Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33187130F42811EFA17C8A9E762E951A.roa
File: 33187130F42811EFA17C8A9E762E951A.roa (raw, json)
Hash identifier: 2UZvinfE9OUnttwyCpgePF3437KcNGRXXvb7kSj93TM=
Subject key identifier: 9A:EC:75:8E:7B:E5:27:30:AA:A0:86:6A:8F:44:90:B3:B9:5E:90:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016212
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33187130F42811EFA17C8A9E762E951A.roa
Signing time: Wed 26 Feb 2025 09:58:16 +0000
ROA not before: Wed 26 Feb 2025 09:58:13 +0000
ROA not after: Thu 19 Feb 2026 09:58:13 +0000
asID: 984
IP address blocks: 154.206.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90642 (0x16212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:58:13 2025 GMT
Not After : Feb 19 09:58:13 2026 GMT
Subject: CN=67bee5b8-b54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:62:e3:d0:f3:a3:9f:6b:14:b4:dc:a2:41:4a:
8a:32:c3:c6:9f:a9:45:fe:97:79:75:c9:d2:ba:d7:
b7:fc:83:b4:10:14:00:01:61:bd:34:33:9f:13:3b:
f4:9d:f2:f7:5b:03:95:aa:98:10:8d:1e:48:94:a6:
06:28:15:62:51:a5:68:3b:0d:fa:29:fa:bf:a6:e3:
de:1a:26:cd:aa:3b:25:83:bc:4a:43:dd:6b:12:f3:
ec:7b:52:03:02:bc:d7:60:43:3a:59:e6:db:4e:29:
e5:20:3a:5e:8e:7f:75:cd:66:d1:60:db:8c:81:00:
db:23:81:b3:ac:81:83:6f:a7:e2:a2:6d:97:b9:f5:
90:d9:66:cc:49:e8:80:5d:ad:34:f8:1f:d3:69:08:
52:10:3e:5a:05:37:ea:82:f2:6a:d2:bb:bf:57:b7:
1a:50:a4:ac:a6:5a:a8:86:98:c6:41:33:27:68:a5:
40:ad:cd:a8:85:dd:79:50:c3:4d:21:f3:3b:bf:6d:
cd:b2:50:c9:2c:45:1a:81:96:73:cd:3a:10:f6:fb:
34:15:06:5a:23:53:1b:f6:42:42:4a:32:04:47:48:
ef:fb:c4:7b:a2:2a:94:6b:27:d8:e4:7f:d5:7a:eb:
c9:dd:8c:1f:76:9a:70:cf:e4:a0:46:0e:c8:63:ff:
65:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EC:75:8E:7B:E5:27:30:AA:A0:86:6A:8F:44:90:B3:B9:5E:90:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33187130F42811EFA17C8A9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.255.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:69:df:ac:60:98:55:7d:de:23:2e:fb:e5:10:c9:ed:cc:0b:
ca:f8:24:c9:a6:7f:2b:9e:88:3b:9f:27:17:e4:25:d7:13:6c:
94:cd:d3:72:51:a8:b4:1f:a8:ec:9c:5f:72:6f:1a:80:f5:15:
aa:16:93:26:17:4b:34:43:e1:a4:87:90:80:70:59:92:05:96:
03:f0:a9:12:2c:6c:ab:f5:f1:30:80:1f:00:db:f3:5d:a2:6b:
0d:80:b8:08:ab:eb:c2:bf:5c:d4:07:c8:d3:ca:76:a2:5c:70:
8e:d7:53:8a:a1:ea:6e:ae:37:98:6b:ef:5e:fb:86:2d:6b:b4:
07:8d:76:5d:da:3f:16:7f:2e:8f:d2:9c:2a:69:b2:81:e5:42:
dd:c9:7b:13:0f:4e:d9:eb:ff:2a:f1:f8:cd:14:22:59:c1:0b:
25:2f:4c:ce:82:ef:45:a5:dd:3c:2c:b4:2f:00:46:31:05:fa:
82:96:f6:d7:8e:7f:4a:1f:e7:79:d6:51:a3:a8:1b:d5:73:1e:
ff:cf:ee:7e:e3:1d:12:a3:2b:ba:39:5d:39:7d:75:8b:63:85:
28:10:04:7d:3a:a2:d2:aa:25:51:3e:77:43:24:b3:08:df:61:
0e:81:58:47:37:c6:da:e9:81:9a:56:7a:e8:e8:48:70:a4:2d:
f5:09:0a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:34 2025 by rpki-client