Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1452572F42811EFBA27479F762E951A.roa
File: A1452572F42811EFBA27479F762E951A.roa (raw, json)
Hash identifier: PvAxM//dWV/NsIPvNyyzL8VT2uzCYI2Me9Iy+1cP0H0=
Subject key identifier: 7F:28:FE:C3:E2:61:B8:F9:2C:E5:93:50:2F:07:54:8F:CF:BD:25:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016218
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1452572F42811EFBA27479F762E951A.roa
Signing time: Wed 26 Feb 2025 10:01:21 +0000
ROA not before: Wed 26 Feb 2025 10:01:18 +0000
ROA not after: Thu 19 Feb 2026 10:01:18 +0000
asID: 328608
IP address blocks: 154.200.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90648 (0x16218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 10:01:18 2025 GMT
Not After : Feb 19 10:01:18 2026 GMT
Subject: CN=67bee671-0717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bb:c5:85:cf:23:ca:e8:7b:9a:2c:d4:87:1b:
a5:64:53:d3:a3:7d:41:02:ee:ad:33:d3:84:ed:eb:
b6:f6:35:aa:70:f3:e0:77:0f:3d:e3:12:9a:94:35:
7e:26:22:9e:0f:f3:09:d5:84:21:24:05:5a:29:a0:
47:b6:5c:bd:34:35:f9:b4:aa:6e:e3:c8:d3:06:21:
89:4f:ec:75:d9:72:7f:60:d0:54:6b:75:bb:3a:b3:
b6:cf:fe:8f:68:94:02:28:3b:c3:ed:b0:88:08:af:
89:ad:9f:66:98:ad:70:a2:65:11:a9:cd:ae:ff:4d:
5a:70:04:94:e7:27:e4:00:47:80:7e:82:16:c2:b2:
92:f5:c6:75:e4:6c:b3:38:3c:eb:0f:a0:b7:f1:08:
36:a3:b6:10:a5:1d:73:ad:7f:13:3d:86:5c:52:d4:
fb:e0:80:fc:f9:55:bf:ec:27:ad:fb:c7:e5:5d:d5:
5f:77:ba:90:6c:1e:8c:a8:70:05:e5:8a:23:10:ab:
d8:9d:69:fc:4c:9d:cf:f6:ec:00:96:48:c4:4d:23:
d3:04:af:f3:3c:f4:dd:69:5d:1f:50:52:89:b4:8e:
0f:16:7f:a6:c4:10:7c:cd:49:a5:63:e4:a8:02:84:
6f:03:81:11:53:8c:55:37:76:d7:d8:fd:95:f9:51:
fe:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:28:FE:C3:E2:61:B8:F9:2C:E5:93:50:2F:07:54:8F:CF:BD:25:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1452572F42811EFBA27479F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.253.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:4b:bb:b6:3d:66:42:97:13:3d:9f:5d:ca:09:fb:f1:24:e4:
40:2f:85:bf:14:59:0f:0b:5e:34:cf:c8:a0:12:09:dd:2d:6a:
1d:64:4f:ee:cf:a5:ed:19:36:0c:8c:c2:d0:6e:1c:b3:f7:a7:
f5:5a:08:e7:21:ef:ff:c9:ca:dd:4d:ed:30:38:03:ed:39:c6:
77:0c:11:dc:85:11:5f:f8:b6:20:d1:ee:94:26:f4:e8:50:1a:
02:ff:ac:f3:d5:f4:48:03:e9:d5:37:f4:80:f9:2e:ab:77:5b:
0e:13:e6:aa:cc:0e:d8:48:bc:81:35:7a:cf:2a:3f:b9:56:08:
6d:94:ec:5c:35:13:b2:4a:cd:1e:62:cd:0a:c6:86:9d:10:b9:
af:23:3b:eb:bf:6b:9f:ed:bd:c7:9b:90:c7:36:59:57:75:0f:
1d:43:e6:1f:f9:82:9c:fa:b4:6b:b8:df:21:80:e6:58:44:35:
d8:19:b9:33:47:cc:05:1e:37:b7:93:3c:d7:49:3d:77:bc:63:
0c:aa:80:2f:27:27:9e:f4:7b:91:d7:0e:aa:7a:57:85:59:13:
e9:17:39:ff:6c:97:32:e2:1a:42:b2:17:63:f2:10:5e:5d:a2:
1c:dd:b0:d5:66:cb:06:54:18:9a:2c:fa:ed:79:4f:0a:02:44:
98:02:62:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:52:52 2025 by rpki-client