Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B1CDD62F43211EF948ABE67762E951A.roa
File: 8B1CDD62F43211EF948ABE67762E951A.roa (raw, json)
Hash identifier: JFTWEyAGs2U6+SZazoDyPnjl5z0SJP6f0WMNUx/3Qb0=
Subject key identifier: 22:E8:9B:71:45:27:0C:58:D3:34:8C:DA:A6:A9:00:2E:8D:67:F2:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01627D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B1CDD62F43211EF948ABE67762E951A.roa
Signing time: Wed 26 Feb 2025 11:12:19 +0000
ROA not before: Wed 26 Feb 2025 11:12:15 +0000
ROA not after: Fri 20 Feb 2026 11:12:15 +0000
asID: 984
IP address blocks: 154.199.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90749 (0x1627d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:12:15 2025 GMT
Not After : Feb 20 11:12:15 2026 GMT
Subject: CN=67bef713-22e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b8:28:dd:86:48:28:e7:3a:99:c2:8b:c4:83:
90:67:b9:fd:1b:f0:a4:84:03:68:7d:a8:5a:33:ba:
37:b2:c3:12:71:5e:19:af:4c:04:c4:c7:32:4e:91:
a3:27:60:c5:86:38:d8:a8:52:f6:c7:cd:5e:5a:6a:
a2:7a:ff:52:20:67:a9:65:dd:9c:09:15:a2:04:7b:
55:8c:4a:34:f6:2f:00:b4:59:a4:71:10:75:cd:e2:
01:1e:73:ed:57:2a:d1:05:76:5c:62:47:9b:12:7f:
f6:c4:78:d8:bb:9b:ef:9b:5e:0e:04:c9:9f:36:a2:
3a:a4:2b:f9:6a:76:cd:31:d6:64:1e:ad:b0:23:52:
1c:86:03:31:83:73:a6:f4:dc:15:88:7e:6b:76:77:
1f:f2:64:11:93:c5:06:78:3f:79:4e:20:63:32:c8:
32:b0:30:99:4b:8f:05:54:2b:eb:30:19:0f:16:9d:
37:5d:22:20:70:ba:d4:d6:df:90:62:be:e8:87:e9:
5a:ee:bc:96:a8:b9:cc:92:31:27:ce:df:86:d5:94:
af:00:ed:d6:da:44:3d:ca:19:89:eb:8d:e6:95:ed:
f8:2a:8d:ae:f4:a3:4e:d0:a7:32:5d:07:12:77:fb:
d5:b1:22:9b:7c:cf:b5:f1:da:b8:d8:86:94:b3:2a:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E8:9B:71:45:27:0C:58:D3:34:8C:DA:A6:A9:00:2E:8D:67:F2:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B1CDD62F43211EF948ABE67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.21.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:85:91:7a:01:94:2d:d3:3d:db:c8:66:94:6c:93:e7:49:c9:
d4:ce:86:7f:5b:7e:f1:c9:6c:ee:5d:24:24:a5:c8:9a:dd:72:
7e:52:4f:00:fe:7f:03:bc:3b:b8:af:83:f6:d4:bf:3e:94:96:
fb:10:26:80:9b:53:d3:fe:09:66:d1:b4:6f:a4:a3:73:36:99:
40:db:f2:33:bd:88:59:b6:55:f5:99:a2:63:59:0f:d1:d1:b1:
95:c9:c7:92:50:9a:04:39:68:fc:31:8b:3a:d7:ce:39:ec:b9:
f0:54:3c:30:67:ba:90:3b:d0:d9:94:54:39:17:74:97:c0:df:
77:61:da:00:14:fe:63:c9:fd:21:e9:f2:ca:30:55:a7:54:31:
c8:74:5e:b4:93:0d:ed:64:1f:99:46:03:fc:7f:72:af:ee:19:
85:3a:71:d8:38:49:47:3e:e7:ee:4a:f3:b9:0b:b0:80:e3:75:
c7:d5:5e:d4:3f:84:28:23:22:d7:75:9b:9f:f0:26:e8:ee:25:
18:c5:13:00:00:3b:88:33:82:27:9d:11:2e:dd:39:a6:aa:2c:
67:44:ae:96:5b:fc:ad:23:52:f1:23:32:0a:dd:1c:f2:5a:ba:
3c:b3:a0:35:da:4f:96:d9:a5:e2:b0:f6:e9:10:c1:e2:53:8f:
43:31:e2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:36 2025 by rpki-client