Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C96152E4F4F811EFB914144B762E951A.roa
File: C96152E4F4F811EFB914144B762E951A.roa (raw, json)
Hash identifier: jdWa1siH2QVeOeIgffPwpCtqvUmeY5FwK6WbeKRLO0o=
Subject key identifier: 26:5F:C2:A0:18:D0:FD:FF:EB:DC:B8:F7:AA:60:B4:B3:0F:0E:79:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0167F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C96152E4F4F811EFB914144B762E951A.roa
Signing time: Thu 27 Feb 2025 10:51:24 +0000
ROA not before: Thu 27 Feb 2025 10:51:18 +0000
ROA not after: Thu 19 Feb 2026 10:51:18 +0000
asID: 984
IP address blocks: 154.204.124.0/24 maxlen: 24
154.204.125.0/24 maxlen: 24
154.204.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92147 (0x167f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 10:51:18 2025 GMT
Not After : Feb 19 10:51:18 2026 GMT
Subject: CN=67c043ac-3890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:99:f3:ec:9a:71:ad:d4:69:c8:ba:f4:4e:5e:
c4:c7:dd:b5:75:0c:37:cd:15:f7:5c:04:72:c0:60:
a9:2f:8f:09:ce:14:62:ec:8d:cd:43:8e:f2:58:a3:
18:4a:58:a1:c7:67:a7:5f:21:37:3b:aa:be:4b:94:
4d:6c:77:89:c7:dd:7a:6d:32:ed:b5:a4:2e:17:69:
2d:62:27:01:f4:26:40:5d:6c:1e:cc:db:50:4f:9a:
2a:48:3d:f5:e0:c1:dc:d0:94:df:c2:40:76:d8:34:
1d:37:c2:dd:43:40:61:e2:1e:09:55:7a:84:31:ab:
9b:93:50:70:72:31:a3:36:e4:72:e2:11:34:45:01:
13:0c:72:45:84:68:35:ed:cf:9b:47:db:b4:75:d3:
ef:86:5b:3a:24:5c:c3:47:5f:4e:5a:57:89:19:61:
62:fe:2c:1e:fd:8f:3a:88:4d:46:1b:a9:41:cc:d3:
76:9a:d0:8d:70:ab:50:a7:f0:2c:cb:7e:71:3a:47:
46:9e:17:03:6e:e1:d9:e3:0d:39:4c:4f:8b:c3:ca:
e9:41:f4:40:73:56:df:8f:ad:19:4a:0d:e9:dd:65:
76:6f:d1:d6:e7:63:fb:45:9c:a8:c1:f8:0d:30:cb:
cb:f1:7c:80:60:3b:bc:4f:2e:e4:d1:4f:b3:ea:ca:
bc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5F:C2:A0:18:D0:FD:FF:EB:DC:B8:F7:AA:60:B4:B3:0F:0E:79:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C96152E4F4F811EFB914144B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.124.0/23
154.204.127.0/24
Signature Algorithm: sha256WithRSAEncryption
27:9c:45:64:1b:cf:7c:6f:36:a3:e6:3a:c4:09:31:a5:91:d2:
6f:1a:64:b5:2f:78:95:1e:b2:c2:eb:34:cc:e5:3b:33:ec:69:
f6:19:46:e8:01:75:00:ea:05:b6:9c:ba:25:d3:57:33:4d:aa:
2a:95:4d:2c:d3:42:ec:31:6e:eb:b8:47:47:68:97:d5:0d:26:
65:b1:a1:69:3b:a1:fa:18:04:f3:e3:4a:ca:7d:c9:2a:0f:f2:
fa:69:53:37:36:90:e5:89:c4:e9:6b:7c:34:53:4f:a2:03:b7:
95:62:9e:bc:e7:48:ed:a2:c8:be:82:e4:5f:1c:54:e8:00:be:
05:3f:2c:80:10:c6:2e:1a:a4:21:aa:21:9d:90:22:75:93:7d:
6b:08:00:bf:17:a5:9b:a2:44:4a:3d:bd:75:e8:8e:59:0a:aa:
6f:88:10:13:44:42:31:05:b6:51:9f:12:72:4c:f2:74:da:4b:
0a:88:4b:23:78:ba:45:fc:03:d6:59:f3:a3:88:11:07:86:3a:
92:a2:02:49:26:ec:29:11:6c:d1:60:91:45:13:39:8d:ee:2c:
f7:3f:32:a7:36:04:90:58:59:f3:6c:da:fa:8e:50:80:7f:53:
d2:a9:ec:cc:1e:72:e9:91:d8:5e:fe:8a:a3:f1:92:24:b9:f7:
b1:8b:6b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:54 2025 by rpki-client