Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/532975AAF68F11EFADC6ECAE762E951A.roa
File: 532975AAF68F11EFADC6ECAE762E951A.roa (raw, json)
Hash identifier: ZvWy5EYp4H9Kb5vgG8pNAPw09FWrgOuguTk17geqwO4=
Subject key identifier: C7:96:5C:15:3F:8E:A3:79:EE:A2:F5:EA:29:15:FB:88:78:A7:84:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016DFD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/532975AAF68F11EFADC6ECAE762E951A.roa
Signing time: Sat 01 Mar 2025 11:21:31 +0000
ROA not before: Sat 01 Mar 2025 11:21:27 +0000
ROA not after: Sat 05 Apr 2025 11:21:27 +0000
asID: 203020
IP address blocks: 154.207.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93693 (0x16dfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 11:21:27 2025 GMT
Not After : Apr 5 11:21:27 2025 GMT
Subject: CN=67c2edbb-9446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:82:15:94:09:5d:d1:90:90:84:33:28:df:db:
d7:d9:df:39:46:3d:81:75:65:02:e7:d4:08:07:86:
5c:5f:ba:8c:70:1f:44:3c:21:a6:ba:e1:20:3f:28:
3c:1d:c0:27:2a:28:c8:23:e5:f7:44:c6:c1:1b:7b:
7d:58:25:06:22:17:8f:28:a9:1e:d8:0c:01:9c:c7:
61:f2:28:d5:79:e4:c0:2b:90:f7:bf:f4:08:09:2a:
19:ab:14:b0:87:5a:59:d2:b1:c0:06:f4:af:cb:42:
42:b3:f2:ed:cf:67:0f:35:33:0a:92:b0:b3:70:41:
bd:e0:54:a8:5b:37:49:b3:c9:08:3d:0e:0f:71:21:
aa:1b:b6:ec:be:b5:2e:52:8d:a3:21:b5:92:ed:8e:
12:72:16:b9:be:a8:fb:85:ef:73:82:7d:29:5a:bc:
58:b5:08:af:4f:1f:ab:db:b3:11:c9:7b:e5:9d:a3:
0c:18:d1:47:10:13:46:9d:72:12:bf:44:90:07:c0:
2d:b6:0c:46:00:56:0f:2e:12:15:9c:46:d9:cc:d0:
42:3d:1b:08:65:9a:52:67:fb:71:f8:b0:71:6d:3d:
2d:e8:0d:43:b9:10:fc:a1:bc:8f:95:46:91:f4:16:
45:2e:75:b5:8c:24:10:93:a3:85:c8:e0:0e:07:b5:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:96:5C:15:3F:8E:A3:79:EE:A2:F5:EA:29:15:FB:88:78:A7:84:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/532975AAF68F11EFADC6ECAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.216.0/22
Signature Algorithm: sha256WithRSAEncryption
01:e0:03:4a:a5:03:56:d1:fb:f4:9b:8d:f1:0d:da:29:cc:c3:
b2:76:2d:5d:3c:99:35:a5:01:ca:77:3d:2f:95:30:a8:12:0e:
47:04:d2:5d:f8:31:47:fe:89:ae:94:ad:e6:bc:6e:ca:27:d3:
c3:4a:52:fc:b2:09:5c:e8:d8:2d:50:9a:87:e9:94:15:0f:c0:
1a:c9:51:91:62:e6:dd:54:80:30:23:88:ff:f2:ea:54:0f:56:
45:ad:36:1c:e4:e9:6c:4f:b5:8c:a7:fe:f0:5d:99:20:37:3e:
2d:d9:53:eb:32:dd:0c:2d:d5:28:d6:f8:4d:d2:0c:89:59:4c:
16:2d:f7:71:7e:4f:8b:24:66:e9:ba:83:af:00:17:4c:b1:cb:
74:b1:43:11:11:2e:1f:eb:b6:53:d3:4d:f3:27:63:e7:86:4c:
68:43:4c:ec:de:b1:9b:71:54:51:1b:a5:f5:ab:25:db:5b:56:
ff:bc:67:d1:db:3a:42:8f:48:f0:21:14:55:64:b8:21:f5:08:
a9:87:fd:f8:a4:c5:c6:9f:02:97:e1:48:b8:a6:f5:3a:73:26:
80:1e:f8:26:df:75:67:c9:32:54:95:67:cc:4e:e4:f4:5f:64:
f7:7e:ad:31:57:4a:25:a1:de:18:30:96:b3:92:b7:8a:98:7f:
7e:f5:b4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:13:05 2025 by rpki-client