d:3a:1c:a5:a3:fd:b4:
f9:19:c2:06:58:48:50:a9:26:8b:63:37:bb:5c:1b:bc:fd:93:
81:d0:df:40:4d:50:fe:ac:63:77:0a:5d:f4:a1:39:75:65:c4:
c3:05:d8:42:fa:83:7a:8c:fc:55:55:c2:16:d5:53:06:49:15:
c0:dd:d2:e8:bc:b5:91:a5:47:62:68:e3:05:d9:2c:ff:be:ce:
52:fa:c7:83:78:99:eb:32:54:fa:66:ad:74:3b:cc:de:3a:2a:
40:7a:d8:e4:ae:63:f4:1a:10:64:d9:81:73:6c:d0:f1:e3:dc:
39:5e:38:9c:9e:12:fa:62:36:3a:01:a7:de:d9:53:b5:bd:16:
db:c0:7f:34:80:7b:c0:06:1c:69:84:77:51:64:1d:32:c8:bb:
b6:0c:f1:8e:e3:43:e1:5a:a6:d9:1c:95:0e:52:7f:af:4c:87:
55:f3:24:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWF5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MDg0OTEzWhcNMjYwMjE5MDg0OTEzWjAYMRYw
FAYDVQQDEw02N2JlZDU4Yy05ZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAys9Zg/Z3EGJOV6eejMwjp2mRkQzh5t5b3NpsMktcK2IYDwAR6ysKZLHb
ToheyG5ZOmcTt4L6LAsR3If5s1aU7rJ0qWNHuTM7p5Km1NWpZPb+QIphcq9wEZCL
wZnPnwYA0cUsgBQRa0YPT5Uulf9wGtATQ5gRu2RkIUorTjg0YzJzgEq05R6DwCGW
53c8sHlYmqOsRxs2f5yTtnxQAKr96YUY5wbOlAR8EywVNyBFwyiJLameo5v67JuA
//e/+2vhsL+OHJhkHdAlNfsitT0nEf9Ge88U+vLIWV9fAyGb16VPLS5iMZav0DC3
WuPFIgRM7gwrO9msEjTgR4/xKeFeMwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDhX
T0PyfDZX9G7OqcITcRzF0m0uMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RjVCREQ4OEY0MUUxMUVGQUY0MkU2NUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsjHMA0GCSqGSIb3DQEB
CwUAA4IBAQDQEge+rski9HJG2ft2aADLvj4rxc0N4fhIfLfAO8qyuqsTJDLHn9yV
ivLL++GQD4A7wGO3Ffux2Fge2j+oKckOGIxyLJhlv9w6DrHcKGJMgJ29Ok06HKWj
/bT5GcIGWEhQqSaLYze7XBu8/ZOB0N9ATVD+rGN3Cl30oTl1ZcTDBdhC+oN6jPxV
VcIW1VMGSRXA3dLovLWRpUdiaOMF2Sz/vs5S+seDeJnrMlT6Zq10O8zeOipAetjk
rmP0GhBk2YFzbNDx49w5XjicnhL6YjY6Aafe2VO1vRbbwH80gHvABhxphHdRZB0y
yLu2DPGO40PhWqbZHJUOUn+vTIdV8yTN
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:39 2025 by rpki-client