Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7D2B6C2F43811EF9F7A8E93762E951A.roa
File: C7D2B6C2F43811EF9F7A8E93762E951A.roa (raw, json)
Hash identifier: X2G/xS0d/O1JTFjPQeFYTO5jOoEurzKBwSzlto1O21U=
Subject key identifier: CB:B6:98:67:46:5F:D4:FC:87:96:B1:3C:78:64:57:92:04:71:C1:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0162D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7D2B6C2F43811EF9F7A8E93762E951A.roa
Signing time: Wed 26 Feb 2025 11:56:58 +0000
ROA not before: Wed 26 Feb 2025 11:56:54 +0000
ROA not after: Fri 20 Feb 2026 11:56:54 +0000
asID: 984
IP address blocks: 154.199.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90840 (0x162d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:56:54 2025 GMT
Not After : Feb 20 11:56:54 2026 GMT
Subject: CN=67bf018a-cd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:dc:8c:23:be:0d:72:18:2a:b4:a0:60:cd:
5d:6d:61:d3:53:8f:73:58:db:a2:69:dc:29:b2:01:
f6:c9:de:78:09:36:e0:3f:90:4f:ff:e0:0f:4b:f6:
3f:9e:28:95:e0:c5:e5:cb:27:bf:da:e6:37:98:d7:
c7:91:80:c4:21:b0:4f:4a:33:f3:89:a4:2a:e4:6d:
25:ae:f7:8e:db:b8:88:8b:5d:66:07:27:78:4d:08:
03:27:da:67:e2:98:96:76:36:10:7a:15:b9:22:23:
ab:43:e7:7a:81:1e:01:3a:9d:e1:de:d8:7a:1d:e3:
dc:f1:72:d6:b0:18:6e:b5:1f:8b:ec:00:eb:c2:94:
1a:78:a4:78:68:bd:43:88:ae:87:b0:f4:87:af:af:
8e:0a:93:6d:b1:c1:ac:b9:df:74:20:f6:e2:cf:b4:
7d:4c:b0:3e:23:8b:50:91:85:00:15:47:1e:ce:ac:
7e:d1:85:44:fb:f5:7d:a4:9d:0b:ae:0a:c4:cb:50:
5d:2b:b7:bd:cc:4b:7d:b4:5d:ee:fd:5a:dc:42:39:
80:10:42:d8:e0:77:d3:83:c0:6f:d8:9d:3e:b6:01:
44:10:29:ac:b7:1a:2f:85:01:86:c0:8f:d5:11:10:
0d:7d:56:4a:f0:5b:6b:79:1c:2d:4a:2e:14:47:21:
49:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B6:98:67:46:5F:D4:FC:87:96:B1:3C:78:64:57:92:04:71:C1:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7D2B6C2F43811EF9F7A8E93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.145.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:63:88:69:fd:35:c3:7d:1c:d7:d3:07:94:65:fc:93:64:ce:
83:1f:cb:4a:ee:08:9d:64:f1:85:00:38:8b:99:a2:72:da:f2:
a7:5a:58:0e:7b:0f:a6:e0:9d:ab:d9:01:71:ae:17:8c:f3:7c:
bd:91:84:65:81:c7:fe:e0:2d:f1:41:de:e3:d8:c6:9d:52:73:
cd:6b:b9:85:e8:d0:e4:23:3b:d9:38:3c:b5:69:bf:de:52:41:
3b:81:f5:25:dc:88:17:a5:82:36:4f:01:73:89:fa:95:1c:d8:
e5:3d:cd:e1:15:d3:9c:1b:e5:bc:46:5d:77:9d:02:3d:9d:41:
2a:83:b2:fe:51:23:c0:bb:55:6e:c6:b1:31:56:e9:3b:1b:95:
4c:1f:eb:10:f7:1e:a0:5e:23:3a:2e:05:90:3f:ea:c9:72:a3:
1a:37:7c:81:31:9a:b5:68:d5:4f:7b:43:a1:04:81:06:ad:d4:
d1:79:bb:f8:a1:09:95:14:96:ac:84:61:45:84:a6:a5:66:04:
49:14:9d:25:47:b5:7b:bc:37:88:df:41:86:14:6a:b7:15:1f:
f3:51:7a:b0:06:b7:30:e3:f5:9d:3d:9b:fd:5e:5d:30:b1:d7:
02:fd:64:df:2a:33:76:49:05:52:7f:01:17:66:d7:88:20:49:
7b:20:46:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:51 2025 by rpki-client