Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2A03CFCF4AD11EFB0196641762E951A.roa
File: E2A03CFCF4AD11EFB0196641762E951A.roa (raw, json)
Hash identifier: 1G/0M81x4p0g/zbbQiSmycGyL1NLK0PQQGp2E8r96f0=
Subject key identifier: 33:AD:A3:17:27:9A:27:DB:9C:11:36:1B:5A:75:9C:CB:5F:1C:BE:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016626
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2A03CFCF4AD11EFB0196641762E951A.roa
Signing time: Thu 27 Feb 2025 01:55:14 +0000
ROA not before: Thu 27 Feb 2025 01:55:10 +0000
ROA not after: Thu 19 Feb 2026 01:55:10 +0000
asID: 984
IP address blocks: 154.200.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91686 (0x16626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 01:55:10 2025 GMT
Not After : Feb 19 01:55:10 2026 GMT
Subject: CN=67bfc602-2a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:11:e8:07:8d:c2:09:a1:ab:1d:c7:5f:bb:51:
0e:4c:ae:f1:9f:ab:99:8e:ea:1e:50:c4:c4:de:57:
41:1e:65:15:84:e6:4b:dc:6d:23:6c:2d:f6:2f:d2:
36:c1:f0:cc:0d:b6:6d:71:98:f7:12:95:9d:91:13:
ea:6a:5e:d1:e0:f2:6c:f7:53:8b:c1:38:ed:f3:cc:
22:60:38:cd:81:41:03:2e:d0:ce:df:5b:bd:55:29:
16:3f:77:f4:77:a6:80:94:90:f5:72:c4:8e:cf:1b:
16:d2:5f:c2:00:47:fc:03:55:93:4f:73:61:01:35:
df:3f:a2:52:fb:cb:3c:a6:ac:84:b5:bc:dd:85:a0:
f0:ab:ae:44:54:0b:10:5a:d2:d8:ba:0a:93:9c:fb:
20:9a:15:a4:f9:17:b6:99:a0:96:da:e7:89:37:5c:
f8:64:f6:c3:5c:f6:f9:bb:e3:2b:18:e4:11:4b:c7:
23:7a:1f:f8:c4:32:9d:54:f9:e4:7b:57:28:f8:43:
3d:9a:cc:13:f0:bd:62:bc:22:c3:d4:37:67:95:b7:
dc:91:d3:de:bf:67:93:58:77:4b:04:b6:f8:5a:86:
12:30:74:c1:32:e4:39:4e:6c:1c:22:fc:c9:71:b6:
78:a9:b7:a7:81:ad:b0:d2:70:8c:57:c0:ca:11:89:
87:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AD:A3:17:27:9A:27:DB:9C:11:36:1B:5A:75:9C:CB:5F:1C:BE:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2A03CFCF4AD11EFB0196641762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.74.0/24
Signature Algorithm: sha256WithRSAEncryption
65:77:28:77:c3:c0:91:02:d7:37:e0:bf:cd:b5:0d:82:cc:bb:
00:d0:19:d2:37:f3:06:5f:c2:b0:22:23:47:20:cf:e8:fe:8f:
6e:25:af:24:d1:4c:8b:50:57:10:85:ea:f1:0b:55:bc:2a:d2:
9e:00:be:37:a2:79:db:12:36:09:ee:16:bd:3e:08:1f:ec:65:
de:b6:1e:7c:7f:94:b5:93:d3:19:57:57:c1:19:6b:68:a0:4b:
2f:28:1b:2e:3b:63:2e:4f:ea:0d:00:a9:cf:51:bd:a2:5c:cf:
06:82:de:31:60:23:1a:ac:0b:ec:74:16:d1:19:b6:68:2f:7c:
b1:33:ce:e9:11:d0:e8:a4:c8:10:db:d2:9f:de:5b:5e:d3:05:
94:47:30:11:2d:b5:23:38:f2:62:04:87:46:0c:dd:ad:ad:8a:
3b:83:b1:a7:be:40:a2:e1:15:cc:2f:58:3e:e5:57:8c:90:72:
7a:5b:7c:a0:75:c4:48:43:41:1a:74:30:3d:a0:c4:1e:9f:55:
91:73:fb:b6:47:16:2d:89:2f:1a:b5:a6:5a:ed:0c:ad:cd:99:
a6:a4:71:42:6a:72:56:bd:b9:09:5f:92:91:1c:c2:e9:c4:f1:
42:11:93:e8:9f:64:8d:de:d8:f6:7f:26:0e:ad:82:25:3b:17:
e3:00:b9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:44 2025 by rpki-client