Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2F944BEF44811EF99D29682762E951A.roa
File: A2F944BEF44811EF99D29682762E951A.roa (raw, json)
Hash identifier: XDYG/e1dH93gw/y4V9eCjWh2oTdrlUDJ2RqYx9fpsIk=
Subject key identifier: E1:B4:22:8D:02:3F:46:29:86:36:5B:80:1D:A2:D9:B3:71:B7:4B:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2F944BEF44811EF99D29682762E951A.roa
Signing time: Wed 26 Feb 2025 13:50:28 +0000
ROA not before: Wed 26 Feb 2025 13:50:24 +0000
ROA not after: Thu 19 Feb 2026 13:50:24 +0000
asID: 984
IP address blocks: 154.210.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91127 (0x163f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:50:24 2025 GMT
Not After : Feb 19 13:50:24 2026 GMT
Subject: CN=67bf1c24-7ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:4f:8f:57:93:fb:41:40:f2:5a:26:11:93:
a7:0c:5b:ea:5d:78:ec:ad:c5:5d:32:99:05:5b:18:
64:b3:a1:03:7f:61:e0:2f:79:ea:0d:7a:c1:66:30:
b5:91:80:80:b3:32:a4:ca:cd:2c:74:45:3e:f8:07:
fb:54:4e:c5:07:31:22:3f:20:c1:9a:c8:ac:13:8e:
b1:ad:9e:f7:3a:4c:1b:a6:3e:49:a6:c1:93:cb:fe:
8e:2b:b3:f2:ab:2e:fd:7c:ec:11:2c:2a:38:6b:b3:
de:81:99:ed:2d:f3:12:85:fe:2e:5a:35:1e:aa:69:
9d:c4:0f:f8:6e:e0:45:4d:8a:9b:63:ce:bd:58:cc:
db:db:52:3d:31:8c:48:e5:3f:bb:9d:b7:e7:65:d3:
f7:a9:d2:ec:91:a0:00:25:d6:ce:5d:8f:4a:7f:da:
37:92:5a:df:6d:9c:81:c5:47:97:eb:18:be:84:e2:
95:31:9f:15:15:76:3c:6e:31:03:7b:b4:82:be:a8:
ef:23:d8:24:cd:5f:f4:36:87:e4:88:4e:9c:eb:3a:
28:e8:6c:6c:d8:f5:3a:0a:89:eb:01:49:63:f4:ce:
8e:1c:70:6f:b5:2d:28:1c:b3:98:ea:7f:03:14:1d:
b7:6d:08:f2:7a:12:1c:17:18:bd:b6:7a:12:b0:d3:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B4:22:8D:02:3F:46:29:86:36:5B:80:1D:A2:D9:B3:71:B7:4B:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2F944BEF44811EF99D29682762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.38.0/24
Signature Algorithm: sha256WithRSAEncryption
78:47:ca:60:f7:d4:76:df:07:a0:57:a0:94:b3:de:f2:b6:76:
22:d0:90:28:31:8d:2b:e6:19:cd:e4:a9:40:ab:e8:52:81:6c:
c4:36:91:07:2f:67:a2:1a:f4:54:8a:6b:dc:71:11:c4:32:cb:
be:01:90:69:45:bd:dd:9c:0d:18:68:e5:e7:39:18:6e:18:28:
69:ad:d7:bb:9f:c8:09:00:5a:a3:6b:af:e7:b9:9f:00:40:b3:
75:c0:0f:18:f3:17:ef:b8:3f:0b:f1:aa:af:33:ed:5c:97:4d:
a1:3e:4a:72:cb:11:8e:a3:fe:05:b1:95:ba:a2:4b:24:60:ea:
30:86:11:d7:0c:8a:c2:42:02:a1:aa:54:24:98:22:5b:df:5a:
c3:c9:e1:c2:f9:68:86:06:da:1f:44:f9:da:ec:d5:f0:3f:d8:
79:9e:5d:b4:ef:f0:43:a2:13:d2:96:9d:fd:1a:c8:c3:e6:5c:
13:2e:77:77:f4:dc:a8:06:1c:35:21:4f:00:d0:a2:a7:12:6a:
43:c3:7f:a6:81:f4:c6:e6:82:1d:68:eb:7e:d8:ed:98:36:71:
a8:f0:88:c9:0b:32:01:97:5e:17:88:8a:4a:06:b9:98:31:41:
bc:01:be:b1:25:f5:87:fb:b9:57:43:7f:30:ad:b4:51:f7:eb:
42:f8:f2:42
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWP3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTM1MDI0WhcNMjYwMjE5MTM1MDI0WjAYMRYw
FAYDVQQDEw02N2JmMWMyNC03YmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyyNPj1eT+0FA8lomEZOnDFvqXXjsrcVdMpkFWxhks6EDf2HgL3nqDXrB
ZjC1kYCAszKkys0sdEU++Af7VE7FBzEiPyDBmsisE46xrZ73Okwbpj5JpsGTy/6O
K7Pyqy79fOwRLCo4a7PegZntLfMShf4uWjUeqmmdxA/4buBFTYqbY869WMzb21I9
MYxI5T+7nbfnZdP3qdLskaAAJdbOXY9Kf9o3klrfbZyBxUeX6xi+hOKVMZ8VFXY8
bjEDe7SCvqjvI9gkzV/0NofkiE6c6zoo6Gxs2PU6ConrAUlj9M6OHHBvtS0oHLOY
6n8DFB23bQjyehIcFxi9tnoSsNMf/wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOG0
Io0CP0YphjZbgB2i2bNxt0vlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMkY5NDRCRUY0NDgxMUVGOTlEMjk2ODI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtImMA0GCSqGSIb3DQEB
CwUAA4IBAQB4R8pg99R23wegV6CUs97ytnYi0JAoMY0r5hnN5KlAq+hSgWzENpEH
L2eiGvRUimvccRHEMsu+AZBpRb3dnA0YaOXnORhuGChprde7n8gJAFqja6/nuZ8A
QLN1wA8Y8xfvuD8L8aqvM+1cl02hPkpyyxGOo/4FsZW6okskYOowhhHXDIrCQgKh
qlQkmCJb31rDyeHC+WiGBtofRPna7NXwP9h5nl207/BDohPSlp39GsjD5lwTLnd3
9NyoBhw1IU8A0KKnEmpDw3+mgfTG5oIdaOt+2O2YNnGo8IjJCzIBl14XiIpKBrmY
MUG8Ab6xJfWH+7lXQ38wrbRR9+tC+PJC
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:27 2025 by rpki-client