Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5117B03AF61011EFAA5E2043762E951A.roa
File: 5117B03AF61011EFAA5E2043762E951A.roa (raw, json)
Hash identifier: +ZTerAOG+0u6i5M7YEescVICP1JBeg+OQzASTwxaFYY=
Subject key identifier: D1:17:ED:D7:8A:1F:BF:F9:26:B7:B5:13:6B:92:9F:3D:F0:F3:19:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016BED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5117B03AF61011EFAA5E2043762E951A.roa
Signing time: Fri 28 Feb 2025 20:12:21 +0000
ROA not before: Fri 28 Feb 2025 20:12:17 +0000
ROA not after: Sun 13 Apr 2025 20:12:17 +0000
asID: 138915
IP address blocks: 154.206.90.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93165 (0x16bed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 20:12:17 2025 GMT
Not After : Apr 13 20:12:17 2025 GMT
Subject: CN=67c218a5-1d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cf:6a:ea:cf:94:55:bb:51:43:00:23:95:0d:
13:26:e8:5b:84:1a:bd:dd:b1:31:65:c7:a4:48:fb:
0b:44:81:d9:6b:af:eb:f0:76:bd:8f:b4:94:67:db:
46:1b:11:5c:f0:55:7d:49:9d:42:e7:9a:fe:35:b1:
99:68:53:d6:e5:ad:e6:47:c0:d5:b0:e8:1d:a1:27:
ba:1f:bb:13:40:e6:7c:48:72:90:f1:51:f5:9c:c9:
46:88:47:96:9a:ee:20:f5:90:54:c7:c7:1b:71:91:
0b:d5:30:77:ef:4e:76:ae:71:46:98:5b:38:df:90:
dc:82:83:65:25:9d:1b:6c:d0:e0:51:13:05:21:65:
f0:3d:4f:ae:c4:3f:11:64:4f:55:3f:ff:1d:94:6f:
b6:0a:74:09:da:71:85:ec:fa:13:37:ec:43:78:ae:
83:5c:8e:bd:a8:60:c5:6e:a1:7d:13:65:b0:9e:88:
54:7c:59:c0:51:08:49:34:46:6c:c0:8f:20:fa:47:
27:85:49:88:1c:4b:99:80:fe:02:ee:20:17:99:8c:
5a:c7:70:a8:a1:34:95:4e:85:3a:83:56:d7:b0:84:
a6:03:95:a0:3d:2f:0d:1a:b9:c2:63:ff:92:ba:01:
93:38:ae:4f:77:b3:49:9a:a7:f5:89:b0:35:0a:68:
57:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:17:ED:D7:8A:1F:BF:F9:26:B7:B5:13:6B:92:9F:3D:F0:F3:19:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5117B03AF61011EFAA5E2043762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.90.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:e7:d1:58:77:43:b8:9c:01:5e:64:d0:a4:16:50:e3:d0:11:
14:9f:19:f5:0b:e4:1f:1e:a6:ec:7e:e9:2c:0a:65:49:3c:20:
78:ae:91:73:34:35:e5:ea:59:97:db:35:79:24:da:ed:3e:0e:
6a:46:58:27:90:7f:eb:43:fd:bc:74:21:c8:e4:17:9f:ef:1c:
5b:60:ee:43:bc:64:80:d2:71:da:2e:02:45:ae:0d:7d:ea:c9:
77:51:7d:23:fc:6b:5a:78:4d:b3:88:fc:18:ee:c7:40:e0:8f:
04:43:4b:6b:78:62:f1:27:45:a6:71:27:77:58:53:98:3d:a4:
55:b3:54:83:c3:73:0e:97:45:b3:e3:c5:d1:7e:ed:b9:d8:b8:
c8:11:7b:a1:1f:05:39:9e:db:b9:04:9c:e9:d1:69:74:6f:0e:
0e:e3:00:34:6d:13:2a:a0:95:e7:1f:e5:74:81:c7:7b:18:e1:
3b:9c:8e:d2:2a:cb:5c:7c:ff:33:fc:10:6f:3d:d8:b3:07:26:
aa:dd:4f:06:af:d4:89:30:92:dd:4d:89:f1:ff:85:bc:7e:f3:
1e:24:1a:46:2e:a4:0f:bb:2e:1e:96:a5:cf:e9:4e:5e:fc:ac:
bd:ca:ea:93:0f:ce:2b:dc:7b:64:96:e5:05:5a:d2:ef:46:f8:
1e:c0:61:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:32 2025 by rpki-client