Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B729F18EF43611EFA1582385762E951A.roa
File: B729F18EF43611EFA1582385762E951A.roa (raw, json)
Hash identifier: /Si+jwc3YQ/vB/G3Gp84H7rpIA5B4yOqO4cSsdZy+gQ=
Subject key identifier: A8:AA:4F:1D:D5:4D:09:26:B2:95:93:02:66:C0:3A:60:D0:02:B1:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B729F18EF43611EFA1582385762E951A.roa
Signing time: Wed 26 Feb 2025 11:42:11 +0000
ROA not before: Wed 26 Feb 2025 11:42:07 +0000
ROA not after: Thu 19 Feb 2026 11:42:07 +0000
asID: 984
IP address blocks: 154.208.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90804 (0x162b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:42:07 2025 GMT
Not After : Feb 19 11:42:07 2026 GMT
Subject: CN=67befe13-6b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:d6:f5:7c:0b:08:94:d9:9a:69:6f:b5:3b:
42:02:f1:71:49:ec:cb:86:1b:64:ef:70:95:3b:e0:
80:71:b8:91:e7:96:5a:8e:c0:f4:08:ce:8d:69:61:
9f:6c:f8:70:6b:7b:c2:72:fb:40:08:bb:8d:68:e0:
6c:e6:bc:8d:06:44:25:d9:7b:92:5d:fb:2f:c6:12:
bc:aa:10:f2:68:a6:1e:29:b0:4f:d7:d8:70:16:ee:
e2:83:24:a2:55:33:e5:45:ce:4b:e1:2c:56:9d:da:
3e:45:11:11:ba:20:09:bb:c1:17:7c:11:ca:d3:f0:
a5:6e:04:fe:a0:0f:93:77:73:90:56:bf:c1:98:9e:
a8:ac:8c:f2:e2:df:ff:0e:cf:37:07:b9:7e:3b:a2:
73:d7:16:20:1f:f8:ac:f7:fe:32:b2:81:c6:12:ae:
cb:20:b0:f6:a2:87:6c:b8:0e:23:2c:df:a7:a2:ff:
2a:20:a2:15:28:97:f1:df:04:76:d7:1d:24:78:6b:
d0:0d:c3:c1:df:bd:0c:28:61:dd:ae:02:7f:d4:42:
8c:09:ef:59:51:be:0d:b9:dc:72:1d:e3:5d:a1:46:
fb:1a:d5:f8:7a:22:5c:fe:7d:ce:bb:cc:4f:d0:a4:
e0:12:60:1d:e9:b9:72:07:56:da:cb:bf:6f:d9:d4:
bf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AA:4F:1D:D5:4D:09:26:B2:95:93:02:66:C0:3A:60:D0:02:B1:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B729F18EF43611EFA1582385762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.101.0/24
Signature Algorithm: sha256WithRSAEncryption
53:4d:e7:46:a1:73:cc:71:98:89:84:42:c0:34:5c:73:56:8a:
86:71:87:9b:f6:24:ee:31:fd:19:ac:ca:a7:26:bc:64:43:c6:
74:65:f2:6e:6b:10:d9:11:95:91:2d:44:b8:b7:11:7c:92:48:
32:74:2d:e4:cb:ba:d8:c0:5b:94:c2:83:73:81:11:82:62:c2:
2d:2e:6c:a6:ea:be:a8:9f:52:4b:d5:86:4c:d9:d1:d4:7b:91:
f2:02:2d:90:c1:d8:07:21:38:07:a7:92:3e:19:7c:d7:29:49:
34:a8:e1:aa:60:f3:71:48:18:39:47:09:42:94:ae:a4:5e:ff:
8d:f5:5f:a9:4e:eb:aa:02:ad:82:1a:45:51:f8:de:5b:f0:21:
fa:48:1d:c0:97:1b:8e:5f:7d:66:7c:fa:c5:61:66:cb:29:52:
d0:f5:f0:66:de:58:83:d3:ca:7c:48:f9:11:f4:4a:31:51:c8:
bb:e2:92:53:4c:3f:ab:da:94:a1:47:9c:10:a8:dd:e0:f1:e7:
1c:78:e6:08:ad:e3:c6:3e:01:64:35:e5:c9:e3:30:c6:b3:92:
b7:93:5f:e9:e1:56:8c:31:1c:7b:14:62:11:a1:f9:3a:fc:6b:
cd:f4:e9:d8:9a:69:da:8b:a4:93:aa:f6:47:6a:cf:d1:43:cb:
27:a0:2c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:08 2025 by rpki-client