Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D03D7A204B011F09EF0F665762E951A.roa
File: 1D03D7A204B011F09EF0F665762E951A.roa (raw, json)
Hash identifier: 1/z1BFoE+knOON5Ossl1PJ0dB8DZDBN8wpoQrSBptxE=
Subject key identifier: D1:E0:BA:E0:EC:C6:C4:8B:B6:49:C7:29:89:F7:3A:64:25:0F:0E:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D03D7A204B011F09EF0F665762E951A.roa
Signing time: Wed 19 Mar 2025 10:51:30 +0000
ROA not before: Wed 19 Mar 2025 10:51:26 +0000
ROA not after: Fri 25 Apr 2025 10:51:26 +0000
asID: 54801
IP address blocks: 154.90.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95476 (0x174f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 19 10:51:26 2025 GMT
Not After : Apr 25 10:51:26 2025 GMT
Subject: CN=67daa1b1-b30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:72:34:7f:4c:14:30:c3:e4:eb:c5:f1:bd:
d9:b5:63:f5:58:5e:8d:ec:78:55:2b:f4:98:5c:24:
91:05:c2:82:6b:6c:85:13:b5:33:f5:a8:97:d1:5a:
eb:87:47:3e:41:13:3e:6a:8d:74:61:36:22:49:d3:
a5:7a:11:0b:b7:d3:23:8c:55:95:d0:b8:44:33:de:
8a:00:29:86:6a:75:b7:c3:4c:2b:b2:1d:b6:56:ad:
f8:40:be:a3:88:2a:c9:e4:97:f3:85:90:3e:c2:4a:
fc:12:f7:03:c9:40:c3:90:ca:bd:50:73:95:35:40:
da:b9:13:b7:27:f3:3a:57:e8:13:91:9b:ac:d3:da:
1b:05:6d:dc:82:8e:29:30:54:0f:ac:d4:9f:1b:cd:
ad:e9:f6:5b:ff:f2:05:40:f3:9b:d8:c6:7b:df:7c:
ec:b9:3e:1a:f9:e8:96:13:1c:c7:f8:a4:6e:15:52:
fa:a3:2d:51:1d:d3:2f:6c:de:42:de:9f:d5:7b:a6:
e1:08:65:c5:21:74:f0:76:c9:de:ed:9c:8c:c0:95:
57:2d:1f:44:f7:db:99:dc:4e:1b:a3:9a:e7:23:97:
6a:af:dd:59:28:67:0e:ab:76:6c:db:aa:5e:4d:c2:
77:f3:3b:9b:0a:c0:42:a2:0f:0d:72:8e:79:f9:64:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E0:BA:E0:EC:C6:C4:8B:B6:49:C7:29:89:F7:3A:64:25:0F:0E:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D03D7A204B011F09EF0F665762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.28.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:d3:e0:d2:6b:bc:0b:0e:74:46:67:6f:ca:94:7c:52:97:58:
72:14:75:cc:a7:9b:74:4d:40:2e:82:8c:fb:22:9a:56:da:86:
3e:c4:32:9f:23:b0:f7:ec:d2:33:50:b6:ea:a5:fa:80:91:c8:
4f:c0:81:45:90:29:3a:3e:59:57:dc:b3:d7:1d:a0:b6:05:ae:
bb:4f:c4:37:aa:c8:5d:d9:ac:f6:69:62:55:c6:6a:d6:d6:c7:
96:b0:c1:55:11:d8:9c:dd:52:68:c9:67:31:5b:fe:30:10:3a:
5e:27:ce:c6:49:3c:77:4c:cb:a9:38:d5:6a:73:47:28:40:0f:
3e:c1:b7:c8:4e:06:74:a1:a0:4c:e1:7a:79:cb:1c:a4:98:ca:
76:06:66:78:2d:8c:a0:df:d9:61:03:b6:52:0d:cb:35:69:f9:
03:bb:31:10:d0:53:e8:6a:76:90:15:af:ef:ed:43:1f:66:f9:
5c:0d:72:08:73:39:b7:a5:d6:d5:44:34:63:37:73:37:9e:4b:
27:95:c1:9e:77:f9:24:4b:3b:10:b6:a8:4a:2c:1b:fd:54:5d:
32:e5:e8:f4:00:55:cd:04:3e:56:70:7e:0c:eb:af:0f:5a:c9:
f1:cf:98:0f:5d:5b:1f:4c:71:61:3e:b5:43:18:d3:7f:9f:30:
15:2d:6f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:10 2025 by rpki-client