Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B07786A4F45811EFA1AC8072762E951A.roa
File: B07786A4F45811EFA1AC8072762E951A.roa (raw, json)
Hash identifier: uI8pEZGVpIUS/ZQ1kLWNIkxD7IPKkYlTpDcjJDdiiMM=
Subject key identifier: 99:1B:A5:93:72:C2:C7:C7:AF:B8:22:B0:A7:C3:C1:1B:DB:75:56:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B07786A4F45811EFA1AC8072762E951A.roa
Signing time: Wed 26 Feb 2025 15:45:23 +0000
ROA not before: Wed 26 Feb 2025 15:45:18 +0000
ROA not after: Thu 19 Feb 2026 15:45:18 +0000
asID: 984
IP address blocks: 154.210.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91373 (0x164ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:45:18 2025 GMT
Not After : Feb 19 15:45:18 2026 GMT
Subject: CN=67bf3713-9c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:92:67:b7:5c:86:4c:5b:0c:08:bb:bf:80:
b1:c2:5f:5b:66:cd:cd:ee:e5:62:df:04:80:61:01:
cd:8b:45:a1:df:e0:d9:5b:43:2c:7b:07:36:f3:7e:
10:c0:d1:f5:a0:8f:5f:c1:c0:00:5b:be:d5:23:5b:
6a:dd:76:fb:ec:02:c7:5e:3b:c1:c8:a5:7a:48:30:
e4:7a:bd:e2:8e:65:02:24:ca:94:10:42:9f:ff:61:
3b:e9:47:91:39:ee:22:40:98:84:3f:73:0b:74:7f:
97:e3:25:0e:57:cd:ba:b1:6b:6e:2f:b4:9e:cd:58:
7c:f2:27:f4:5b:a7:7d:bd:10:b3:56:57:c3:03:9b:
07:f3:01:83:07:80:ae:b0:fb:a5:f6:08:d2:bd:ae:
a4:a6:01:d7:d6:67:48:5c:27:18:9b:17:03:7b:eb:
d6:bf:dd:c1:d1:4a:04:63:74:7f:60:76:2f:57:cd:
af:b8:b7:43:ac:b9:52:43:54:de:70:6f:6f:97:f0:
90:6a:f7:fe:23:03:43:b3:e9:88:8f:88:10:15:a3:
b4:c9:ae:6f:4d:f6:4d:1a:69:ab:b6:9c:d8:28:6d:
97:68:24:79:8a:4f:97:83:03:4f:48:e8:64:09:b7:
f5:ee:1c:e3:04:4b:1b:31:47:f4:1b:7e:32:a3:0a:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1B:A5:93:72:C2:C7:C7:AF:B8:22:B0:A7:C3:C1:1B:DB:75:56:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B07786A4F45811EFA1AC8072762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.101.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:c1:69:da:51:8d:bc:27:c8:95:79:25:70:e7:bd:68:46:e1:
7a:e6:70:c4:0a:4b:8a:78:a7:53:07:25:da:dc:46:95:29:88:
b7:f6:b8:c9:e4:3b:f7:b1:b5:2d:b6:51:cf:8a:65:6d:b3:f5:
d0:fb:10:b8:f3:9d:5d:e4:2c:d3:0b:9c:05:d3:75:c1:a3:7c:
0f:da:96:71:50:a4:08:98:5a:72:3e:73:d1:88:75:b8:93:ba:
57:72:39:da:aa:31:74:3f:8f:5e:65:5f:8c:11:bc:1e:4a:5f:
3d:33:c2:39:d0:91:9a:fb:a1:15:b2:54:cc:de:8a:fc:92:e2:
53:02:56:65:39:ea:a9:60:76:9a:7a:23:e5:c1:82:f2:71:63:
5e:b9:c2:b5:c1:e9:8c:58:2e:97:41:a2:c4:55:34:71:b6:af:
22:9a:02:2a:df:b6:54:55:68:2c:e1:09:64:bf:32:01:04:4f:
61:ad:b6:a2:78:34:18:78:de:bd:06:b7:ce:b6:ec:17:54:ee:
bb:07:3b:37:5d:8a:a6:07:1f:fd:f4:d0:23:f2:d8:08:4a:7b:
b7:13:95:a4:97:8f:3d:6d:50:03:21:cc:fe:a5:93:8b:18:4e:
5e:98:50:be:2f:e1:2c:34:e7:1b:a0:55:87:91:28:7c:c3:5c:
c8:a8:5f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:50 2025 by rpki-client