Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A75F04FAF42311EFA92D957D762E951A.roa
File: A75F04FAF42311EFA92D957D762E951A.roa (raw, json)
Hash identifier: ENYjSqVvnB8d5lR7wrhokiJWCuaD2JauCVg2wcuTY8c=
Subject key identifier: 2B:4F:F2:98:66:EC:31:88:D4:7F:3A:83:12:EA:4D:33:B6:45:4D:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0161C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A75F04FAF42311EFA92D957D762E951A.roa
Signing time: Wed 26 Feb 2025 09:25:44 +0000
ROA not before: Wed 26 Feb 2025 09:25:40 +0000
ROA not after: Thu 19 Feb 2026 09:25:40 +0000
asID: 984
IP address blocks: 154.206.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90568 (0x161c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 09:25:40 2025 GMT
Not After : Feb 19 09:25:40 2026 GMT
Subject: CN=67bede18-7229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:cb:19:38:97:35:96:95:ed:47:47:25:df:
6d:be:7d:29:61:dc:ca:2a:f1:d9:2d:5d:ae:a8:68:
04:49:fc:71:fb:8d:0a:87:5e:35:54:bb:8c:7e:b7:
80:52:c6:2b:12:8a:1a:7e:f1:96:7c:02:80:0d:d2:
c3:1c:7b:88:06:ed:48:3f:82:a3:e3:bd:62:60:97:
73:c3:98:8c:58:4a:7b:5b:73:65:ec:10:f4:a5:a7:
4c:2a:5b:2b:01:23:c0:63:e4:dd:07:bb:f7:d6:14:
85:5a:e7:f0:1f:57:1b:f5:48:34:79:fb:30:06:82:
ee:15:76:a7:a7:92:de:eb:51:02:4b:8e:43:3d:88:
d3:6c:b7:0a:6e:c3:f3:d0:2e:d2:e5:0f:4e:ae:3e:
fd:bb:fd:c3:c1:25:92:b3:6d:91:8c:69:ef:ab:b4:
4d:ed:77:ed:1f:e3:1d:89:3e:08:42:d7:08:10:36:
5a:7e:ee:22:f1:7e:80:0e:70:f8:44:a9:83:23:2d:
1f:0c:ee:74:50:6c:48:d0:d5:8f:12:44:40:b4:48:
73:c9:3e:d1:e5:bb:ed:39:5c:57:ab:0a:5f:3c:ce:
2d:1f:10:94:85:50:df:02:80:d0:8f:94:3a:60:4b:
97:1f:e0:6b:fb:9a:53:0a:52:9a:64:5e:37:5c:17:
47:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4F:F2:98:66:EC:31:88:D4:7F:3A:83:12:EA:4D:33:B6:45:4D:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A75F04FAF42311EFA92D957D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.235.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:94:a9:2d:58:f4:3e:31:c9:62:f5:1c:8a:ff:da:7a:27:c5:
b8:39:68:c4:1a:17:5b:c9:4f:59:38:7a:ac:72:68:ef:d4:a0:
58:5a:2a:ad:fc:50:31:8a:ea:57:85:b5:e3:02:fb:07:30:13:
a8:b3:4c:79:3f:de:6f:6a:28:72:be:e1:d9:c7:44:60:69:64:
99:38:49:ec:b9:c1:8e:f3:5e:19:d8:ad:3e:8d:4f:8f:cd:f3:
61:d0:4e:84:d3:ff:ed:51:f7:15:a8:60:51:cf:01:fa:07:40:
1c:2c:01:9a:99:17:bb:b3:6d:83:1c:8f:3f:d4:fd:5b:e5:9e:
cb:70:21:43:fb:68:dc:d4:c4:e7:44:52:2d:7a:53:ee:51:1e:
8f:d1:8f:1b:10:24:9a:18:79:41:a7:90:1b:89:ba:58:3d:78:
2a:18:80:ff:50:5b:36:87:18:e8:25:f1:74:cc:9c:52:cb:7b:
b0:9d:49:80:00:b2:61:a3:bc:08:04:b3:72:cf:b2:47:e0:6e:
07:37:63:8c:f4:33:2a:c8:aa:c1:76:26:93:07:57:ba:c3:16:
a0:06:30:3b:4e:5e:34:b9:eb:1d:84:b1:a8:1d:55:d4:39:b6:
8a:ef:a1:cc:8b:98:bf:b6:e7:9d:10:39:f1:20:f2:5b:d6:60:
a8:27:98:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:34 2025 by rpki-client