Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD0E583EF41F11EFA4EE3B64762E951A.roa
File: DD0E583EF41F11EFA4EE3B64762E951A.roa (raw, json)
Hash identifier: iUJoguVGZuFJuGoQoqUBqZo6lMTYTjJfhjoh0Io1R5s=
Subject key identifier: 66:B7:1A:00:7A:45:F2:3A:28:0F:41:B3:9F:DD:F7:59:39:1A:E5:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016187
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD0E583EF41F11EFA4EE3B64762E951A.roa
Signing time: Wed 26 Feb 2025 08:58:36 +0000
ROA not before: Wed 26 Feb 2025 08:58:33 +0000
ROA not after: Thu 19 Feb 2026 08:58:33 +0000
asID: 984
IP address blocks: 154.206.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90503 (0x16187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:58:33 2025 GMT
Not After : Feb 19 08:58:33 2026 GMT
Subject: CN=67bed7bc-d5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:77:05:d9:c5:f1:b2:6b:df:28:e0:30:b3:a5:
1c:f4:01:dc:7c:57:c5:ad:61:46:e9:de:9b:f7:c7:
54:c3:9b:08:fb:f1:a9:9f:58:9f:e5:f4:aa:f8:f8:
a8:f9:06:dc:8b:ae:7e:6e:e5:8c:82:70:29:e4:9a:
a1:06:f7:b7:dc:e8:06:cb:d7:d4:a2:a7:f8:0b:51:
6a:09:57:d3:ee:13:16:8c:f6:53:3b:4c:1d:15:fd:
3d:9c:c0:65:65:66:6a:b5:cd:b2:80:91:03:e2:9f:
14:56:50:2f:e1:fd:2f:28:1f:2c:0f:dc:34:5b:ed:
5d:35:3a:f6:d7:fb:73:22:d4:3a:0c:5d:3e:ca:d5:
38:7b:aa:bd:91:db:53:4f:20:63:63:81:ef:4b:00:
1c:11:ea:09:ef:1e:aa:e2:d9:25:68:2d:7d:ae:5a:
d4:1f:63:ba:73:6e:34:81:bb:2a:97:59:a9:45:a2:
df:0b:2c:c6:32:8f:15:14:9b:b3:ec:e3:50:99:54:
a7:57:39:af:ee:12:05:bf:7b:d6:f7:e4:99:c3:73:
e7:c2:7e:8d:49:b9:b3:85:c5:e9:ee:58:83:c1:a4:
f2:45:1b:7f:5b:25:de:a7:06:c0:ef:2b:cd:94:94:
57:50:80:88:64:5a:68:a0:23:c7:9e:45:a7:f7:8b:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B7:1A:00:7A:45:F2:3A:28:0F:41:B3:9F:DD:F7:59:39:1A:E5:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD0E583EF41F11EFA4EE3B64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.223.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:7b:7e:f8:a1:83:5a:b2:5d:7e:24:f1:d6:99:02:d1:2a:58:
37:30:01:70:26:b6:e8:58:4c:c2:1c:09:6d:ec:4d:31:d6:a0:
b3:96:64:f1:f6:80:2b:16:6a:12:e0:72:ca:34:cc:a5:2d:e4:
c4:ae:e5:9a:ee:bb:7e:26:cd:8d:c3:f9:d3:f6:92:f2:0d:19:
12:e7:76:d6:cd:d6:89:df:f0:d1:5d:36:4b:75:ab:ba:9d:b9:
80:70:ec:f8:3e:bc:eb:f3:e9:f3:49:25:0a:f0:e0:42:ec:9c:
5f:a2:41:10:f1:59:e5:4c:11:df:47:31:cd:8a:3f:10:64:e3:
e8:d8:ef:a7:38:87:fb:55:18:a6:98:4d:ff:63:04:38:f9:78:
cb:2d:2e:77:d3:dd:7a:3c:75:e2:74:c7:bf:78:81:c6:bb:2f:
73:58:94:9c:da:6e:c7:82:77:8b:3a:75:29:24:1a:6b:05:90:
df:ad:49:c0:84:61:30:68:45:52:3b:50:9a:ef:3b:62:b8:cd:
58:96:d3:2c:56:29:8a:f7:06:7f:b1:c9:89:5f:cd:8d:06:c7:
b6:f1:10:8a:f2:df:64:56:38:ae:68:d7:c4:64:bd:15:7b:8f:
1c:ed:80:c9:31:7b:9e:9d:7d:71:93:73:8f:a9:d8:87:2b:95:
22:b6:d4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:25:46 2025 by rpki-client