Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7CC7F7AF42E11EF99037F4B762E951A.roa
File: A7CC7F7AF42E11EF99037F4B762E951A.roa (raw, json)
Hash identifier: nYfM4vM2dXHPo5Aa9qrsqAzSYIe4+CZmWlEZLRS6j9I=
Subject key identifier: F9:2B:9C:67:1B:67:A0:8F:59:B8:99:76:B6:BC:A9:B5:7D:C3:BC:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016248
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7CC7F7AF42E11EF99037F4B762E951A.roa
Signing time: Wed 26 Feb 2025 10:44:29 +0000
ROA not before: Wed 26 Feb 2025 10:44:25 +0000
ROA not after: Thu 19 Feb 2026 10:44:25 +0000
asID: 984
IP address blocks: 154.208.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90696 (0x16248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 10:44:25 2025 GMT
Not After : Feb 19 10:44:25 2026 GMT
Subject: CN=67bef08d-acc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:ac:e5:89:72:3d:03:2d:c7:ed:1b:01:75:
ee:65:14:73:ff:df:a3:64:35:a3:1c:a4:02:10:de:
5d:7a:7a:7c:29:d8:90:52:f1:be:fd:76:29:35:51:
57:d3:a8:58:06:f8:6b:15:75:91:e0:2b:69:bc:17:
ae:12:e1:ef:00:41:69:f9:39:7e:9b:a8:82:1f:b2:
60:e4:38:c5:9d:30:33:49:cc:57:b3:63:78:b5:d1:
ee:8d:83:41:d8:32:31:e8:2e:90:f7:70:74:c5:2e:
18:59:88:4e:75:22:14:6b:d7:09:cf:25:ac:ef:fc:
85:de:49:eb:3d:15:27:93:20:7e:0d:74:d7:61:ad:
da:59:9f:96:65:22:ad:03:c6:e8:1c:b8:23:a9:50:
52:2f:43:0b:fa:f2:94:26:4e:05:80:c8:aa:a7:a1:
80:4e:f5:23:da:3f:e8:69:24:59:95:59:b3:09:15:
b3:b1:47:62:ed:0e:1e:9c:b3:62:1e:6d:3b:f3:13:
c4:b5:1e:1e:fa:04:58:3e:58:df:9b:bb:9d:72:d3:
ac:f2:c8:00:23:79:2a:bb:ed:dc:ef:3c:dd:fc:46:
af:71:52:dd:c5:b8:bc:f7:06:fe:37:26:73:06:75:
7f:a1:65:51:4a:e1:48:3c:88:f0:a4:5c:d9:96:01:
e8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2B:9C:67:1B:67:A0:8F:59:B8:99:76:B6:BC:A9:B5:7D:C3:BC:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7CC7F7AF42E11EF99037F4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.81.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:52:dc:09:86:d3:04:ce:06:b9:13:34:07:85:8f:bc:e1:b5:
da:0d:42:87:db:0f:83:f1:d2:de:92:69:15:fe:2e:04:17:b3:
87:72:56:70:98:81:48:c4:be:bb:77:8c:b1:af:4e:01:bb:15:
d3:8c:cc:b7:7c:18:bd:66:67:d3:93:68:42:2f:a2:f4:5b:01:
b8:fc:23:93:f5:4e:c8:bb:43:08:ff:80:54:9a:91:0a:e6:6e:
10:4b:50:56:d0:ad:9d:83:74:18:2d:a7:7a:12:c2:6e:54:e8:
62:ab:f1:4c:0e:b5:09:9a:bf:1e:f2:ad:95:18:5d:71:35:59:
b9:41:f3:f4:61:a0:09:bb:bb:ac:ac:06:7a:6c:25:e8:1a:44:
30:b7:39:94:b8:e1:ea:0a:5c:f9:37:0c:47:b3:f8:50:31:14:
fe:55:fb:08:4a:83:ef:4d:72:1c:32:21:71:38:c2:76:5c:0d:
97:79:ef:b4:7c:43:d0:ff:eb:83:ce:08:d3:5d:d9:19:99:49:
78:11:bd:7a:45:4c:3d:86:12:93:2f:03:e9:8d:64:9b:7e:14:
88:1c:1c:05:a7:c7:0e:91:ed:02:6a:96:1b:c7:6c:74:e5:83:
8a:88:1f:84:41:97:eb:e6:e9:f4:29:75:4c:e1:f3:b8:db:0f:
e0:db:36:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:33 2025 by rpki-client