Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC7C98CCF41C11EFB783494D762E951A.roa
File: BC7C98CCF41C11EFB783494D762E951A.roa (raw, json)
Hash identifier: iD9ZkGVkew9hBsXcj55YglowFDvdMkDHWRCkV01g1YM=
Subject key identifier: E0:C1:0D:4E:2E:68:03:E6:ED:31:1B:9B:42:C6:76:BF:D8:6E:D8:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016165
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC7C98CCF41C11EFB783494D762E951A.roa
Signing time: Wed 26 Feb 2025 08:36:13 +0000
ROA not before: Wed 26 Feb 2025 08:36:09 +0000
ROA not after: Thu 19 Feb 2026 08:36:09 +0000
asID: 328608
IP address blocks: 154.200.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90469 (0x16165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:36:09 2025 GMT
Not After : Feb 19 08:36:09 2026 GMT
Subject: CN=67bed27d-5274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1a:b4:2a:1c:59:de:77:16:44:39:d8:8c:0e:
88:00:5d:cb:4c:b1:1e:48:f7:ec:ca:53:a1:27:1f:
b7:e2:53:ae:e0:74:f4:8e:fa:13:02:12:46:b4:1c:
61:a3:1d:09:a5:ce:a6:cf:ee:0f:80:5d:70:ad:77:
cf:d3:74:0e:5d:e3:1d:3c:7b:22:a6:e6:68:19:c2:
25:68:25:ca:9e:c5:72:63:48:68:cf:d8:0d:b3:22:
61:58:ec:aa:b6:8b:42:c2:54:24:43:18:81:7b:21:
62:39:55:6d:b0:69:6d:67:03:30:6f:c9:ba:6a:9c:
2e:d4:25:1b:fe:43:fe:8c:93:ca:4e:db:66:b7:8a:
c0:1d:b6:e6:3c:2e:90:f1:3a:6b:e7:d8:7c:50:54:
9f:07:e1:79:d4:c0:9a:04:a0:4f:9a:ea:ae:0e:f2:
14:d8:dc:66:b7:e5:9b:90:df:a6:7e:37:96:45:1a:
28:87:63:bb:69:35:51:7d:c4:75:d9:9f:98:fc:d7:
fc:bd:ae:39:65:7e:ef:00:8e:1a:9c:17:d2:ef:6b:
f5:aa:b5:62:c1:e4:e7:d3:29:d5:d1:70:39:6b:c2:
7f:31:63:5c:d0:0b:38:f3:c3:17:80:cf:4b:94:a1:
9b:ae:1c:fa:bb:dc:77:03:4e:8e:6b:2b:44:c1:65:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C1:0D:4E:2E:68:03:E6:ED:31:1B:9B:42:C6:76:BF:D8:6E:D8:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC7C98CCF41C11EFB783494D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.194.0/24
Signature Algorithm: sha256WithRSAEncryption
08:a3:27:cc:46:0d:29:86:4e:36:b8:11:49:37:96:88:59:6a:
3f:0b:bf:dd:1d:9a:4b:90:08:73:ff:6b:89:10:b4:94:3f:33:
9f:b2:52:f5:64:c4:08:41:92:dc:f0:48:2d:07:1c:41:98:45:
d6:96:e6:8d:49:bd:b8:46:03:f3:a3:52:dc:44:83:d9:2e:10:
b8:6a:2e:8f:82:50:9e:6e:fa:ff:45:0b:72:6e:94:83:3a:75:
a9:6a:45:7c:53:12:e8:b8:f5:68:69:d1:58:3f:e3:a4:08:3c:
df:36:38:9b:f5:e7:9f:ab:f4:04:a7:d8:b8:52:2e:ef:df:4c:
fd:fb:13:90:5a:10:a7:ac:a5:3d:02:f3:ab:03:a3:67:f0:28:
d1:e7:fc:fc:15:21:43:7b:ba:10:52:f4:f6:5d:6e:59:b1:1e:
59:9e:07:41:c9:9a:3d:24:70:98:3d:9a:81:2e:5c:13:47:5c:
a6:7e:d9:d2:9f:18:39:74:ae:75:9b:7f:57:57:b3:da:c0:bc:
dd:0a:74:3a:74:b1:9c:23:2e:c4:c6:e8:88:9b:24:a0:5f:1b:
35:62:87:f1:f6:a7:fb:2c:52:f2:16:73:d9:1c:52:ba:4e:ff:
1e:85:e9:2f:da:51:8b:b0:fb:fc:3a:f1:8f:dc:d1:fe:06:af:
fa:5d:c0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:46:26 2025 by rpki-client