Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5FB6028F45D11EF97908994762E951A.roa
File: B5FB6028F45D11EF97908994762E951A.roa (raw, json)
Hash identifier: 25C/P9ojGr5BNk5ZNd9PAKCYPLe/2CiXCHtINObIuv0=
Subject key identifier: FB:13:64:BC:E9:24:A5:F3:D8:04:98:64:33:49:27:F1:60:D2:17:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01651E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5FB6028F45D11EF97908994762E951A.roa
Signing time: Wed 26 Feb 2025 16:21:19 +0000
ROA not before: Wed 26 Feb 2025 16:21:16 +0000
ROA not after: Thu 19 Feb 2026 16:21:16 +0000
asID: 984
IP address blocks: 154.210.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91422 (0x1651e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 16:21:16 2025 GMT
Not After : Feb 19 16:21:16 2026 GMT
Subject: CN=67bf3f7f-ec72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:12:bf:a9:d6:7d:14:59:52:d7:1b:f9:71:34:
24:b7:40:e0:e7:6f:25:63:ac:42:87:c9:b1:87:ad:
51:21:85:a4:2a:d7:4b:0e:e5:55:3b:8d:45:49:03:
21:48:df:98:0a:eb:4c:76:ae:79:67:a4:08:98:99:
e0:21:e9:b3:6a:a9:33:02:58:90:93:c7:c3:f9:70:
58:f0:56:79:43:06:17:59:b7:48:11:97:c7:10:69:
2a:62:5a:c1:dc:78:e5:ad:e3:74:c8:1e:36:e5:0b:
83:d9:32:9d:04:48:e9:ca:6a:03:17:99:21:ac:96:
ea:47:27:75:c6:59:7f:8d:95:57:35:e0:9f:92:e6:
bf:99:4a:0f:df:c5:6c:33:10:03:08:d7:14:d1:e3:
cf:d4:76:43:7a:5b:13:ee:8f:07:c2:6b:f3:49:61:
d4:35:05:01:f0:73:e3:52:b7:25:db:53:3f:36:4c:
c3:5f:f1:f0:be:9e:74:2a:11:28:cb:6f:44:7c:e3:
d2:da:b5:e5:28:9a:c8:da:a0:c8:32:e1:48:60:dc:
60:e5:ce:89:93:13:ad:53:2d:94:ba:a0:87:1d:08:
3a:b3:c3:e7:53:ae:c9:21:29:c2:d2:a0:8b:c2:a9:
c2:23:63:12:f1:28:c4:81:f9:5d:b8:83:8d:1f:ed:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:13:64:BC:E9:24:A5:F3:D8:04:98:64:33:49:27:F1:60:D2:17:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5FB6028F45D11EF97908994762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.115.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:0b:7e:d7:96:b3:18:eb:f3:cb:27:54:42:a0:99:a6:be:81:
9b:38:1b:0d:fc:9c:fc:ba:8e:79:5c:ac:20:9d:7e:f7:50:5b:
a2:94:cc:41:7b:98:3f:f6:10:a2:f9:fe:30:77:d9:12:1f:d8:
06:86:5f:30:de:9f:ee:6b:b1:f9:ec:88:10:94:e7:b7:76:58:
9f:05:95:7e:e0:2a:17:de:14:6e:df:ba:f9:e6:22:3c:41:60:
3e:2e:64:8b:4a:e2:ce:da:76:3a:79:7d:bf:93:ba:78:30:a8:
ca:5c:20:7d:9a:9c:83:c6:3d:cb:27:3b:24:b9:e8:11:04:6a:
06:e4:c5:81:52:61:1a:71:54:12:dc:d3:d5:bb:a6:74:74:70:
2a:f7:90:78:5a:a8:bd:36:03:7f:6f:4e:25:1e:62:dc:4a:17:
05:0f:f5:82:de:94:7f:c9:d2:98:50:ef:cf:42:bd:5c:76:87:
bb:fb:49:40:44:24:86:71:3b:4a:c6:14:c3:0b:f3:6c:1a:e7:
05:80:41:56:c0:3d:dc:f8:7d:2f:a7:41:0b:00:5a:e6:f0:1b:
dc:26:8c:ad:7d:c6:f8:71:35:de:7e:ba:73:1d:74:c3:39:01:
8d:66:c6:21:56:9d:af:ca:7a:20:cb:5b:ac:27:2c:e2:34:19:
35:c8:86:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:53:01 2025 by rpki-client