Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15FFC16EF43911EFA35C2E94762E951A.roa
File: 15FFC16EF43911EFA35C2E94762E951A.roa (raw, json)
Hash identifier: loy9jFrv7GTZQ+fYqXNryvCfqXPv6XglVqfvuFof6+A=
Subject key identifier: 74:1B:6B:CA:39:20:76:85:1A:D4:5C:DE:10:4A:8F:AA:58:35:A0:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15FFC16EF43911EFA35C2E94762E951A.roa
Signing time: Wed 26 Feb 2025 11:59:09 +0000
ROA not before: Wed 26 Feb 2025 11:59:06 +0000
ROA not after: Thu 19 Feb 2026 11:59:06 +0000
asID: 984
IP address blocks: 154.207.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90842 (0x162da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:59:06 2025 GMT
Not After : Feb 19 11:59:06 2026 GMT
Subject: CN=67bf020d-43c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2d:8f:7b:d8:72:40:4f:fc:e4:6f:f4:9d:ca:
39:09:83:d6:a4:99:30:b5:c6:54:63:d6:4d:20:1d:
63:03:f2:71:43:78:25:3e:6f:c6:22:80:ff:db:b4:
6f:fa:b6:ca:8d:1c:2b:18:80:86:45:71:83:07:61:
d1:08:b5:82:00:33:bc:ae:a5:92:fb:52:af:1d:af:
9a:95:59:88:f6:43:79:75:cd:56:66:18:56:73:13:
77:28:a6:67:ae:17:47:97:7d:7f:65:86:fd:12:fb:
76:ac:71:08:ca:7b:68:89:35:f0:ff:c1:b3:94:5a:
1a:f5:3b:83:35:f6:c9:f3:82:09:b2:5a:92:24:21:
26:bf:b3:c6:4c:97:3e:8f:34:49:62:c1:e8:28:a8:
68:4e:c8:4e:ad:7e:84:9c:80:e5:f1:88:80:e6:d7:
5d:a8:74:f9:c8:58:ab:c2:db:f9:6c:1c:62:2d:ac:
9b:26:da:ad:b8:c8:ba:b2:34:46:1f:14:2b:54:21:
7c:eb:5a:19:1e:3c:82:5b:34:dd:04:58:67:2f:fd:
d1:d0:e1:25:58:03:44:5c:86:c0:e0:f0:d8:93:c9:
5a:6d:79:aa:17:3f:dd:ee:9d:f5:41:74:df:6b:70:
47:07:f7:b8:a7:3e:65:2a:35:af:a4:61:99:6b:19:
d5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1B:6B:CA:39:20:76:85:1A:D4:5C:DE:10:4A:8F:AA:58:35:A0:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15FFC16EF43911EFA35C2E94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.113.0/24
Signature Algorithm: sha256WithRSAEncryption
31:bd:dd:68:b4:db:32:aa:0d:76:c6:44:cb:64:a7:f3:4a:93:
41:3f:53:64:b4:17:71:ab:f2:ed:6c:22:c4:8a:26:4a:2b:08:
ae:f2:7b:2d:0a:7e:25:f0:e6:b5:bc:fe:37:93:42:f0:59:af:
2f:3f:b5:80:f7:cf:64:70:8a:73:18:20:4e:6d:ce:48:f5:3b:
28:91:01:e7:1b:52:de:c7:3a:bc:57:9a:4c:dd:e1:da:8c:c9:
7f:db:69:30:91:42:6f:c9:48:d1:d7:33:cd:04:6d:13:21:58:
14:25:71:23:de:f9:93:d9:50:41:27:cf:06:ef:3f:ad:99:71:
6e:d3:db:de:1c:94:4b:9d:d8:c5:26:e5:b1:52:c2:c9:3c:2f:
a0:45:9e:c5:1e:ec:45:86:3c:51:19:b3:f1:82:e2:47:24:7d:
5e:98:2a:c3:ff:c5:77:5f:ec:3f:90:db:a9:d4:cc:32:fc:65:
16:3e:5b:c2:73:13:c3:28:42:ac:43:7d:51:96:50:53:61:24:
82:21:de:ec:b4:dd:d3:2c:73:45:e5:68:90:91:83:54:45:a1:
14:0b:52:db:a6:8b:80:1b:d3:0d:af:98:82:3e:51:cc:11:27:
f2:13:a8:ef:6c:b4:2c:5e:c2:e1:21:3b:19:c2:e8:20:40:71:
80:4a:34:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:55:12 2025 by rpki-client