Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C51FFE12F5C811EF9BE8445D762E951A.roa
File: C51FFE12F5C811EF9BE8445D762E951A.roa (raw, json)
Hash identifier: IFktrFiv8fOKrJe3H1VBwbrooyp7ZjSTz5QwCTrNVVY=
Subject key identifier: AD:33:B4:66:55:EA:58:5D:5D:48:43:3A:A3:78:57:E5:97:5D:67:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016AFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C51FFE12F5C811EF9BE8445D762E951A.roa
Signing time: Fri 28 Feb 2025 11:40:12 +0000
ROA not before: Fri 28 Feb 2025 11:40:08 +0000
ROA not after: Fri 11 Apr 2025 11:40:08 +0000
asID: 138915
IP address blocks: 154.203.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92924 (0x16afc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 11:40:08 2025 GMT
Not After : Apr 11 11:40:08 2025 GMT
Subject: CN=67c1a09c-d444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:0d:82:2b:67:f9:3f:b2:51:89:c9:dd:5c:
6a:5f:36:24:5d:97:6c:c7:93:ec:9f:63:7e:ec:b1:
b5:bf:52:57:f5:d8:26:f1:e9:de:3d:58:b9:f8:28:
8e:9d:7b:e7:71:33:1e:7f:a0:1c:5a:ba:fb:9d:52:
5c:8a:57:4a:8e:7e:c8:52:81:2e:d6:82:7f:d5:65:
6b:23:e2:4a:4c:ab:b7:c0:e2:fa:56:f7:6a:2b:b1:
5e:83:e7:2b:b8:19:a4:26:3c:8a:c0:b6:da:50:61:
8e:5e:31:50:37:e4:cf:83:a5:cc:15:67:12:71:72:
b8:7a:31:86:30:a0:4d:a1:8f:01:31:0d:f1:25:55:
a8:e6:8a:3b:ec:45:8d:68:4b:81:2d:a8:af:93:a2:
ec:e1:73:ad:7a:7b:de:34:dd:66:9c:17:44:c6:12:
8a:a9:ee:c1:05:16:78:82:e6:13:2b:89:ff:3e:57:
85:61:61:56:87:5e:06:a6:ca:fb:a2:2f:6b:c6:75:
9a:4e:3e:26:17:80:0b:c1:9f:7f:c0:86:bb:9a:22:
7c:14:84:37:5f:77:fc:78:35:6a:b8:8e:77:3d:bb:
fd:3d:f5:15:ea:80:64:55:b6:3e:a9:c4:95:25:cb:
1f:84:36:d2:13:38:42:7a:3d:8f:bd:a3:3f:42:dc:
14:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:33:B4:66:55:EA:58:5D:5D:48:43:3A:A3:78:57:E5:97:5D:67:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C51FFE12F5C811EF9BE8445D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.164.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:e2:b2:cc:28:13:ac:50:ed:95:67:ff:ba:b1:ce:37:03:5f:
d8:09:fb:b3:0e:9e:84:6d:2d:46:57:81:f2:d9:a9:b9:a5:16:
86:b2:b7:da:88:5b:ea:df:76:d4:64:68:f6:82:d6:1f:f3:80:
99:f3:b9:0a:b3:9d:14:83:ca:8e:ee:0d:e9:26:fb:2b:d1:fb:
e0:02:96:e3:c5:6e:37:67:1a:3b:04:fe:7e:a0:38:42:52:cd:
1c:f7:b9:6c:4b:be:77:d4:93:29:83:76:61:34:69:f8:69:ba:
e1:95:79:54:5d:e4:51:0b:25:5e:ab:d1:70:51:c0:2c:03:9a:
af:a4:54:83:81:59:9a:ad:6e:84:ab:87:fd:f6:c6:c5:0c:07:
cc:4d:46:e0:7e:03:2a:fc:8c:41:73:98:13:18:d3:d9:97:6e:
fb:96:f2:85:3a:29:6f:53:9d:51:69:48:64:cf:1f:12:2f:88:
2e:46:8f:ae:81:5e:bf:2c:d4:84:ea:3b:0b:5f:c3:05:63:f0:
52:db:ac:9d:d5:9d:b3:18:db:c8:9b:cc:e9:c9:22:52:47:0d:
5b:06:10:89:f4:59:46:5a:96:34:37:0b:0e:40:d0:a0:6e:b2:
ff:db:1c:0c:45:a2:1c:04:4a:22:64:38:b0:a5:aa:a2:2b:66:
ba:7e:c6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:15 2025 by rpki-client