Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/498118DAF41B11EFABB76843762E951A.roa
File: 498118DAF41B11EFABB76843762E951A.roa (raw, json)
Hash identifier: XY9yGd9u4rVs+IsbQvhawlQ6tz6OkPEaLj6oLvtr+Dc=
Subject key identifier: B0:B5:9C:5A:0E:F2:FD:7F:7F:B6:2D:78:5C:C5:EC:CB:58:CE:67:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016153
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/498118DAF41B11EFABB76843762E951A.roa
Signing time: Wed 26 Feb 2025 08:25:51 +0000
ROA not before: Wed 26 Feb 2025 08:25:47 +0000
ROA not after: Thu 19 Feb 2026 08:25:47 +0000
asID: 328608
IP address blocks: 154.200.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90451 (0x16153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:25:47 2025 GMT
Not After : Feb 19 08:25:47 2026 GMT
Subject: CN=67bed00f-6a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:51:38:92:74:a5:68:c2:f3:9f:26:a4:fc:
37:c5:d7:0a:13:4c:6b:d5:99:af:90:5d:52:57:89:
bc:8c:6e:b7:86:17:a3:8a:1b:aa:a9:33:9e:f2:b4:
7b:9a:f7:40:3b:d0:3f:94:2d:ca:3d:44:dc:b4:09:
20:fe:49:ad:c0:2d:90:2a:04:ac:0c:b4:ec:e0:7d:
ea:6c:be:d5:d0:4d:74:f7:4a:96:aa:2f:bf:20:f9:
15:d4:f4:bb:78:35:22:a4:cc:de:85:82:84:32:79:
53:5c:b1:14:72:2a:74:7c:48:4c:df:c6:f1:d4:37:
79:f5:9e:57:20:97:69:e5:06:8a:13:f7:6d:01:36:
c6:77:d0:22:2a:fb:d2:1b:08:a3:a1:64:2c:ab:0e:
4c:f5:71:31:50:59:29:96:5a:83:f8:28:6a:f2:36:
a8:98:3c:1d:85:21:9c:a3:de:d1:95:cb:05:da:0b:
09:4e:34:e9:11:4d:ef:86:c3:4a:6c:07:c9:1c:f0:
01:ba:40:0f:2d:5b:1b:03:a0:96:83:15:3d:fa:be:
36:66:9b:1a:0e:7c:07:8a:9b:b8:48:eb:3e:f4:01:
63:3e:44:9a:41:84:62:37:be:10:c2:08:0f:ba:dd:
a5:63:68:c3:91:cc:b1:f6:69:0f:32:f8:d9:32:4c:
92:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B5:9C:5A:0E:F2:FD:7F:7F:B6:2D:78:5C:C5:EC:CB:58:CE:67:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/498118DAF41B11EFABB76843762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.185.0/24
Signature Algorithm: sha256WithRSAEncryption
99:d5:93:8a:be:7b:4a:5c:b7:dd:53:e4:5b:2b:0f:17:ea:2a:
05:72:34:63:24:5f:0b:c9:b9:9b:fa:e8:c6:ca:72:1d:ca:5d:
ca:c7:ae:43:78:81:de:1a:0d:7f:2a:e2:00:01:13:34:33:de:
3b:d9:d5:08:ee:11:f6:81:e7:64:c3:41:d7:a0:03:32:18:bf:
cf:8d:33:5d:05:4f:12:0b:6c:7c:6e:c6:4b:77:94:06:c6:c6:
84:9f:3e:b9:85:c8:7d:f2:36:5a:7a:54:3e:5f:71:bc:2c:76:
7a:00:cb:84:ae:c5:5e:b7:9a:0b:af:fd:8d:ed:b2:15:49:f4:
de:ab:fe:0d:53:26:2f:b6:6d:3c:8a:14:20:4d:5a:05:54:14:
40:13:cb:03:f3:ab:ad:ac:22:e6:d4:dc:64:a9:67:ef:13:42:
10:21:02:3f:b7:84:8d:74:f8:53:ce:6e:7e:c8:c0:37:56:50:
fd:5a:2d:74:f4:f4:17:ed:72:56:84:a2:6b:a1:c4:cb:01:15:
52:14:13:8a:75:31:63:73:e3:c3:4b:c2:7b:31:15:8c:ef:e6:
c6:1a:c6:c8:35:92:15:7d:8d:6e:31:ef:24:9b:10:ad:ce:b5:
7d:ef:50:93:05:2d:41:c9:f1:f1:a5:22:07:4d:81:d2:2f:bc:
ac:fa:e6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:10 2025 by rpki-client