Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFF226FAF61711EFAE2EEB72762E951A.roa
File: BFF226FAF61711EFAE2EEB72762E951A.roa (raw, json)
Hash identifier: IaBgvFRW8fhN+jizGL/GBNyjcoIWEfmU90WPpv6QhLg=
Subject key identifier: A0:B0:56:32:14:5A:69:C1:5B:B2:8F:10:C8:41:1D:C1:6A:AD:92:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C21
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFF226FAF61711EFAE2EEB72762E951A.roa
Signing time: Fri 28 Feb 2025 21:05:34 +0000
ROA not before: Fri 28 Feb 2025 21:05:30 +0000
ROA not after: Sun 13 Apr 2025 21:05:30 +0000
asID: 138915
IP address blocks: 154.206.110.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93217 (0x16c21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 21:05:30 2025 GMT
Not After : Apr 13 21:05:30 2025 GMT
Subject: CN=67c2251e-c6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:58:90:35:02:5f:1d:5d:9a:f1:4a:b9:65:
fd:9d:21:27:8c:ea:60:95:c8:c6:02:84:9d:3c:bd:
3c:a1:1d:85:78:b9:a3:03:a3:9a:2c:0a:bf:16:f8:
bd:6c:a6:9a:d4:12:3c:dd:ab:65:72:a2:b1:70:5e:
7c:f8:4f:42:a0:53:dc:d9:15:41:6d:79:0c:14:4c:
29:f1:e9:f8:41:f8:bc:b0:9d:40:b8:26:18:32:5b:
81:a1:9a:ce:ef:93:aa:64:17:81:bd:72:24:e0:10:
9f:b1:13:19:1d:a7:4a:f1:03:7a:18:e3:ae:86:5c:
bf:ac:05:61:ee:d0:0c:e8:0f:d0:d5:91:a6:5a:ec:
fb:c1:bd:96:18:b9:a8:75:80:20:f6:8f:54:e9:69:
48:ef:c1:11:65:e3:e2:67:b3:2a:9d:2b:07:71:b1:
27:02:d7:c1:71:80:c3:6d:1d:1d:f2:18:d7:33:93:
91:67:03:5a:0b:3c:49:80:2a:c5:ce:38:b2:5e:42:
30:07:76:8e:e3:e8:78:7b:06:da:c1:b8:af:5f:9f:
70:85:d6:f8:bd:63:29:72:89:21:92:61:f1:26:c3:
1c:25:c9:87:ec:37:b9:b6:85:be:a8:5e:41:b4:7c:
24:9f:e2:5e:bf:5f:75:07:06:68:42:66:0c:ff:07:
07:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B0:56:32:14:5A:69:C1:5B:B2:8F:10:C8:41:1D:C1:6A:AD:92:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFF226FAF61711EFAE2EEB72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.110.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:75:31:da:fb:7e:4f:f5:0d:76:48:2b:65:7d:73:87:c7:22:
e3:11:0c:bd:0f:71:23:c7:80:8e:87:07:f8:52:f1:06:e7:ce:
6e:d5:d8:1b:39:b3:1f:bf:c4:b1:56:77:19:29:07:60:2d:17:
4a:0d:1e:08:5a:aa:e5:fc:fb:ba:1a:d8:78:ae:b1:a6:c8:4f:
f1:b1:d1:ff:b4:7f:d1:02:99:3f:cb:57:35:c1:88:01:2a:0a:
b5:6e:a3:59:f7:32:db:25:3d:f2:4e:24:5b:9f:53:9d:2a:1e:
98:11:46:89:2b:e7:c6:de:5f:f8:94:c5:21:f4:e6:c2:52:bc:
6c:d4:c6:21:b5:6a:43:1b:c9:e7:c6:fe:b4:e1:55:57:27:af:
52:43:ff:13:a5:f7:d0:52:78:82:68:a7:4d:d4:e1:66:29:25:
0a:61:d1:94:b9:df:28:4f:c8:ec:be:8c:7b:5c:41:dc:f3:22:
9f:b1:a2:3f:aa:da:d8:6a:c1:6b:cb:70:e2:4d:c8:33:38:ec:
18:5e:6b:bd:62:e8:d4:0b:9c:f7:2f:8a:ba:78:ec:16:6c:37:
8e:41:14:6c:4a:14:46:b6:47:ec:64:72:3a:9e:93:fc:ea:6c:
fe:5b:b8:1d:6e:05:05:bc:52:ea:ab:ff:7a:04:0c:76:ad:8d:
49:b5:a9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:27:17 2025 by rpki-client