Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4A6CE10F42F11EFA5BEA554762E951A.roa
File: C4A6CE10F42F11EFA5BEA554762E951A.roa (raw, json)
Hash identifier: 19ZVAJxBJPFQM74DKp2UydbQ0wTynTR6oiTzCaaSw30=
Subject key identifier: 0F:8F:C1:10:71:E5:E5:15:4B:7C:0E:7A:D8:0E:5A:12:E3:9B:84:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01625B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4A6CE10F42F11EFA5BEA554762E951A.roa
Signing time: Wed 26 Feb 2025 10:52:27 +0000
ROA not before: Wed 26 Feb 2025 10:52:24 +0000
ROA not after: Thu 19 Feb 2026 10:52:24 +0000
asID: 984
IP address blocks: 154.208.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90715 (0x1625b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 10:52:24 2025 GMT
Not After : Feb 19 10:52:24 2026 GMT
Subject: CN=67bef26b-c1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5d:1b:61:b6:b3:d6:10:0c:cb:e1:33:b8:5e:
d0:67:60:34:04:ac:cf:93:23:cd:32:ed:f7:c0:bd:
14:9b:7d:19:3d:f1:e4:a9:82:ed:32:09:8b:80:45:
f2:28:f0:5a:66:6a:82:2d:4a:99:70:00:17:ca:dd:
fd:d2:e4:97:de:ea:f3:44:f7:66:16:88:44:c1:79:
ea:a4:26:06:53:f1:48:ec:2b:39:a1:1f:33:26:e7:
3e:f4:9b:3a:79:c1:cd:c3:ba:53:43:3d:6b:15:52:
cf:ed:ff:1f:c1:12:d6:f2:a2:8d:ef:c4:14:93:92:
1a:c3:b2:96:c4:2c:50:94:27:7e:64:6b:6f:95:36:
c8:e0:14:0b:0f:fe:73:ed:7a:e2:92:1f:0b:1b:61:
47:96:d7:16:54:dc:90:72:a5:c6:1f:a6:82:1f:c1:
c1:c2:2e:c6:1f:52:73:0c:cb:0c:5c:89:08:9b:19:
d7:8c:d4:f6:bb:5f:41:4a:80:7a:94:8b:df:df:59:
82:47:42:ed:07:d3:9e:d9:ed:93:09:f9:96:be:5f:
4b:b7:7d:10:9b:94:7d:44:64:13:06:fc:a5:8d:8f:
e5:ae:bc:43:ea:50:33:00:97:d0:98:89:21:45:59:
ab:ad:59:90:54:2f:9d:cc:b6:0c:ad:c7:ac:d4:10:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8F:C1:10:71:E5:E5:15:4B:7C:0E:7A:D8:0E:5A:12:E3:9B:84:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4A6CE10F42F11EFA5BEA554762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.84.0/24
Signature Algorithm: sha256WithRSAEncryption
93:08:0b:8c:dc:23:69:aa:af:d6:ba:02:19:8a:69:f8:7e:35:
11:8d:18:03:ea:30:ee:d4:5d:dc:71:7f:a5:fd:ce:ce:51:80:
21:24:c4:4a:80:53:58:d7:e7:91:d1:a2:71:21:ae:ef:c9:17:
5d:fa:d3:32:e5:2d:54:34:42:30:5a:98:8c:0f:96:1e:2c:07:
cb:ac:f2:4b:73:69:f6:48:73:2d:b1:6b:66:40:8b:0f:f5:4e:
fb:68:0a:f8:54:b3:65:76:7f:76:70:d1:ba:5e:d1:5e:90:09:
ae:03:05:59:e0:1f:ae:c2:92:06:a6:e4:f6:4e:52:e1:f2:38:
d7:9f:e7:c7:47:69:5f:a0:c2:d5:eb:1b:b8:c9:c8:bd:29:67:
64:92:69:fc:37:ed:75:0a:85:c2:34:24:9c:0d:c0:76:e4:70:
cb:2f:c3:76:2c:44:76:64:b2:34:81:5e:6c:52:1b:ea:9e:0f:
71:8d:aa:c2:52:6d:69:85:cd:e7:3a:d2:5f:87:f2:a2:01:f5:
e0:e9:9b:f5:d7:a9:11:09:9f:9a:11:1b:bf:43:9b:35:23:4d:
6d:cd:53:8c:7f:63:2c:39:15:4c:aa:13:87:0b:f0:bb:f7:3b:
3f:9d:60:a4:be:dc:23:e2:1f:eb:b6:87:22:e7:75:82:8a:47:
8c:a6:da:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:25 2025 by rpki-client