Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0D21F6AF40F11EF8A989276762E951A.roa
File: E0D21F6AF40F11EF8A989276762E951A.roa (raw, json)
Hash identifier: eek6V6Y4mqQUeM4gnMsGH/VtzH0odNBYVFgEjnI4cqk=
Subject key identifier: 45:60:80:75:53:52:A5:48:0B:F9:31:31:9F:CA:81:8E:CF:FF:C1:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01610B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0D21F6AF40F11EF8A989276762E951A.roa
Signing time: Wed 26 Feb 2025 07:04:11 +0000
ROA not before: Wed 26 Feb 2025 07:04:07 +0000
ROA not after: Mon 21 Jul 2025 07:04:07 +0000
asID: 133199
IP address blocks: 154.218.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90379 (0x1610b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 07:04:07 2025 GMT
Not After : Jul 21 07:04:07 2025 GMT
Subject: CN=67bebcea-2d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:48:88:54:08:85:51:d0:76:f9:27:c9:95:52:
05:11:2f:0b:6c:d3:f2:87:0e:a6:e3:c3:f9:eb:73:
42:5d:69:de:af:03:39:6b:6b:72:c6:f7:04:b4:e9:
24:14:5a:30:56:9e:30:a5:0f:2c:83:ab:d0:57:96:
5e:af:ef:4f:cf:1e:99:47:57:4c:15:0c:8a:2a:36:
f9:b8:46:52:ed:85:5b:ec:ab:5c:8d:01:87:2b:9b:
ce:77:99:cd:b6:99:b3:c1:04:c4:8a:44:4e:72:cb:
31:43:f2:28:ab:ce:2a:65:98:f7:ac:45:00:f4:92:
01:82:19:cc:5f:f5:94:b4:49:56:c4:90:96:f0:22:
ae:e9:ba:11:80:49:e5:79:e2:6e:3a:ec:f4:f4:ec:
45:e5:a9:1b:5a:a3:fc:55:b1:6b:bf:2f:10:fd:20:
d0:52:9f:63:5f:e5:76:97:a4:db:6b:b7:7c:37:28:
cb:8f:ad:d5:22:d8:b7:22:5e:dd:6a:b8:95:51:90:
66:9b:62:a3:0c:8b:b7:d1:57:69:42:7d:75:90:09:
60:43:5b:fe:50:ed:98:d7:78:93:f3:f3:f0:2e:cd:
e0:56:61:ab:58:a2:00:5f:0d:d7:d9:81:43:a6:5f:
fa:15:97:1c:37:a8:51:64:8c:35:92:f1:6f:82:80:
30:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:60:80:75:53:52:A5:48:0B:F9:31:31:9F:CA:81:8E:CF:FF:C1:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E0D21F6AF40F11EF8A989276762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.13.0/24
Signature Algorithm: sha256WithRSAEncryption
54:1e:f7:a7:0b:d1:aa:a1:ae:4f:de:97:76:d2:11:d3:98:6c:
0c:f9:99:e2:dc:e3:9e:e6:54:b3:a1:bb:d2:ae:f4:c0:26:d6:
0c:74:4a:5a:b3:b4:46:8f:9d:50:4b:a2:54:a8:3f:de:32:bd:
0b:e3:c9:a0:49:e8:3b:af:5c:32:60:d1:5f:c7:c3:6a:3c:46:
6b:3f:2a:b6:6e:fe:a5:8c:7a:4b:78:fc:44:d5:3c:a0:b8:17:
ab:40:4c:f1:d4:8e:15:4e:41:3e:4c:52:e8:65:f6:4d:6a:83:
4a:09:7c:ed:8a:17:af:a3:25:eb:be:f4:3b:2e:fd:3a:f9:59:
ca:73:94:eb:7f:2d:6f:44:bb:dc:a2:23:df:1f:7b:f4:a1:c5:
73:5e:e0:20:e5:fc:08:d2:ca:de:5e:8b:07:23:cb:ed:c4:9f:
bd:c9:f3:cf:b2:a5:61:ee:8f:8f:72:7b:70:eb:a3:5b:ef:0c:
e0:82:ea:91:85:93:ed:7f:d2:5a:0a:1c:62:5a:80:40:68:e7:
fe:58:fa:8d:2b:84:86:de:ec:70:5e:f1:42:b9:9e:76:6a:e2:
c5:3e:b2:ce:f4:5a:52:79:93:d0:24:2f:bc:dd:5d:3c:23:95:
a6:29:db:3a:89:13:1b:64:a7:a2:68:b8:d0:5e:b9:41:00:28:
ef:98:69:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:27:25 2025 by rpki-client