Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9000AD90F45011EF9BAE18BB762E951A.roa
File: 9000AD90F45011EF9BAE18BB762E951A.roa (raw, json)
Hash identifier: pss6/5QmKkmJ8vvZkyxdeasJGtrDLKIplSEOuVdWFUY=
Subject key identifier: EA:85:F6:2A:9B:82:01:60:28:F8:DC:F1:E8:F7:72:B5:CC:D2:EC:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01647A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9000AD90F45011EF9BAE18BB762E951A.roa
Signing time: Wed 26 Feb 2025 14:47:12 +0000
ROA not before: Wed 26 Feb 2025 14:47:09 +0000
ROA not after: Thu 19 Feb 2026 14:47:09 +0000
asID: 984
IP address blocks: 154.210.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91258 (0x1647a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 14:47:09 2025 GMT
Not After : Feb 19 14:47:09 2026 GMT
Subject: CN=67bf2970-0468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:61:f8:a8:40:f3:ed:75:f5:1f:48:f1:76:6a:
95:7c:9d:be:2e:e0:30:0f:2d:2c:35:28:96:20:59:
c9:87:9d:ce:5f:14:d3:f7:e4:19:50:e7:04:05:4e:
aa:d5:ed:4c:9d:33:1f:1c:12:7e:6e:86:58:1b:3a:
18:71:96:67:83:19:41:32:de:a5:14:a3:84:95:79:
fc:82:61:b2:d0:a5:c9:c7:b4:50:0c:2f:9c:e2:c9:
b9:38:15:14:fb:95:87:fa:0a:90:77:42:5d:4b:ad:
29:e4:79:22:1e:20:63:f1:4d:b6:e7:5c:b2:86:7a:
d3:45:13:a8:9b:aa:50:3d:fb:2f:c7:8c:bd:0e:95:
9f:66:ae:a6:d4:8b:a7:e3:4e:37:d0:b3:99:d2:38:
41:5e:85:b6:56:32:fc:b9:9c:6e:23:12:02:ea:61:
1d:dc:81:11:56:97:91:e8:1a:9a:42:4a:31:f9:dc:
29:be:d0:35:ed:54:ca:e7:0c:6e:2d:4c:35:d9:23:
4b:f1:fb:b9:5b:c3:d1:10:cf:a9:33:13:8b:a3:fe:
6a:0b:c3:32:f5:4b:5c:6d:b5:64:d0:01:e8:90:51:
ed:a9:ab:af:38:d9:4f:1f:33:70:87:32:9a:53:1f:
56:6c:dc:8b:14:5a:8d:69:4e:e5:18:fc:b8:ff:58:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:85:F6:2A:9B:82:01:60:28:F8:DC:F1:E8:F7:72:B5:CC:D2:EC:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9000AD90F45011EF9BAE18BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.60.0/24
Signature Algorithm: sha256WithRSAEncryption
82:89:a3:6f:26:49:c0:2b:c4:40:77:5d:ef:aa:60:51:c5:1c:
cc:eb:2c:bf:e6:c0:4d:93:53:ca:36:f3:b2:0b:dc:7a:8a:1e:
11:8f:de:61:7c:a8:54:65:c6:42:a2:a2:4d:ff:17:e6:44:f5:
1e:ea:b1:41:a8:73:d7:af:d4:9d:50:9a:f9:2c:65:42:d6:01:
be:b9:b9:b5:67:5b:f7:2e:a3:33:c3:61:dc:93:cd:de:ef:40:
74:f9:52:aa:8f:ea:d0:15:b6:2b:77:a8:e9:3c:8d:ed:0f:8c:
e4:05:58:05:0a:e7:ed:63:a9:30:52:1a:5a:e4:ab:c7:3d:69:
6d:1c:5e:cc:26:cc:60:b1:39:4c:98:04:5d:ea:51:0f:4b:d9:
c2:51:a1:85:93:44:e8:fb:a1:1f:d1:3f:1b:2c:81:16:d8:1a:
16:bc:59:ff:33:f0:cc:31:33:76:e4:cd:ec:0a:c0:97:5a:5d:
e4:9c:d4:fe:8a:14:c6:54:3c:c6:00:c8:59:f8:01:ee:60:14:
a7:57:fd:6f:0f:a0:bc:22:54:1d:6b:e5:a3:b8:ef:3b:6e:3b:
20:42:f4:3c:6c:15:20:7b:bd:55:8b:11:fc:5f:dd:77:f2:27:
21:b0:55:92:37:c7:38:90:78:8c:58:57:25:5e:dc:be:fa:e0:
53:9b:09:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:27 2025 by rpki-client