Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/051803220A1711F089C35F62762E951A.roa
File: 051803220A1711F089C35F62762E951A.roa (raw, json)
Hash identifier: AFJ4mauNxtZ4FZoi+BRU0ULa3ISJ4gaRbpWARs7Kmlk=
Subject key identifier: 94:A6:2F:3A:1F:11:7E:A8:A9:BC:26:94:46:2B:5E:01:21:63:74:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017659
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/051803220A1711F089C35F62762E951A.roa
Signing time: Wed 26 Mar 2025 07:50:43 +0000
ROA not before: Wed 26 Mar 2025 07:50:39 +0000
ROA not after: Fri 30 May 2025 07:50:39 +0000
asID: 329029
IP address blocks: 154.90.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95833 (0x17659)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 26 07:50:39 2025 GMT
Not After : May 30 07:50:39 2025 GMT
Subject: CN=67e3b1d3-7eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:39:a5:b4:36:0b:35:7b:30:89:df:27:83:20:
d7:d6:49:11:57:71:f8:97:ea:85:43:c1:79:b2:1e:
e0:43:00:22:d2:31:8a:33:43:ff:91:89:c6:7b:a8:
43:ad:74:ef:d7:74:12:19:40:79:fe:13:75:43:ac:
07:4b:6b:46:03:7c:45:f3:ab:18:a9:56:1a:c1:96:
66:b3:e5:91:ff:fa:51:1d:9f:27:3d:e7:a4:b5:c1:
ce:be:85:77:d7:90:f5:75:75:c5:07:fd:7c:66:f0:
c1:29:5f:56:f2:11:23:e1:ed:b3:b1:49:3c:9c:63:
7a:82:40:03:66:6d:f2:80:ef:bc:e4:7e:a3:24:29:
b7:24:e2:b4:99:9a:4c:dd:24:24:d3:34:b1:e2:10:
ae:9d:91:c8:7b:b7:c3:5f:c2:02:5b:55:0b:db:bc:
3e:c4:41:77:b5:82:76:aa:9f:8e:34:f7:8a:71:9b:
12:9a:6f:21:f8:2d:a2:5b:6e:cd:16:b4:39:61:74:
a8:b9:2e:d9:84:ec:78:b2:99:56:56:41:73:fa:1c:
71:a5:c3:5a:6a:aa:e4:4a:98:be:25:5a:a7:c3:f3:
c5:2a:e5:28:e2:bf:25:25:25:3f:0f:47:62:fe:c9:
b8:8a:4f:6c:fe:ac:88:a2:95:f7:32:b0:b8:39:c7:
3a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A6:2F:3A:1F:11:7E:A8:A9:BC:26:94:46:2B:5E:01:21:63:74:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/051803220A1711F089C35F62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.174.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:92:72:86:c5:c9:45:6b:f9:d1:e0:be:68:4d:ad:59:a1:40:
af:82:8f:55:d5:b7:d0:3a:c4:63:82:86:1b:74:8b:12:4f:3c:
9f:1a:b7:eb:d8:b0:1d:a6:94:d3:17:ea:b4:be:81:cc:25:f0:
a4:5e:e6:df:ec:9d:b8:6b:90:76:ca:c8:0a:0e:19:6e:0a:9c:
65:83:c5:19:5a:f4:fd:0b:7e:07:d5:23:d8:54:e4:52:d7:7c:
e2:c9:4a:6f:85:56:d4:47:11:30:2f:27:be:1e:c8:06:94:26:
df:5c:c6:24:da:28:90:d9:c7:43:39:42:cc:7c:6e:c5:ea:af:
13:96:85:dd:ce:f7:79:7b:6b:d4:0a:0f:12:59:1b:37:57:4a:
d1:2f:8d:81:dc:f5:84:18:29:b5:a1:14:f7:6b:c0:ba:a2:a8:
bb:e6:12:72:62:85:61:85:fb:df:3c:0b:df:10:4f:49:5b:0b:
21:6c:7b:69:3a:79:6b:7e:1a:19:ad:23:07:30:98:c0:67:80:
77:79:af:0e:98:5a:f8:a7:fd:c1:ce:93:f1:5d:b8:5b:2e:61:
8c:82:e4:ec:59:bb:b0:95:44:80:65:57:bb:da:f2:1b:c7:7c:
8c:c5:4a:98:fa:df:a9:a0:d9:13:53:80:50:0f:20:5c:40:ab:
54:5f:59:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:08 2025 by rpki-client