Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D85E954F3F711EF9E64E652762E951A.roa
File: 2D85E954F3F711EF9E64E652762E951A.roa (raw, json)
Hash identifier: b58Ewq0t4myIo0oIM0m6JhuzCsFu7P+8VhFQMn9mQWs=
Subject key identifier: 0D:9C:A8:80:14:40:9F:0F:8F:87:83:7B:09:27:87:C5:EA:FD:19:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D85E954F3F711EF9E64E652762E951A.roa
Signing time: Wed 26 Feb 2025 04:07:22 +0000
ROA not before: Wed 26 Feb 2025 04:07:18 +0000
ROA not after: Thu 19 Feb 2026 04:07:18 +0000
asID: 984
IP address blocks: 154.203.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90309 (0x160c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 04:07:18 2025 GMT
Not After : Feb 19 04:07:18 2026 GMT
Subject: CN=67be937a-0628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:67:0c:6b:64:21:ae:15:5e:f5:9e:a4:79:3e:
8c:fd:0a:fa:2e:d2:e7:eb:9b:db:ec:6d:4d:53:8f:
02:1f:80:d9:b4:43:10:d7:99:ca:ed:ba:fc:42:8d:
97:d3:88:26:fe:02:c6:c2:ae:4c:76:a2:97:bf:64:
92:45:18:cc:2f:7f:a0:d7:a8:68:78:90:40:a7:e0:
df:be:15:84:57:3f:3b:2e:d3:e2:2a:b8:a6:00:7f:
61:ab:14:25:da:44:7e:36:be:3f:95:ee:30:47:d0:
54:22:b7:cd:06:80:2d:a4:c1:42:3d:81:04:a0:80:
52:86:98:af:cf:e9:a9:c4:66:09:23:be:03:72:e3:
f3:a5:ff:bf:fe:a1:59:33:66:7d:84:5c:be:53:40:
6d:9b:0b:09:54:de:80:40:13:f6:cd:ea:4f:d1:e2:
68:06:fd:df:45:8d:6d:21:cb:09:b9:03:e7:2f:cf:
99:f0:5d:6d:dd:40:f5:3b:75:e0:b8:c2:64:74:4b:
bc:10:65:ab:89:bb:43:78:a1:fa:34:53:06:1d:15:
70:b5:d9:6b:78:d0:d5:f0:29:da:e8:0e:1d:b3:e0:
71:c8:e1:1b:e8:7a:0f:88:e8:d5:f5:27:d5:48:28:
15:bb:b6:ae:0e:50:cc:d3:48:02:e7:22:86:31:bf:
42:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9C:A8:80:14:40:9F:0F:8F:87:83:7B:09:27:87:C5:EA:FD:19:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D85E954F3F711EF9E64E652762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.122.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:85:ce:c8:ec:0b:a9:a6:81:5d:f8:b6:bf:a6:ed:5a:c5:fe:
dc:91:a0:b0:ad:19:08:11:ff:d9:0d:29:68:a2:e7:20:48:a2:
80:09:8a:bb:9c:00:8d:d7:3e:ed:f8:68:e4:a1:7b:e8:b9:8c:
fb:76:c7:f9:9f:1b:0a:66:1a:35:28:da:5d:cc:8e:79:33:e5:
63:9c:0c:7a:e2:9a:42:ec:f8:69:a5:40:8c:84:df:f0:45:a1:
44:fa:41:4d:36:60:db:5a:d9:9d:fb:d7:87:4a:0b:9e:96:f6:
c3:9e:55:77:15:48:3d:c4:34:34:36:44:d8:e8:bd:db:00:10:
ec:e5:fd:89:b3:60:96:2d:8c:8b:f1:14:7e:67:96:f3:c0:d7:
75:5b:68:4b:84:07:92:62:04:1b:f8:7b:ca:fc:b9:66:01:04:
76:48:b5:d4:c0:a8:cb:18:40:e8:31:e4:da:ce:d4:35:4f:7b:
21:59:7e:80:6a:73:ce:2a:2c:9d:ca:a1:79:9f:6c:e2:aa:75:
64:ff:1b:34:8b:d3:a6:d0:f4:4b:e9:41:5f:77:15:1f:b7:ff:
b0:8b:89:fb:f5:2e:0e:b4:23:3e:01:a4:e4:33:a0:42:1e:bd:
83:43:a8:2d:9a:24:08:34:02:e3:99:ab:37:ab:88:9a:79:26:
fe:6a:6f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:43 2025 by rpki-client