Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/524CE2CAF44611EFAA906272762E951A.roa
File: 524CE2CAF44611EFAA906272762E951A.roa (raw, json)
Hash identifier: ENKiTmukv7nc5NSktY/IJ5eGjdQpKLZosjieMIxCgeo=
Subject key identifier: 81:90:57:6D:BE:29:EC:EF:C4:DD:1B:D3:00:6D:6D:1A:F9:77:EE:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/524CE2CAF44611EFAA906272762E951A.roa
Signing time: Wed 26 Feb 2025 13:33:54 +0000
ROA not before: Wed 26 Feb 2025 13:33:50 +0000
ROA not after: Thu 19 Feb 2026 13:33:50 +0000
asID: 984
IP address blocks: 154.210.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91091 (0x163d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:33:50 2025 GMT
Not After : Feb 19 13:33:50 2026 GMT
Subject: CN=67bf1842-0ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:04:00:a8:f3:52:77:e5:d7:e3:0a:11:7d:
80:9c:1b:48:69:d4:af:c1:f4:d1:ef:a1:56:78:4c:
a5:ca:43:d2:45:bb:a0:db:cf:7c:07:8e:c5:29:70:
d8:65:05:7d:33:5e:68:17:75:4a:c5:63:48:6f:4e:
81:33:6b:24:6f:30:1c:1e:b4:93:ee:12:64:bf:ed:
15:a1:93:74:b3:e4:d3:61:13:cf:8a:30:c3:83:da:
92:08:a5:1f:b7:0a:66:cd:7e:a5:0b:01:f5:c6:9a:
6f:d5:fc:1e:7e:1c:3d:15:e0:5a:37:b6:52:5a:8a:
3f:6a:5e:3d:39:36:43:a2:d4:35:c8:cc:96:2c:98:
95:bb:d5:2e:f4:60:ff:ab:ff:5a:56:dd:35:ee:ea:
70:be:00:45:61:57:4c:1b:ec:ec:da:c0:aa:70:fa:
9e:3a:25:2f:b6:cf:a5:63:e3:b3:c8:ae:74:f3:ab:
bc:02:c9:79:a0:f7:3f:48:98:22:14:41:93:7f:f5:
9f:98:24:a6:70:f8:8b:6a:fc:27:0d:89:92:52:a3:
9e:c4:8b:c2:70:bf:47:10:a3:c3:58:97:0a:b8:22:
0b:ca:c6:b0:eb:53:85:c5:f2:da:3f:1a:fa:e7:c7:
7a:79:31:fc:bf:ee:c2:f3:af:de:18:b4:85:38:5b:
27:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:90:57:6D:BE:29:EC:EF:C4:DD:1B:D3:00:6D:6D:1A:F9:77:EE:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/524CE2CAF44611EFAA906272762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.32.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:47:bb:fa:e2:63:13:f3:94:95:8c:77:e7:a6:9c:63:9e:86:
db:77:b0:de:62:95:c2:62:13:51:97:c9:1b:c4:08:58:91:17:
c2:1a:e4:d5:c7:bb:5f:02:4c:f9:74:80:18:c9:90:bf:43:78:
77:48:8f:b1:b6:7e:ec:63:28:8e:4a:ab:ac:2d:fc:95:3c:fb:
35:ab:21:e8:be:2c:90:7c:05:14:c1:cf:5b:e0:3d:fd:8b:33:
aa:5a:2c:43:14:79:02:de:d2:3f:40:8e:38:46:9d:84:db:bc:
23:71:dd:ba:f8:ff:c7:7f:db:60:ba:2f:ca:98:73:ea:97:c0:
c2:2a:a3:3a:13:da:1a:df:3f:f6:3e:3c:62:0e:65:56:54:a1:
b4:0c:bc:e8:59:f6:53:f5:32:d4:dd:04:30:ee:4f:bd:de:02:
60:40:77:bb:37:01:42:7d:57:ef:8e:48:10:6d:d8:e0:ed:78:
95:1b:cd:9e:2a:be:89:6c:10:9f:32:a5:ea:f0:5a:6c:60:dc:
f0:5a:b0:49:3c:76:3d:86:5c:4c:d5:85:4f:ec:e7:af:1e:59:
1c:3d:a1:ee:49:89:b1:c9:c8:2b:d8:29:16:ea:87:fd:ee:10:
82:14:3a:3f:e2:cd:f1:a3:91:88:eb:73:db:ed:68:af:b8:ba:
e0:72:72:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:07 2025 by rpki-client