Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5BA4C5000C511F0BFF67168762E951A.roa
File: A5BA4C5000C511F0BFF67168762E951A.roa (raw, json)
Hash identifier: RQw0FTplJ+BNgENxHx//FXR+KgOv4Umwcofay2tkSEA=
Subject key identifier: F4:5A:A0:85:85:97:60:73:89:59:AA:A8:53:A5:10:1A:30:E2:B7:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01744A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5BA4C5000C511F0BFF67168762E951A.roa
Signing time: Fri 14 Mar 2025 11:15:34 +0000
ROA not before: Fri 14 Mar 2025 11:15:30 +0000
ROA not after: Fri 18 Apr 2025 11:15:30 +0000
asID: 209242
IP address blocks: 154.197.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95306 (0x1744a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 14 11:15:30 2025 GMT
Not After : Apr 18 11:15:30 2025 GMT
Subject: CN=67d40fd6-9525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:eb:ef:11:2a:ab:3a:17:74:c4:76:11:d1:
62:5a:21:01:27:64:68:d6:0d:a1:8d:c4:e9:33:8c:
44:0b:cf:45:f6:ca:18:07:47:eb:4c:f7:70:a6:e4:
f5:f9:1c:76:01:3a:e4:30:ad:71:7a:83:35:67:d0:
4c:cd:ac:7c:ed:e4:63:19:c1:67:3d:fe:02:08:5e:
e7:81:c7:ca:91:d6:99:1c:0a:17:ae:0e:da:b6:35:
fb:9d:d7:34:9c:d2:7f:6a:19:85:27:a4:58:87:0a:
f2:71:5f:f6:3c:48:60:52:65:18:26:b4:e2:32:f7:
7e:d2:91:cc:83:fe:dd:ea:3a:8a:e9:a5:42:05:ab:
ef:40:b4:8f:f2:08:b4:be:6f:f5:e1:9a:8c:0e:6e:
34:1e:b9:6b:4a:dc:70:4c:db:8e:ec:30:5c:dd:70:
0f:2a:35:0c:7a:97:51:cf:82:06:60:a7:6b:48:bc:
d8:7d:45:cc:f6:97:8d:15:9b:b5:a7:1a:a1:83:a3:
29:1b:2e:67:10:b4:b6:e9:91:c2:1d:dc:46:67:d3:
f1:18:69:31:2f:00:f9:6f:f3:ec:1e:59:14:e4:ed:
a9:17:49:3c:a7:fd:25:53:a4:46:df:6c:67:a4:68:
2f:45:33:92:ec:0b:5f:c4:a4:83:30:1d:ab:a6:c1:
a1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5A:A0:85:85:97:60:73:89:59:AA:A8:53:A5:10:1A:30:E2:B7:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5BA4C5000C511F0BFF67168762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.75.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:48:92:01:d2:fb:47:4d:fe:fa:40:f1:fe:35:c2:49:c6:8e:
5d:90:7a:5a:2f:fd:d0:67:6a:f4:bf:23:65:f7:de:5c:5a:0e:
c6:5c:ee:72:81:b6:df:80:d3:be:e8:64:05:3c:da:75:71:3c:
de:47:48:5f:5f:a6:d2:b4:bc:c9:31:a5:b4:fa:fc:13:1a:c6:
69:7d:c4:a8:5f:25:ee:7b:bf:55:69:07:ce:86:35:5e:81:c7:
2e:2d:44:ac:39:f2:5b:68:c1:99:a1:35:a5:9c:8a:5c:1f:87:
84:53:09:58:52:e9:11:6a:95:50:b2:9b:fa:3c:b3:2d:6d:fc:
9a:74:c8:60:a4:4d:90:b3:fc:1a:6e:94:a4:4e:98:39:52:23:
7e:20:50:19:ac:31:51:10:19:8c:a3:4f:8b:2a:0e:c9:36:2c:
19:e4:45:98:38:f7:c9:7c:45:33:a3:0b:70:02:cd:10:46:0a:
e8:26:3c:38:48:c3:73:6c:9e:14:7e:d8:ea:07:a6:ee:e7:97:
ba:c2:b2:91:00:a0:61:19:2a:17:ea:88:ab:1b:e4:52:4e:e3:
b7:d2:7c:a9:35:da:36:4a:5c:cf:2c:bd:54:3c:02:e6:6e:17:
73:82:8c:0c:c2:7d:29:51:0a:bd:34:a0:bf:d5:ce:7d:49:40:
5c:c7:f6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:36 2025 by rpki-client