Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3363B346F3D511EFA0EF1155762E951A.roa
File: 3363B346F3D511EFA0EF1155762E951A.roa (raw, json)
Hash identifier: yN4IsayrY62PBwNcMxQIYywzUotvk6trNQbv0X/BU7E=
Subject key identifier: B4:A8:6F:9D:10:1B:98:49:7E:94:F2:3A:5E:9F:4B:60:0A:A8:43:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016029
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3363B346F3D511EFA0EF1155762E951A.roa
Signing time: Wed 26 Feb 2025 00:04:09 +0000
ROA not before: Wed 26 Feb 2025 00:00:05 +0000
ROA not after: Thu 19 Feb 2026 00:00:05 +0000
asID: 984
IP address blocks: 154.89.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90153 (0x16029)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 00:00:05 2025 GMT
Not After : Feb 19 00:00:05 2026 GMT
Subject: CN=67be5a79-faf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:80:3c:7f:5a:d9:3c:d6:d5:e8:48:ba:1d:05:
58:1b:07:9c:92:2d:1a:96:8f:ab:82:b2:61:ef:d7:
9c:2f:60:6b:57:62:52:b3:35:7a:07:96:93:c2:fe:
f5:e0:62:08:ee:f9:60:3e:9a:2d:00:b0:64:ab:45:
81:77:70:89:f9:29:be:e9:62:19:26:74:18:ec:14:
71:12:64:dc:d3:2e:65:7c:c5:82:ab:8d:2c:e4:6f:
b8:5b:18:b3:7e:2f:10:b5:9b:17:6d:f8:19:da:a0:
3e:56:85:76:43:3b:c7:4f:08:dc:45:54:8d:65:0c:
e5:a1:9c:3e:76:c5:9d:e6:ee:20:5e:91:84:1a:91:
6d:65:df:e0:55:5c:c3:dd:e9:10:e2:49:52:c0:14:
43:58:f6:78:09:a9:e3:44:65:66:ad:cc:18:4f:94:
26:81:6a:3c:66:ef:d7:30:8d:cb:08:ff:12:7d:d5:
40:f1:43:9c:c2:7a:1b:9c:d2:66:d6:da:1d:c3:7f:
b2:31:42:d6:1c:5b:1a:93:41:15:5d:ec:e8:8c:8b:
02:6a:fc:af:5b:10:54:85:c3:00:60:56:b9:af:1e:
9d:69:cd:99:1e:e4:1a:43:70:a4:2d:ee:78:58:d0:
dd:17:0d:21:37:ae:a5:68:a3:d1:43:0a:db:63:2e:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A8:6F:9D:10:1B:98:49:7E:94:F2:3A:5E:9F:4B:60:0A:A8:43:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3363B346F3D511EFA0EF1155762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.227.0/24
Signature Algorithm: sha256WithRSAEncryption
31:81:89:62:88:df:d5:cf:f7:ff:c9:3d:93:2c:a4:c9:a7:22:
a1:cc:59:36:77:6d:46:31:9b:26:90:7d:78:a7:a6:70:71:a2:
09:15:01:63:fa:af:d0:37:94:3c:d7:5c:f0:d0:fe:20:80:bc:
78:61:d9:fa:ab:86:af:ea:2d:23:bc:19:d8:61:e9:3d:72:87:
d9:ae:82:8b:1c:e1:71:a7:1f:ec:e1:49:6e:0c:c6:07:ab:d7:
e8:90:a7:e9:0d:7e:07:07:cb:73:85:87:2f:48:69:00:d8:55:
8c:be:79:77:90:3f:54:2d:b1:2a:28:39:d1:51:8a:2f:66:aa:
c4:c8:4a:55:44:90:35:02:cc:12:88:c1:8d:7a:ee:5e:51:74:
fd:c7:c2:66:3d:82:da:1b:2d:73:99:6f:b8:7e:da:ae:31:3e:
96:a2:b1:59:30:ff:67:9b:a7:71:f1:24:bd:b1:ac:a1:81:90:
f6:8b:00:52:99:55:65:c5:69:eb:4e:59:8e:9a:13:7d:86:d5:
6d:74:bb:b0:22:b0:5c:2c:b1:84:86:15:35:79:fb:cc:26:f8:
32:f5:d2:8c:87:09:27:36:77:ff:58:ae:12:8e:9a:90:9a:10:
2c:dd:bb:32:85:c4:21:3e:90:c4:09:30:f4:2e:67:4b:45:1d:
03:b7:cb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:47 2025 by rpki-client