Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5466D834F3DA11EFB4906075762E951A.roa
File: 5466D834F3DA11EFB4906075762E951A.roa (raw, json)
Hash identifier: hsHh2PTT+8vqCXS7t7y5s+NMKi7Z4gYsKpYOATkbAi8=
Subject key identifier: 6B:08:C1:6B:C5:93:90:85:C8:AB:04:FD:05:46:C3:34:DB:3A:9D:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016045
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5466D834F3DA11EFB4906075762E951A.roa
Signing time: Wed 26 Feb 2025 00:40:52 +0000
ROA not before: Wed 26 Feb 2025 00:00:48 +0000
ROA not after: Thu 19 Feb 2026 00:00:48 +0000
asID: 984
IP address blocks: 154.92.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90181 (0x16045)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 00:00:48 2025 GMT
Not After : Feb 19 00:00:48 2026 GMT
Subject: CN=67be6313-0228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:74:df:10:5d:48:20:63:4b:8c:9f:1a:24:
50:4d:ca:e3:1e:83:c8:1a:0c:32:29:76:f9:d2:84:
1f:75:7e:02:d5:34:e5:68:70:2b:36:4e:18:18:8f:
01:25:35:70:76:30:71:b5:f4:67:06:78:53:3d:7c:
3b:b0:87:bf:46:13:f6:c1:fb:5b:5a:7e:e7:6c:16:
00:98:b2:e8:a6:dc:50:9e:3a:05:e0:6e:75:4b:2b:
e1:dd:9b:36:d6:6d:36:c8:6a:82:07:1a:cf:54:3b:
1f:4d:dd:50:35:99:9b:f9:65:99:58:f5:32:52:04:
b7:b4:ff:f8:5a:0d:1c:64:6b:04:99:9b:fb:f9:22:
e2:10:a8:62:e9:3a:06:de:87:c1:a9:b5:87:91:a3:
8f:9b:38:e3:78:4d:9e:1f:73:11:e7:1b:6e:15:a5:
87:58:65:6f:6d:b7:b1:c8:87:72:be:fa:8d:c9:6a:
c6:c7:8b:14:28:7e:13:24:4a:15:5b:e5:db:81:d8:
60:83:5d:eb:f9:29:7f:82:35:9d:c0:e4:16:3c:d9:
4b:2f:d3:5b:de:3c:ba:ed:c8:8b:b6:a5:1f:87:b9:
52:0a:52:d2:c0:12:6b:57:cc:c1:6a:34:45:dc:7d:
56:36:47:0d:fc:cd:12:d8:06:9f:1f:a3:73:f2:b8:
5a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:08:C1:6B:C5:93:90:85:C8:AB:04:FD:05:46:C3:34:DB:3A:9D:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5466D834F3DA11EFB4906075762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.224.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:30:72:00:df:08:8c:30:74:a4:87:ce:62:cb:29:e1:ab:59:
ae:49:46:ba:47:32:a4:13:2c:b3:28:62:8e:07:a2:2d:98:f3:
62:fb:fe:4d:13:4c:8e:d0:83:92:c9:ca:bc:3b:69:13:25:9d:
9b:53:dd:7b:d7:c5:62:64:bd:9e:db:5f:b2:9c:be:d1:ea:68:
4c:5f:aa:f9:29:1e:4d:08:fa:7e:d0:8c:03:27:a3:f0:d9:b1:
c3:a6:80:99:e0:ac:91:e3:41:ec:bc:4e:3e:c7:71:e0:8c:3c:
4b:d0:e4:ec:eb:74:3d:8e:5b:f6:e9:d6:45:8d:2a:56:6d:a1:
cc:fd:e2:c3:85:9a:f7:e3:7f:2a:2e:58:d9:f1:3d:5d:27:40:
36:b9:1a:34:2a:92:89:90:5e:e9:6b:45:43:c9:b9:a5:77:34:
be:16:f2:13:df:6c:b0:ab:1e:03:f4:22:5d:de:fc:33:cd:27:
3a:60:07:22:c0:71:59:1a:5d:0e:a5:32:18:87:96:99:da:f7:
9e:b8:3b:f5:0f:3b:fc:9e:31:98:cc:9d:11:39:57:bd:ed:f3:
7e:bf:07:ec:a3:b7:0a:d7:91:2b:47:5e:1c:e5:d6:e0:a6:f5:
68:a6:34:c4:98:75:79:19:8d:da:47:a1:51:3c:ab:77:e6:ea:
ac:60:b1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:13 2025 by rpki-client