Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C24C2492F3E111EF95CAEEAD762E951A.roa
File: C24C2492F3E111EF95CAEEAD762E951A.roa (raw, json)
Hash identifier: d2Nmxc2lId0DXuhGCNOTKXXg/sHjF/cT80KFBtgJKu8=
Subject key identifier: DA:EF:12:AA:D5:45:A2:F8:09:AA:41:F5:DB:B3:25:90:7D:E4:0D:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016060
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C24C2492F3E111EF95CAEEAD762E951A.roa
Signing time: Wed 26 Feb 2025 01:34:02 +0000
ROA not before: Wed 26 Feb 2025 01:33:58 +0000
ROA not after: Thu 19 Feb 2026 01:33:58 +0000
asID: 984
IP address blocks: 154.92.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90208 (0x16060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 01:33:58 2025 GMT
Not After : Feb 19 01:33:58 2026 GMT
Subject: CN=67be6f8a-9291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:55:b6:4c:83:06:b6:7c:48:db:0f:9b:13:
32:47:6b:51:97:26:f5:0e:af:3d:18:ca:de:a1:ca:
fe:2f:da:77:5a:75:d0:49:2e:47:86:91:32:5c:ba:
a6:be:2f:70:85:4f:a3:4d:f8:a9:2d:07:2d:72:c3:
c2:68:29:4e:1b:b6:71:32:14:63:4b:a0:7b:9c:71:
fd:7e:d6:a0:73:d0:bf:fc:b9:83:a5:3e:73:bd:4b:
6e:27:fd:ed:70:f7:43:ab:10:50:37:9b:82:f1:a0:
3b:7a:7a:ca:99:ab:ac:b8:f7:43:25:dc:1d:07:89:
63:a2:61:7f:da:e3:de:59:9a:14:18:4a:9a:cf:be:
6c:40:b8:7d:57:c4:a4:29:ec:31:3b:7c:fe:74:26:
cc:d4:8f:8f:94:eb:9f:1c:ae:94:64:a9:d2:c0:9d:
4d:02:46:8f:ee:46:85:61:d0:09:d2:f9:6c:ff:e1:
87:da:df:42:43:60:40:e4:4d:8a:4d:10:e9:33:ca:
57:5c:ac:38:81:d7:c6:6f:a5:82:de:20:94:06:fa:
a8:36:c0:46:d6:cf:a8:3f:15:ba:cc:23:ba:fe:f2:
b9:ab:b6:c2:2b:d8:c4:98:46:49:27:9e:5c:89:de:
ac:b1:36:1f:79:9b:cd:28:84:94:bd:1f:2c:7f:73:
03:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EF:12:AA:D5:45:A2:F8:09:AA:41:F5:DB:B3:25:90:7D:E4:0D:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C24C2492F3E111EF95CAEEAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.237.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a3:54:a4:6d:8e:ac:a1:cd:d5:3d:8f:4d:91:4c:ed:38:c3:
7d:cc:02:c2:5d:e7:e8:cd:de:54:74:f2:79:1d:80:59:e9:8d:
5e:9b:dc:4c:6d:bc:f2:e8:ea:6f:e2:e2:e5:67:36:4f:f6:67:
11:2e:90:76:42:f1:63:a1:56:fd:28:f5:c5:c3:e7:18:2a:b4:
0e:a3:64:6e:9a:a4:c9:c3:ed:a7:60:3d:2e:35:ff:b1:75:25:
30:8f:fb:db:46:5f:22:28:32:06:a6:c0:74:6c:89:1a:e6:96:
f9:b8:bc:b1:8e:e3:9a:af:7d:d9:38:08:53:97:d7:c9:a6:63:
b8:fc:74:72:b0:8d:4c:de:d3:4f:d9:6c:06:11:6b:dc:0d:c2:
6f:04:b1:91:a6:32:8c:0c:47:44:81:5e:c4:80:03:73:06:dc:
1e:ff:09:46:2d:8f:39:90:d3:38:45:ab:04:cc:fe:5f:2f:31:
39:d3:b8:bb:0a:2c:1d:bc:c1:f0:02:1a:f7:c9:01:e5:22:f9:
e0:d0:d6:58:48:a7:21:c4:2a:8a:e7:e8:de:c1:07:55:75:ef:
ca:8d:d7:65:3e:c3:1b:0c:18:0f:d7:04:80:7f:0e:65:bb:3c:
2e:ec:de:02:66:88:a6:5f:1d:9b:b6:a0:2e:da:4b:05:aa:c9:
10:29:58:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:29:49 2025 by rpki-client