Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/932606C4F45411EFA1930F56762E951A.roa
File: 932606C4F45411EFA1930F56762E951A.roa (raw, json)
Hash identifier: JzruR2hrS48sioEBo61Bb5zKTh+uHwpaMqbSUYkIedo=
Subject key identifier: 7C:78:68:99:39:F9:91:85:9E:25:5C:AE:6F:B3:3D:EF:F5:68:C0:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/932606C4F45411EFA1930F56762E951A.roa
Signing time: Wed 26 Feb 2025 15:15:56 +0000
ROA not before: Wed 26 Feb 2025 15:15:52 +0000
ROA not after: Thu 19 Feb 2026 15:15:52 +0000
asID: 984
IP address blocks: 154.210.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91322 (0x164ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:15:52 2025 GMT
Not After : Feb 19 15:15:52 2026 GMT
Subject: CN=67bf302b-9b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:96:31:cd:2f:c3:24:83:1c:f1:e6:17:a2:8d:
31:d3:b1:44:36:c5:d0:8c:88:7b:fa:ec:6f:6e:8b:
d8:65:2f:a1:e3:ba:94:ad:9b:59:d1:c5:8c:b9:ba:
13:b3:d7:d0:8b:63:1c:7d:ab:69:8d:af:89:6d:f6:
89:d6:cf:3d:97:b5:00:dd:fe:8f:27:10:f8:eb:09:
89:94:4e:dd:8d:5d:26:27:79:4a:ac:82:c4:57:c4:
38:bf:34:c2:a6:86:df:1f:a5:d4:9f:a6:9f:29:89:
3a:29:9a:4e:72:1d:bc:69:5f:df:22:45:dd:b9:b2:
bf:26:dd:3c:f8:91:cf:58:0a:ca:45:ee:54:53:09:
23:a0:b1:d7:17:8e:0d:9b:9d:9b:7e:76:02:a7:60:
a5:19:2d:02:e0:8d:5d:ba:d5:29:b8:56:7d:96:e4:
e9:a0:97:cc:a1:17:57:ce:27:e6:70:f8:bd:46:4a:
aa:51:05:5c:12:35:c1:ca:2a:d4:73:17:6a:cb:90:
35:60:28:88:e7:4f:6b:3e:80:8f:5b:8d:e8:fe:48:
bb:a4:47:0c:b5:53:aa:0a:24:16:42:17:f3:36:01:
7b:55:5c:8e:b8:dc:4f:4c:55:6c:37:28:44:cd:39:
38:ba:16:e3:c6:8b:11:00:9c:62:af:2b:eb:81:49:
a2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:78:68:99:39:F9:91:85:9E:25:5C:AE:6F:B3:3D:EF:F5:68:C0:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/932606C4F45411EFA1930F56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.87.0/24
Signature Algorithm: sha256WithRSAEncryption
21:09:03:d5:fd:11:35:dd:41:90:38:2f:3e:fb:97:b3:e6:39:
7a:63:00:95:90:c7:52:6a:2c:f2:9b:cf:dd:4e:cc:3f:28:ac:
e3:5b:5b:bf:cd:e4:e2:fc:62:ab:36:b9:24:68:dc:f5:f0:cd:
d1:67:8f:6c:7e:23:25:62:2f:36:94:db:8e:fe:dc:09:1f:60:
2b:53:a2:94:ce:26:76:e6:ab:cf:1a:b8:0d:5e:75:df:1c:61:
b5:fa:b5:00:0a:eb:db:43:4b:61:73:2c:0e:73:17:0b:18:6a:
91:34:f5:45:86:a9:f6:aa:8d:be:43:b7:1f:66:80:33:ea:e1:
4b:fb:8f:1c:f7:5b:9f:74:6c:a1:55:21:c8:5f:3e:fc:df:5f:
39:59:10:e5:db:8d:a7:6b:18:9e:47:11:c3:43:3b:03:1b:8c:
99:55:83:a7:79:44:1a:a5:c2:7f:9f:44:5c:ac:f0:ca:3c:18:
76:a1:a6:cd:20:98:ba:b2:c8:bc:1c:79:c8:37:4a:91:4d:e1:
ef:d0:a3:53:9e:a7:43:5f:22:6e:fa:66:3b:ea:1e:e3:3b:c8:
b9:f3:a8:d0:61:e2:b2:d2:fe:fa:a2:6a:62:49:e3:d1:26:7d:
9f:19:48:8e:72:13:d8:e0:57:6e:e1:82:1a:20:5b:49:e0:e0:
d3:66:32:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:20:58 2025 by rpki-client