Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7E81D0ECDB611EFAE3F9ABE762E951A.roa
File: B7E81D0ECDB611EFAE3F9ABE762E951A.roa (raw, json)
Hash identifier: 8mTpN/agsg+3HdxMiLKn73juesOv2hKBsbrFS9jFWSY=
Subject key identifier: C6:51:30:B3:F2:37:ED:04:FF:E0:7B:4C:D7:31:81:F5:5D:93:5D:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0136BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7E81D0ECDB611EFAE3F9ABE762E951A.roa
Signing time: Wed 08 Jan 2025 11:50:13 +0000
ROA not before: Wed 08 Jan 2025 11:50:09 +0000
ROA not after: Tue 16 Dec 2025 11:50:09 +0000
asID: 984
IP address blocks: 154.200.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79548 (0x136bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 11:50:09 2025 GMT
Not After : Dec 16 11:50:09 2025 GMT
Subject: CN=677e6674-24b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:01:be:6d:02:f2:08:82:6a:f9:b3:af:c4:
5f:7e:11:30:3b:e8:ce:43:a6:b9:0f:db:61:b1:6b:
7d:33:a1:e3:9e:9a:61:0b:42:1f:b2:2e:55:05:bb:
3c:b7:52:96:f9:d8:84:c0:01:27:7d:dc:be:74:e2:
7b:2d:99:f2:4c:25:e8:33:a0:6f:2b:0a:33:1b:b1:
ec:e2:f5:e0:e5:1a:1e:7f:c9:d2:dd:a9:3f:7a:24:
13:f6:70:60:35:2d:bd:0a:26:f0:7b:ef:43:1f:8d:
a7:aa:9b:1e:eb:7c:fd:c4:d4:32:9b:bf:86:08:6a:
30:ae:f4:fe:7c:ac:46:05:fb:9a:56:e6:c1:d1:93:
4a:79:84:21:03:e0:be:31:09:48:3d:8f:6d:e4:a1:
cc:ab:02:ca:c3:1c:bb:13:6c:72:12:78:86:95:4f:
cc:92:04:5d:d6:68:02:a4:4e:50:86:be:04:81:aa:
0b:0b:29:f1:ba:e8:bc:c8:c6:5b:36:77:1c:f8:9e:
0e:18:d8:2d:90:be:a9:21:4f:15:5d:e8:18:f3:10:
ca:bc:81:c4:15:f9:57:8a:06:ea:f4:74:50:a9:a1:
97:3f:ae:77:44:d2:dc:94:ab:f3:e4:62:0a:24:9a:
2a:eb:a3:14:50:61:52:0d:c2:c7:70:49:d9:6d:5f:
f1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:51:30:B3:F2:37:ED:04:FF:E0:7B:4C:D7:31:81:F5:5D:93:5D:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7E81D0ECDB611EFAE3F9ABE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.166.0/24
Signature Algorithm: sha256WithRSAEncryption
17:f0:2b:c7:37:2c:a5:36:13:22:e5:89:fa:3c:cd:4c:b7:0f:
07:5d:ab:cb:42:8b:fa:e7:c9:9d:69:45:87:7c:40:eb:06:50:
91:0a:f2:7d:31:3d:8d:d5:53:85:dc:b1:05:71:61:66:04:23:
07:ac:f5:3a:97:74:75:4f:0e:ed:4e:8a:76:46:0c:a7:af:d4:
1f:6b:e3:f6:40:4e:32:5f:9e:cb:a8:bd:ee:00:fb:3f:77:21:
05:02:2c:84:5c:f4:bf:4f:85:1a:0d:80:63:33:fe:19:5f:d1:
16:6d:00:d5:80:af:ca:9b:f2:c9:96:5a:39:60:c2:5a:f3:0d:
e9:52:1c:0f:bc:b8:3b:70:b7:89:be:25:3a:fd:9f:83:50:cc:
62:27:37:4b:6e:b6:21:ee:2e:6d:ab:0a:7d:1e:59:09:78:b9:
7f:8b:11:fd:06:d3:f1:64:13:7a:b3:a3:91:db:04:e6:9e:76:
48:ed:0c:45:61:62:b4:ff:91:46:fa:33:57:06:20:0e:37:55:
83:75:79:dc:d3:bd:08:49:71:93:ab:26:72:55:40:4d:80:91:
8a:40:99:10:95:52:42:94:4f:0f:da:2c:ee:27:85:90:5f:e7:
ac:8b:46:82:a6:3a:8d:45:36:57:73:80:03:c1:09:cd:c4:04:
ee:d2:c6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:30:02 2025 by rpki-client