Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB483BBCF43C11EF9897E1AC762E951A.roa
File: BB483BBCF43C11EF9897E1AC762E951A.roa (raw, json)
Hash identifier: E+gElUsQ3usBUYPTsIg8DYy3CglgxEpIABc/Fw2nt6Q=
Subject key identifier: 1D:AB:5E:2A:95:54:91:28:85:A2:C6:FF:3B:AA:6A:35:C9:D8:8A:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016317
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB483BBCF43C11EF9897E1AC762E951A.roa
Signing time: Wed 26 Feb 2025 12:25:15 +0000
ROA not before: Wed 26 Feb 2025 12:25:11 +0000
ROA not after: Thu 19 Feb 2026 12:25:11 +0000
asID: 984
IP address blocks: 154.208.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90903 (0x16317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:25:11 2025 GMT
Not After : Feb 19 12:25:11 2026 GMT
Subject: CN=67bf082b-6389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:af:0c:e7:56:2a:41:10:66:66:0f:98:ab:
bf:6b:0f:04:59:e4:2e:89:c4:b2:3c:b0:c8:9b:d2:
70:79:d0:b8:68:5f:6a:1f:e1:a7:d8:1d:57:ac:d0:
94:40:39:d8:cf:4f:6a:0f:1c:46:56:cf:14:50:18:
90:a2:7a:2e:29:71:d1:ce:6b:8b:5e:d9:eb:59:4c:
92:83:b3:61:f5:f4:45:22:57:85:bc:c5:06:a5:f2:
af:53:04:1f:bf:97:25:66:90:21:f5:3e:a1:ba:be:
8f:e0:47:c1:a6:f3:11:36:54:f0:fc:0f:08:df:6e:
64:e2:af:0a:1f:8c:e7:b1:3e:ff:e0:51:1e:34:29:
df:d1:ef:5a:0f:ef:df:ae:7f:08:81:e3:a8:78:1a:
95:78:5d:a2:0b:96:05:05:47:ea:db:25:da:eb:9f:
4e:5a:c3:ec:ed:91:75:f2:ce:23:fa:f6:15:5f:22:
24:42:84:78:4d:99:6e:6e:f8:54:50:17:59:c1:e0:
a4:db:2e:56:2c:1e:ba:22:fe:86:3e:c9:66:79:c6:
b5:5b:df:75:b4:09:71:da:98:a0:c2:93:4b:3e:6d:
0f:54:4a:11:2d:d9:3b:1a:b5:12:d2:01:e7:9b:72:
a4:6d:77:4c:a2:af:0d:c6:ae:c5:90:33:ea:c5:0f:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AB:5E:2A:95:54:91:28:85:A2:C6:FF:3B:AA:6A:35:C9:D8:8A:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB483BBCF43C11EF9897E1AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.119.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:83:f0:ac:80:8b:e5:7a:77:a6:5f:72:d6:81:ea:5a:e8:23:
ba:d1:d8:7d:88:0e:8c:16:70:e1:cf:22:05:93:96:1c:76:d5:
61:1d:e8:3d:44:ef:f2:2d:e3:34:5b:4d:19:83:92:59:18:f6:
df:67:cc:07:67:60:5e:a4:7b:4a:d1:15:31:81:da:a3:c0:16:
9c:58:42:38:65:3c:1b:fe:cf:a4:c8:69:92:f3:ab:91:d3:1d:
08:7d:ee:83:47:60:11:15:9d:9b:d6:ba:5b:13:44:42:ea:a0:
fd:cc:91:6f:17:a5:9f:04:63:b4:c5:9c:81:88:f1:8c:57:e6:
76:4f:e3:f0:38:0d:81:99:18:29:e5:85:5e:7b:7f:70:48:d8:
6a:79:87:7d:3f:61:42:96:5c:b2:b4:da:0c:9a:33:7e:0e:91:
c5:be:38:4a:f6:8d:63:c5:74:fd:e5:f9:57:79:a6:6f:ac:35:
6e:a9:67:87:c8:fa:69:c7:f9:77:23:6d:f5:57:67:9c:6f:a3:
9a:af:2c:36:e0:9e:d3:61:f8:07:46:07:e2:1c:2d:60:2f:a8:
cd:0b:ce:7e:9e:26:32:87:b1:76:ba:1f:0f:4e:1c:be:58:09:
a1:47:ec:b7:13:7c:b4:5a:8a:e8:47:4b:a7:ff:a3:df:80:43:
e7:47:ae:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:42 2025 by rpki-client