Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2421D38F3F611EF9A04C74E762E951A.roa
File: D2421D38F3F611EF9A04C74E762E951A.roa (raw, json)
Hash identifier: 6wxFykzQBSdbrvvvpa8CoHhWEK2b1jWVEGzeerim0/Y=
Subject key identifier: 09:BB:FE:18:6F:2C:BF:07:29:6B:2D:71:2B:EE:6B:09:87:4D:52:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2421D38F3F611EF9A04C74E762E951A.roa
Signing time: Wed 26 Feb 2025 04:04:49 +0000
ROA not before: Wed 26 Feb 2025 04:04:45 +0000
ROA not after: Thu 19 Feb 2026 04:04:45 +0000
asID: 984
IP address blocks: 154.203.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90307 (0x160c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 04:04:45 2025 GMT
Not After : Feb 19 04:04:45 2026 GMT
Subject: CN=67be92e1-2ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:9a:92:82:7d:df:9d:1c:54:46:c1:69:b7:
dc:c9:8f:f8:9f:b3:57:e0:b1:01:d1:c2:14:1a:11:
70:16:e9:9b:62:4e:f8:fb:5d:a6:a3:f6:7a:9a:2e:
74:e6:04:8b:71:09:fb:03:91:e8:6a:38:13:a2:33:
ae:15:fb:88:fe:0f:4c:c5:d3:63:87:54:c5:f8:c4:
e4:94:e3:3b:b5:d4:7d:5c:99:eb:77:c8:16:a3:e5:
f8:e4:ad:93:43:8e:f2:6b:8c:30:dc:ab:2d:df:f8:
77:47:7b:fe:f3:e8:52:53:4e:8f:2d:fa:07:87:75:
00:d0:2a:b2:0b:c5:b5:8d:3b:2f:15:d5:22:0d:cf:
95:18:f7:4f:8a:04:10:cf:27:8b:53:1e:8d:5c:1c:
3c:51:bf:81:5c:cb:6d:72:da:09:c1:31:f5:c1:93:
10:8e:a7:fe:2b:21:76:34:a1:06:47:19:37:7a:41:
7a:6b:7c:79:77:a6:66:31:d9:b0:50:30:50:66:ca:
9f:71:78:84:03:21:6e:bb:67:d1:fa:e2:87:2f:b6:
19:81:f3:af:97:36:12:92:69:c4:4f:1e:07:0b:26:
e9:d6:8f:5b:8b:d9:30:70:df:0a:1a:e7:6a:d4:47:
b1:0e:8d:4d:01:0e:79:28:3d:7e:31:16:79:1b:d9:
2c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BB:FE:18:6F:2C:BF:07:29:6B:2D:71:2B:EE:6B:09:87:4D:52:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2421D38F3F611EF9A04C74E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.121.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e5:62:4d:57:8c:1b:32:ae:15:0f:14:dc:ef:28:e6:8a:5e:
5c:36:e2:b8:bf:b8:81:19:9e:73:e7:ca:2a:7a:ff:3b:fb:40:
ea:f6:88:b7:9d:55:f6:21:a7:8c:fb:72:93:e7:c2:24:2e:96:
82:e2:e9:1e:8d:c2:da:c5:8a:47:7a:8c:17:1f:1b:d6:3f:15:
b7:c3:c3:f3:53:fb:e1:18:bb:b7:fe:70:b5:3a:c7:1c:5c:e7:
3a:16:f0:88:de:b4:35:76:56:62:60:fa:22:af:8b:d2:56:60:
22:68:a0:f7:1b:85:c0:62:1d:07:d2:a6:9f:72:b1:e8:05:bb:
b5:87:2c:fe:d1:b9:20:72:2c:33:dc:7f:dd:30:fe:40:2f:2d:
29:39:96:23:1b:f8:68:29:38:61:f0:eb:b6:bb:1f:21:91:76:
f3:b9:3a:25:85:84:77:a4:4f:92:d9:48:ce:64:9f:a7:17:5d:
94:78:a6:35:cd:d1:02:36:a0:f7:fb:0f:75:a6:4f:91:33:37:
0f:6f:11:5a:d6:27:b1:28:c9:07:2f:45:c6:a3:79:48:4c:bb:
e2:43:45:a4:4e:6d:ce:03:77:69:e0:35:59:32:8e:4e:a2:a0:
16:ca:33:f6:95:26:24:b9:36:44:a3:f3:d1:f1:e7:8b:66:17:
5c:4e:33:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:19 2025 by rpki-client