Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8A61852F45511EFAB7F0F5F762E951A.roa
File: B8A61852F45511EFAB7F0F5F762E951A.roa (raw, json)
Hash identifier: rBj7w9STf/l5VcqKWV1GmATudIHG3/0U3rTCnBPXNxc=
Subject key identifier: 48:0E:AB:8B:E3:B5:3B:BC:EC:4A:0E:EE:46:3B:90:AC:31:89:60:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164CB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8A61852F45511EFAB7F0F5F762E951A.roa
Signing time: Wed 26 Feb 2025 15:24:08 +0000
ROA not before: Wed 26 Feb 2025 15:24:04 +0000
ROA not after: Thu 19 Feb 2026 15:24:04 +0000
asID: 984
IP address blocks: 154.210.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91339 (0x164cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:24:04 2025 GMT
Not After : Feb 19 15:24:04 2026 GMT
Subject: CN=67bf3218-3853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:78:63:3f:2f:7b:60:45:59:71:2e:9a:70:
b6:19:0b:58:c2:ce:d8:b7:35:ca:7a:be:83:c9:dc:
2d:eb:56:0f:e6:5d:52:78:44:f1:75:4f:0d:e5:57:
20:85:ac:ec:7e:9b:e6:66:a3:f4:bd:e2:3c:af:d1:
c5:70:c7:1a:36:99:b1:18:47:14:0c:64:9c:3d:44:
58:59:56:c8:e4:e9:5f:f6:62:03:95:2d:4c:e8:91:
a6:ac:cd:09:60:ac:d8:e2:d7:b3:73:76:c9:72:2a:
1c:43:37:6c:b3:6f:60:43:35:54:21:65:de:86:1c:
31:bb:a5:51:e4:78:48:60:34:c9:7a:28:e7:1e:3f:
65:30:f0:59:bf:8a:a5:8e:2f:46:bd:7b:79:4a:96:
f0:80:3d:66:ef:4e:98:de:14:93:cb:75:8f:ff:01:
c0:8c:37:a6:a2:52:28:d3:5a:c2:fb:71:e9:4c:d6:
22:88:81:6b:46:cc:51:1f:df:a2:0b:22:54:86:ea:
c6:2d:c1:0a:2f:b5:a8:37:05:10:8a:37:05:4d:6f:
b2:ef:37:f6:36:59:74:e9:cc:c8:54:c9:bf:be:37:
9b:5c:fd:68:d3:56:d4:85:83:d8:dc:ef:dc:5c:01:
fc:a6:d3:4b:80:72:ac:58:13:bf:ab:f5:e3:79:ce:
48:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0E:AB:8B:E3:B5:3B:BC:EC:4A:0E:EE:46:3B:90:AC:31:89:60:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8A61852F45511EFAB7F0F5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.90.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:74:3e:aa:dc:0e:1c:d3:61:63:66:8e:83:ff:7d:42:ba:4f:
d8:58:3e:b9:31:12:0c:09:f7:2b:0e:e7:38:7a:0f:78:6f:87:
c5:11:73:09:f1:87:32:f3:0c:66:08:7d:cf:bd:b7:f7:9e:44:
71:2a:6e:95:99:fa:4d:ed:9d:80:d5:14:ae:5b:1a:eb:35:5a:
3f:48:5b:66:cf:b0:2b:60:4d:c9:72:96:87:a2:02:71:68:84:
6c:c3:ac:15:e9:a7:de:b7:78:7e:ca:94:70:93:9b:cb:f4:7b:
e4:4d:90:2a:b5:99:fe:05:b0:aa:77:5e:b1:1c:85:2b:1e:ea:
31:03:57:eb:e8:53:bb:4f:82:33:01:84:05:af:af:85:1d:d7:
c2:6e:aa:91:00:97:e3:fc:30:94:6c:08:d9:dc:72:96:94:9a:
93:7e:7d:f5:3f:00:f9:a2:ce:7c:d6:4b:01:03:80:cd:11:46:
02:73:7a:28:7d:d6:da:4e:63:96:c6:ed:6f:cd:60:e3:2d:9f:
8d:b5:e9:a0:ee:b9:b4:bf:d4:34:d0:4f:62:52:b2:e8:ed:d1:
89:3c:75:9d:36:fb:5d:2f:70:fd:27:fd:a4:8f:15:63:31:a0:
7d:29:05:7a:4f:fb:dc:94:0c:9d:dc:6c:57:70:7e:86:98:70:
d3:38:b6:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWTLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTUyNDA0WhcNMjYwMjE5MTUyNDA0WjAYMRYw
FAYDVQQDEw02N2JmMzIxOC0zODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAssN4Yz8ve2BFWXEumnC2GQtYws7YtzXKer6Dydwt61YP5l1SeETxdU8N
5VcghazsfpvmZqP0veI8r9HFcMcaNpmxGEcUDGScPURYWVbI5Olf9mIDlS1M6JGm
rM0JYKzY4tezc3bJciocQzdss29gQzVUIWXehhwxu6VR5HhIYDTJeijnHj9lMPBZ
v4qlji9GvXt5SpbwgD1m706Y3hSTy3WP/wHAjDemolIo01rC+3HpTNYiiIFrRsxR
H9+iCyJUhurGLcEKL7WoNwUQijcFTW+y7zf2Nll06czIVMm/vjebXP1o01bUhYPY
3O/cXAH8ptNLgHKsWBO/q/Xjec5IPQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEgO
q4vjtTu87EoO7kY7kKwxiWAmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9COEE2MTg1MkY0NTUxMUVGQUI3RjBGNUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtJaMA0GCSqGSIb3DQEB
CwUAA4IBAQB+dD6q3A4c02FjZo6D/31Cuk/YWD65MRIMCfcrDuc4eg94b4fFEXMJ
8Ycy8wxmCH3Pvbf3nkRxKm6VmfpN7Z2A1RSuWxrrNVo/SFtmz7ArYE3JcpaHogJx
aIRsw6wV6afet3h+ypRwk5vL9HvkTZAqtZn+BbCqd16xHIUrHuoxA1fr6FO7T4Iz
AYQFr6+FHdfCbqqRAJfj/DCUbAjZ3HKWlJqTfn31PwD5os581ksBA4DNEUYCc3oo
fdbaTmOWxu1vzWDjLZ+Ntemg7rm0v9Q00E9iUrLo7dGJPHWdNvtdL3D9J/2kjxVj
MaB9KQV6T/vclAyd3GxXcH6GmHDTOLYM
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:23 2025 by rpki-client