Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D7DAE00F45711EF8BF9D56C762E951A.roa
File: 7D7DAE00F45711EF8BF9D56C762E951A.roa (raw, json)
Hash identifier: GK0gI6VGMwYs0ZgK1us05lanmRi69TiNmTLg41LnF1I=
Subject key identifier: 59:45:62:6A:83:0D:A5:D5:08:75:5A:5E:A2:F4:86:5A:88:93:EA:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D7DAE00F45711EF8BF9D56C762E951A.roa
Signing time: Wed 26 Feb 2025 15:36:48 +0000
ROA not before: Wed 26 Feb 2025 15:36:44 +0000
ROA not after: Thu 19 Feb 2026 15:36:44 +0000
asID: 984
IP address blocks: 154.210.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91360 (0x164e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:36:44 2025 GMT
Not After : Feb 19 15:36:44 2026 GMT
Subject: CN=67bf3510-bca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b4:73:68:b2:88:78:cc:39:8a:46:64:f3:24:
4a:09:56:db:26:0f:9a:99:bf:2d:bc:51:b3:30:e7:
cb:50:f2:30:52:b1:54:98:5c:0a:32:45:2b:cf:4e:
91:f2:80:79:7a:39:1a:1b:4c:66:5a:b2:f5:48:c0:
20:67:17:ac:f2:6e:27:14:0b:66:59:93:57:cb:f0:
e5:40:82:84:97:b0:ac:e7:7a:26:5b:bc:32:ac:24:
01:78:79:73:c5:b6:16:5b:6f:ea:8b:63:06:8a:1a:
9e:b5:34:86:b8:c8:5f:5b:13:ef:e0:5d:8b:9e:f1:
61:c5:9f:40:7f:b2:fc:ee:54:84:11:d1:08:91:af:
d7:ee:a8:32:1c:4e:66:1d:10:5f:dd:0d:05:7d:62:
3d:04:6a:98:35:30:cc:b0:48:43:c8:b1:94:cf:5e:
8a:56:77:89:32:57:0b:7b:df:84:cf:38:1b:00:16:
84:d1:6a:e7:75:94:fa:4c:6f:fa:98:4f:b7:3c:d1:
05:dc:a8:d9:26:3d:11:4f:5e:2b:55:b8:80:7c:7c:
10:f8:e1:b7:93:18:eb:e1:4d:a7:68:24:a5:28:7a:
7c:47:82:4d:38:87:f4:c9:0c:00:7f:ea:9a:6b:65:
eb:71:98:0a:b1:ae:bd:28:b2:8d:b7:6f:c4:6c:4e:
2e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:45:62:6A:83:0D:A5:D5:08:75:5A:5E:A2:F4:86:5A:88:93:EA:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D7DAE00F45711EF8BF9D56C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.96.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ca:72:51:15:70:18:f5:c6:83:93:d2:10:95:1a:2e:be:06:
85:47:01:62:92:f8:91:5f:19:6e:67:6b:57:f1:cf:8f:4f:bc:
18:2b:9d:b2:64:be:6a:5a:b8:5a:8d:ba:01:4c:44:88:9c:b3:
22:54:68:68:fd:42:1b:a0:84:71:2a:50:29:4e:95:ff:4f:f3:
02:65:6a:81:43:3f:f3:b3:44:a5:90:f6:be:3a:1d:5a:83:76:
0f:9f:0d:4b:bc:c7:71:ee:7b:8c:90:50:de:7c:ad:2b:44:49:
b3:ad:ab:27:46:8e:8d:46:ae:93:8f:3a:16:10:4e:e9:9e:4a:
84:40:32:3a:17:66:0c:cf:ae:91:55:cd:bc:ff:c8:84:3b:ed:
05:ad:37:fa:21:28:43:e0:19:54:26:b5:38:e5:32:7e:e3:e7:
e2:0e:0d:f8:41:34:61:2c:3e:ef:bb:74:12:07:e5:d8:af:ab:
d6:cc:ef:e4:27:f5:b8:b9:ea:c1:88:42:fa:14:6b:62:70:e0:
25:a7:fb:67:63:3e:e0:9a:50:b3:64:87:38:4c:25:98:4f:6c:
97:78:c2:49:6e:5d:a5:38:f8:c0:c0:75:a7:5d:10:01:46:9d:
05:4f:fe:d2:1b:70:93:85:0d:5a:7d:6b:cc:e3:3e:ed:c6:4c:
21:f1:bc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:06 2025 by rpki-client