Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E73FCD4F44011EF8661F646762E951A.roa
File: 4E73FCD4F44011EF8661F646762E951A.roa (raw, json)
Hash identifier: RfoYZ88ayQRyUmg4GGnsc/Mq7hzzilmYF2o/wxq0P+E=
Subject key identifier: BA:84:D6:05:09:7A:C5:44:1F:AA:9D:36:CB:CC:F9:02:1E:E1:4A:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016354
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E73FCD4F44011EF8661F646762E951A.roa
Signing time: Wed 26 Feb 2025 12:50:50 +0000
ROA not before: Wed 26 Feb 2025 12:50:47 +0000
ROA not after: Fri 20 Feb 2026 12:50:47 +0000
asID: 984
IP address blocks: 154.83.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90964 (0x16354)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:50:47 2025 GMT
Not After : Feb 20 12:50:47 2026 GMT
Subject: CN=67bf0e2a-ee02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:ff:bb:e4:1e:f8:96:fb:f9:08:d4:8c:4f:
be:d9:21:e1:ca:7f:3b:53:55:66:11:71:8e:f5:30:
37:05:6b:d0:e7:b7:ed:f7:ef:12:80:2a:d3:14:e4:
87:60:45:50:8f:d5:5e:8c:b5:49:b0:d4:d7:95:1c:
f6:33:0d:29:85:94:bb:ff:ca:77:4a:52:16:3d:86:
5c:ab:22:03:14:c7:dd:30:c0:ba:36:91:ef:a6:54:
57:9b:79:56:31:6a:a6:d8:b7:c7:02:f7:ef:28:6c:
3e:a4:8a:c7:25:84:08:b3:94:fa:42:53:4d:54:17:
ce:af:d8:ef:1e:b2:95:66:41:b7:0d:81:a9:69:64:
ec:8e:86:60:c8:bb:9d:f5:0b:f2:a3:5b:89:06:fa:
fc:3c:b7:50:73:5e:f9:f6:28:6c:ab:b7:c3:1d:79:
ba:87:1f:57:5d:52:1a:17:4a:a7:77:9e:5c:12:8f:
91:1a:b7:e7:4d:9a:17:fd:1f:ff:5a:49:3b:f6:e6:
82:64:b0:dc:be:e2:02:1a:6d:6b:aa:a1:46:20:ff:
ae:b4:88:91:30:e6:16:7d:01:cc:57:0d:63:d2:c7:
4a:ac:bb:98:22:78:8a:ee:e2:be:b4:0d:4f:25:81:
b6:68:a4:2b:57:4f:e7:52:51:11:12:72:85:d8:10:
8c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:84:D6:05:09:7A:C5:44:1F:AA:9D:36:CB:CC:F9:02:1E:E1:4A:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E73FCD4F44011EF8661F646762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.144.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:f3:e9:d8:ca:da:67:60:da:d5:6e:7c:cd:8c:4a:75:6d:24:
76:ac:0f:06:94:62:58:cd:aa:8c:7e:c2:ae:3d:2b:7c:fc:a8:
1d:04:92:db:7b:64:5f:35:f0:a5:db:84:de:98:0b:80:3e:7b:
9e:26:70:4c:bb:2b:dc:c2:40:04:d4:ab:b1:c3:38:c0:bc:ea:
05:c0:70:6c:4d:fd:e9:59:db:7a:59:64:38:8c:4e:7e:72:01:
d6:d6:12:4c:74:cb:82:19:fe:34:26:e1:8b:0a:7f:ca:f6:57:
0e:2c:6d:11:ec:a5:0f:de:95:c1:d0:72:c6:9a:e9:3c:d2:f4:
35:30:00:9e:10:38:34:73:b6:45:e8:79:e2:d4:9a:9f:cd:66:
da:59:aa:27:3e:05:89:ae:7d:b3:07:76:e7:f3:f3:3d:fd:ae:
5a:9c:57:c8:b7:89:24:92:84:84:f9:e7:52:f2:1e:85:56:2b:
7c:59:e3:c1:88:dd:72:56:b2:6f:aa:99:9d:a2:86:3c:13:d2:
13:46:81:9b:54:ba:e6:63:f8:ba:57:b2:cf:88:d1:65:91:3a:
5b:13:4a:a8:f3:6b:da:43:9e:22:05:42:57:72:13:0f:b0:ab:
9f:2d:4b:88:2f:6b:8e:88:ad:cd:d2:9c:e7:b0:ec:2f:a6:b3:
47:a9:15:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:49:15 2025 by rpki-client