Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAB50CAAF44411EF8084C468762E951A.roa
File: FAB50CAAF44411EF8084C468762E951A.roa (raw, json)
Hash identifier: 8qKOuNgiYGRpKIYX29Z10ONiW+LFiP3MF47noL2ajWs=
Subject key identifier: 21:09:E5:6B:34:17:D4:CC:48:5B:97:BF:28:01:5E:67:D8:C0:64:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAB50CAAF44411EF8084C468762E951A.roa
Signing time: Wed 26 Feb 2025 13:24:17 +0000
ROA not before: Wed 26 Feb 2025 13:24:13 +0000
ROA not after: Fri 20 Feb 2026 13:24:13 +0000
asID: 984
IP address blocks: 154.83.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91065 (0x163b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:24:13 2025 GMT
Not After : Feb 20 13:24:13 2026 GMT
Subject: CN=67bf1601-4451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:a3:7c:5a:16:2f:c3:37:e6:12:a4:fc:6f:
f7:fd:96:66:dc:27:88:c5:5e:18:a3:a8:5c:fe:d5:
a3:06:32:ae:70:73:1c:4b:01:a1:2a:a8:16:6c:75:
9e:b2:6a:f5:2b:87:64:42:50:e5:28:ae:f9:35:bb:
ce:6c:fb:58:80:bc:19:fa:59:34:72:03:48:d8:f1:
38:cf:3f:63:11:36:bb:8e:d8:2e:2a:19:6f:c3:25:
23:c4:23:69:89:d5:de:fb:ca:36:db:78:94:ad:b0:
89:8b:39:47:14:ce:60:c0:aa:8c:ed:3d:61:46:5d:
eb:e1:5f:60:18:c2:f8:0c:d9:73:c6:5e:ef:3e:15:
11:11:30:cf:56:3d:14:73:a9:a8:3a:34:7c:2b:6b:
4c:be:c8:59:7c:10:ce:f6:7e:0a:20:b8:0f:6b:a0:
e3:2a:9c:6e:9f:d8:aa:a8:f5:f4:43:4d:1a:7c:23:
4c:71:d0:81:ee:e8:f7:61:33:a8:7d:05:41:b7:46:
99:1b:41:23:6b:14:3b:49:82:61:72:e1:a6:18:81:
c1:f6:85:cb:a1:79:84:05:b4:2e:67:f1:05:cf:8e:
d9:e7:48:fc:72:7b:53:5c:25:5a:7b:2d:2d:c4:f2:
66:2e:b9:d1:12:bf:4c:86:73:7c:ca:41:71:e5:02:
60:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:09:E5:6B:34:17:D4:CC:48:5B:97:BF:28:01:5E:67:D8:C0:64:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FAB50CAAF44411EF8084C468762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.172.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ee:8f:b5:de:0c:95:3b:b7:30:8f:d0:84:d9:b7:1c:54:07:
59:38:52:22:66:20:50:b1:85:8e:5c:b5:89:0e:69:7b:ff:31:
e5:50:b4:a8:b0:59:f1:e6:01:eb:14:bd:59:12:39:91:ac:06:
04:3a:e0:e3:9f:05:a6:ea:e4:37:44:f1:3d:47:2f:a0:2e:1d:
a9:eb:58:37:5b:b7:e0:58:be:e6:e9:04:cc:a9:ff:c7:9e:08:
13:44:66:67:53:2d:eb:ef:6a:e0:3d:3a:8a:35:a6:dd:1d:19:
d8:db:d1:28:50:70:c4:43:10:69:6c:80:64:c1:74:84:09:35:
75:c6:91:02:67:c8:fc:24:50:c4:1b:2e:0d:1c:8d:84:b4:22:
44:24:13:3b:73:b0:67:7b:6c:f5:7b:80:d9:f5:85:e3:3b:bd:
6f:ab:c3:e3:ec:cb:ba:e6:fb:ae:1c:7e:7a:cd:9c:65:c5:82:
53:f4:16:01:b9:de:c3:98:9d:e9:a5:b8:fd:41:56:2d:d0:6e:
0b:6f:c3:9a:c2:b3:fc:54:87:c3:23:c9:cd:23:4b:d9:09:6a:
d7:d2:4b:02:8d:75:0e:23:a8:b8:76:bf:50:83:e7:a9:0f:fa:
51:5f:b5:75:f7:63:ab:cf:77:31:93:a3:68:87:2e:ed:e0:14:
7b:68:8f:e6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWO5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTMyNDEzWhcNMjYwMjIwMTMyNDEzWjAYMRYw
FAYDVQQDEw02N2JmMTYwMS00NDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyfqjfFoWL8M35hKk/G/3/ZZm3CeIxV4Yo6hc/tWjBjKucHMcSwGhKqgW
bHWesmr1K4dkQlDlKK75NbvObPtYgLwZ+lk0cgNI2PE4zz9jETa7jtguKhlvwyUj
xCNpidXe+8o223iUrbCJizlHFM5gwKqM7T1hRl3r4V9gGML4DNlzxl7vPhURETDP
Vj0Uc6moOjR8K2tMvshZfBDO9n4KILgPa6DjKpxun9iqqPX0Q00afCNMcdCB7uj3
YTOofQVBt0aZG0EjaxQ7SYJhcuGmGIHB9oXLoXmEBbQuZ/EFz47Z50j8cntTXCVa
ey0txPJmLrnREr9MhnN8ykFx5QJg/wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCEJ
5Ws0F9TMSFuXvygBXmfYwGSSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQUI1MENBQUY0NDQxMUVGODA4NEM0Njg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlOsMA0GCSqGSIb3DQEB
CwUAA4IBAQB07o+13gyVO7cwj9CE2bccVAdZOFIiZiBQsYWOXLWJDml7/zHlULSo
sFnx5gHrFL1ZEjmRrAYEOuDjnwWm6uQ3RPE9Ry+gLh2p61g3W7fgWL7m6QTMqf/H
nggTRGZnUy3r72rgPTqKNabdHRnY29EoUHDEQxBpbIBkwXSECTV1xpECZ8j8JFDE
Gy4NHI2EtCJEJBM7c7Bne2z1e4DZ9YXjO71vq8Pj7Mu65vuuHH56zZxlxYJT9BYB
ud7DmJ3ppbj9QVYt0G4Lb8OawrP8VIfDI8nNI0vZCWrX0ksCjXUOI6i4dr9Qg+ep
D/pRX7V192Orz3cxk6Nohy7t4BR7aI/m
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:48 2025 by rpki-client