Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93F0B53CF41C11EFB016ED4C762E951A.roa
File: 93F0B53CF41C11EFB016ED4C762E951A.roa (raw, json)
Hash identifier: iKsMboDIM1Bzb+Ev65HuQDD0QyUO54kuJ87tOC7GhGw=
Subject key identifier: 90:E5:5C:DB:3E:3E:9A:F1:70:4C:A9:8D:37:43:11:4E:94:1B:D1:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016163
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93F0B53CF41C11EFB016ED4C762E951A.roa
Signing time: Wed 26 Feb 2025 08:35:05 +0000
ROA not before: Wed 26 Feb 2025 08:35:01 +0000
ROA not after: Thu 19 Feb 2026 08:35:01 +0000
asID: 984
IP address blocks: 154.206.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90467 (0x16163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:35:01 2025 GMT
Not After : Feb 19 08:35:01 2026 GMT
Subject: CN=67bed239-81e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:0b:c9:6a:1c:97:7e:32:e1:a5:e3:b4:72:
47:2b:e1:45:8c:b7:3a:8d:cd:26:9e:24:23:f8:90:
83:79:8e:e5:ec:a0:04:0d:79:1d:84:5a:76:b1:85:
03:5b:27:df:1f:1e:61:86:25:19:69:54:06:35:58:
b7:e7:04:d5:7b:3f:21:d8:8c:87:12:81:f7:0b:44:
ff:60:9e:f9:c0:d5:b2:25:3d:ea:31:96:02:4b:db:
09:dc:28:c2:19:35:d2:7e:b0:66:80:9e:28:2d:5d:
c8:39:d4:2b:bf:fc:c1:5b:3b:a8:d3:36:be:37:0a:
d6:55:58:97:8b:ce:b6:3c:1c:0a:91:64:a1:94:60:
2a:dc:ff:53:c3:68:10:0d:30:7c:d0:d9:7c:84:41:
08:9b:65:b9:fd:23:6c:3a:4a:a4:03:77:fa:b3:0b:
a9:b8:20:7b:c6:8e:d3:12:46:71:1b:70:a4:75:4a:
ee:e0:31:f8:f5:7f:9d:0a:44:ba:b6:ba:10:b9:a1:
91:1d:58:9d:11:1e:aa:6d:71:19:cc:cf:f2:ab:d2:
4c:6f:9d:01:fa:ec:64:65:66:39:d1:35:74:ea:83:
f5:91:3b:53:16:c5:d5:c7:c1:ae:6c:68:fa:3f:56:
25:51:80:8f:4a:26:01:56:c5:b9:be:84:59:29:f7:
b7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E5:5C:DB:3E:3E:9A:F1:70:4C:A9:8D:37:43:11:4E:94:1B:D1:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93F0B53CF41C11EFB016ED4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.214.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:dd:45:d0:d0:fd:c2:c0:5b:61:eb:a8:45:5a:c4:81:f5:a3:
55:23:e2:0a:f9:ab:00:8c:3e:d4:4c:50:25:40:2d:6f:9e:6c:
89:71:64:25:80:8f:fd:8d:4b:bd:7a:93:32:5d:d5:61:f4:1a:
03:bb:39:d0:43:02:5f:15:6f:90:e7:2d:fe:04:be:fd:35:54:
98:67:87:a5:9e:db:c0:58:37:f4:34:de:69:15:93:25:11:57:
7e:d5:e1:b4:c9:22:e8:1e:6f:26:1d:32:0c:4c:59:a5:51:55:
63:ef:39:97:07:c9:37:d8:33:e6:c0:82:05:83:68:d5:14:76:
42:ee:07:4f:41:c7:aa:49:b5:e8:9c:1a:17:75:7b:2f:e7:70:
00:12:d7:29:8e:16:70:3f:e0:13:c1:d0:73:4f:63:84:a4:bc:
7c:62:74:76:28:57:78:07:86:47:b1:d4:f1:55:df:10:96:9e:
40:24:70:da:ea:9a:7d:80:68:3e:04:21:99:3a:80:cf:11:6b:
4f:0f:66:fb:1b:a4:17:2d:13:90:69:66:8d:56:dc:ec:0f:4c:
80:54:ff:c2:8c:79:bf:a0:fe:97:9b:40:d2:4c:d2:a0:f6:54:
d0:72:b8:d6:a1:fc:d6:f4:50:ca:d9:ae:80:90:5e:1e:d8:42:
2e:d1:98:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:26:24 2025 by rpki-client