Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37438F4CF45A11EFB833007D762E951A.roa
File: 37438F4CF45A11EFB833007D762E951A.roa (raw, json)
Hash identifier: afzgRyq5P27rJzHYhJDRMc44xZcT6nD/2baVWVajnj0=
Subject key identifier: 1F:6B:92:25:E7:FA:AF:A9:86:3E:29:70:BD:23:BD:0F:97:AF:54:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37438F4CF45A11EFB833007D762E951A.roa
Signing time: Wed 26 Feb 2025 15:56:18 +0000
ROA not before: Wed 26 Feb 2025 15:56:08 +0000
ROA not after: Thu 19 Feb 2026 15:56:08 +0000
asID: 984
IP address blocks: 154.210.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91389 (0x164fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:56:08 2025 GMT
Not After : Feb 19 15:56:08 2026 GMT
Subject: CN=67bf39a2-838d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c6:f4:c0:da:40:d1:75:3b:d0:14:10:6e:91:
45:59:4e:10:26:90:8d:85:47:fa:f5:34:85:80:6c:
a4:80:e9:a5:90:6b:92:07:26:ed:4d:65:a2:b2:d2:
bf:92:a1:f4:97:cc:b0:3b:45:69:b0:1e:b7:81:93:
c6:b9:09:58:9d:43:e3:1b:f5:dd:f2:dc:1e:95:a5:
ed:53:b3:1e:9b:5e:b3:e8:15:15:5f:62:0d:d9:4a:
b4:ef:9c:e5:d0:3c:7d:61:69:d2:77:83:ff:98:33:
00:b6:fd:99:9f:88:9f:58:b3:5e:f0:90:29:28:6f:
37:d5:9a:2b:1d:b2:89:11:13:b5:63:6f:24:52:9f:
77:1a:60:dd:e0:7c:0e:c1:0c:04:34:a3:2a:c3:07:
da:db:e7:e2:d6:72:23:37:90:e1:19:9c:4d:d4:e6:
e5:ca:e4:16:3c:3d:75:2a:03:16:f8:b4:5f:50:75:
e5:b9:e8:8e:b0:7d:e2:64:17:cd:48:5e:21:57:00:
a9:0f:c1:c8:3f:1b:bc:22:6c:49:33:05:ce:3b:1b:
39:e5:a2:3d:0b:d0:14:8a:d1:2b:0a:b7:e3:c4:81:
5c:d0:16:44:ea:89:87:d7:01:03:97:08:6c:42:99:
bd:ef:7c:e6:a6:43:0e:3e:90:e8:4c:53:dd:de:e1:
f3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6B:92:25:E7:FA:AF:A9:86:3E:29:70:BD:23:BD:0F:97:AF:54:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37438F4CF45A11EFB833007D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.106.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3d:34:d4:3e:01:06:79:1e:2c:e2:eb:17:98:a5:0c:4a:c2:
c4:9b:d5:65:2d:6c:a1:ec:b8:40:f8:88:4f:94:96:14:f8:d6:
e2:a2:4a:04:98:40:ae:32:2b:62:3d:f7:0d:b4:03:f1:eb:af:
c7:a4:c0:bf:35:71:f2:f2:39:f3:da:3d:a2:ef:65:31:38:c9:
55:b9:72:c3:6d:21:e8:4e:78:0c:d0:70:20:67:6c:5e:60:f9:
8b:66:16:c9:0a:c9:99:45:4d:0e:1d:55:31:6f:7b:c8:3d:08:
5c:67:3b:86:08:f6:42:a1:ca:12:a6:6d:28:a9:3b:91:a5:9b:
dc:d4:a2:21:b9:f6:f3:3f:9e:17:fc:f0:4d:9c:e6:e4:51:53:
c3:02:16:6c:f8:c0:17:76:aa:27:62:ad:ff:3c:b2:c8:fc:85:
2a:a2:b3:58:ee:6c:fc:17:07:61:a3:81:84:b4:f2:b2:4e:7b:
56:06:3c:a3:74:cc:66:cd:41:35:6f:a2:e6:73:a0:4c:e6:8f:
b7:5a:4f:6d:b1:65:fb:5b:e6:2d:ca:22:e9:af:8f:f8:b6:46:
b8:24:b1:2b:da:67:df:34:de:c0:a7:08:63:b8:4e:39:e5:75:
39:04:cf:45:50:cd:8e:06:35:bb:e6:4f:a9:2f:34:3d:9c:19:
24:90:2d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:34:57 2025 by rpki-client