Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CA44BDAF42D11EF854E1C41762E951A.roa
File: 2CA44BDAF42D11EF854E1C41762E951A.roa (raw, json)
Hash identifier: RhghY+NRBw+ZFpRYVjW+6WiOESqkkeq8U+7aRQACijo=
Subject key identifier: B4:38:0D:62:58:B7:2D:4F:30:2B:C1:4F:C2:ED:3B:4E:F5:FB:66:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01623B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CA44BDAF42D11EF854E1C41762E951A.roa
Signing time: Wed 26 Feb 2025 10:33:53 +0000
ROA not before: Wed 26 Feb 2025 10:33:50 +0000
ROA not after: Thu 19 Feb 2026 10:33:50 +0000
asID: 984
IP address blocks: 154.208.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90683 (0x1623b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 10:33:50 2025 GMT
Not After : Feb 19 10:33:50 2026 GMT
Subject: CN=67beee11-a5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:ee:fb:df:ed:06:ab:fc:62:2a:ac:d3:ac:
28:a9:02:47:5e:13:7c:27:e2:3c:b7:64:5f:5d:44:
34:74:47:b3:48:67:2d:de:f4:4b:66:4c:79:68:22:
c8:5a:7a:26:21:9b:c5:9e:cb:99:07:8a:5e:a0:34:
7c:17:2e:e0:6e:8d:ca:ce:ef:09:e7:3b:3e:17:d4:
d7:e2:59:40:69:6f:b1:43:5b:76:16:2b:b4:ef:18:
73:5f:85:a8:e6:8e:d7:50:f3:43:4f:01:f7:03:2e:
43:5a:73:2e:18:a5:80:91:4a:a7:3a:eb:5e:5d:e2:
a0:1d:fb:d2:76:df:b0:7e:8a:53:e0:ba:55:f0:6b:
01:6f:17:37:cf:89:a6:45:5c:a3:7f:1b:03:83:41:
e7:71:4f:4e:75:bf:eb:ac:7d:a6:1b:3d:78:60:83:
a6:09:9c:8a:28:e2:8e:82:77:22:4e:78:35:ea:45:
0d:62:d7:3d:ff:fb:83:b8:5f:39:cc:a7:fd:01:ac:
03:1a:95:f1:32:63:98:a7:1a:41:e3:5c:77:54:02:
ca:22:b2:28:6d:0e:c2:9d:1c:78:ad:89:89:26:bd:
31:9b:be:90:04:77:ad:c1:54:21:31:83:ba:0a:94:
7b:a3:b9:95:12:8b:94:c9:bb:48:ce:73:5d:a7:65:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:38:0D:62:58:B7:2D:4F:30:2B:C1:4F:C2:ED:3B:4E:F5:FB:66:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CA44BDAF42D11EF854E1C41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.77.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ed:d6:41:30:ff:6b:5b:fa:cf:47:1f:36:73:7e:69:97:d6:
78:6f:1f:8e:ba:50:47:a9:d2:6a:81:c6:30:e9:08:31:6b:6f:
e1:6e:49:44:1b:36:06:97:2d:98:51:eb:ac:ba:9f:ca:9c:19:
67:74:5e:07:67:9a:ed:9f:c2:ba:a5:3b:73:db:b8:ea:38:5e:
ad:f8:8d:8d:bf:08:c7:31:4c:eb:4d:13:bd:77:97:ea:13:5d:
84:f6:3d:da:08:97:b4:40:54:21:65:36:3b:23:47:4e:45:c7:
2b:13:0c:75:34:9a:d6:85:b2:d7:ae:a5:8d:f0:f9:f2:2f:97:
01:6b:24:de:f3:10:f5:c5:10:13:d2:58:65:61:e4:72:db:c0:
79:90:eb:03:d0:31:db:33:4b:28:90:1d:77:3d:f2:ec:16:01:
98:51:04:6b:8e:71:93:b0:df:b1:55:21:8c:5d:a5:30:b8:b0:
22:8a:f7:7c:24:96:10:35:d8:2b:48:c8:67:19:83:0c:c7:f0:
ef:d5:a2:af:a7:c0:a6:37:0a:8a:7f:81:41:36:25:b4:c6:ce:
11:7e:5f:f4:6c:26:4c:bc:a7:bf:b0:b9:88:e7:93:46:69:ca:
5b:04:09:50:04:1a:43:d3:09:27:0d:98:b5:01:10:03:6e:b6:
34:8f:ce:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:12:52 2025 by rpki-client