Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5FAECECF45A11EF8B4EB981762E951A.roa
File: E5FAECECF45A11EF8B4EB981762E951A.roa (raw, json)
Hash identifier: WBnUu1laoa0eh1NsGaI4VTgVV8wIeizRfNgcUCcGEsU=
Subject key identifier: 1A:FD:DB:0C:92:E4:1F:23:F1:4E:AC:3D:3C:CF:87:97:15:D2:ED:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016503
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5FAECECF45A11EF8B4EB981762E951A.roa
Signing time: Wed 26 Feb 2025 16:01:13 +0000
ROA not before: Wed 26 Feb 2025 16:01:01 +0000
ROA not after: Thu 19 Feb 2026 16:01:01 +0000
asID: 984
IP address blocks: 154.210.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91395 (0x16503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 16:01:01 2025 GMT
Not After : Feb 19 16:01:01 2026 GMT
Subject: CN=67bf3ac8-70fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:70:0c:9f:88:22:12:2d:c7:b5:42:17:3d:
d4:09:cc:9b:cc:c9:d3:df:cc:73:c4:67:47:15:b0:
8b:aa:8f:65:30:dd:6e:e0:75:24:d7:81:bb:0c:44:
ea:ff:15:32:ef:54:d5:b1:63:3b:37:fd:92:8b:7c:
d6:53:3a:d2:7c:ac:d0:a8:ab:c1:c2:60:d9:10:ed:
1f:35:c7:9e:4a:28:58:97:a9:63:c5:9f:3d:a5:4a:
2a:b4:a7:42:c6:54:aa:36:41:85:d4:3e:69:8e:88:
0e:13:c4:e4:26:cc:6d:af:c8:b2:a9:bd:87:30:d7:
36:04:27:71:ee:db:56:75:62:55:55:37:41:5e:7d:
cb:31:b6:78:70:19:36:c9:72:47:69:75:c3:52:d0:
7f:be:75:ef:8e:24:49:87:e2:2a:ec:87:1a:e0:44:
cd:14:22:8c:a1:38:d0:b9:22:89:f2:41:bd:92:63:
77:53:58:57:01:4c:e3:a5:50:82:48:ad:fe:6f:b2:
08:1c:e0:e7:ee:69:8d:c9:22:77:b3:dd:49:fb:e8:
65:0e:00:a1:05:dc:0a:d8:ce:41:7c:e6:44:54:c8:
55:19:7d:ca:97:0c:5f:6a:fd:3e:ed:ac:00:34:14:
fc:03:d0:d9:d7:74:56:45:5a:af:82:32:1a:3e:e6:
b6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FD:DB:0C:92:E4:1F:23:F1:4E:AC:3D:3C:CF:87:97:15:D2:ED:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5FAECECF45A11EF8B4EB981762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.108.0/24
Signature Algorithm: sha256WithRSAEncryption
96:85:55:0e:e7:8f:2a:92:5b:51:42:62:0c:9a:b8:5d:0c:31:
26:81:52:d1:72:65:20:69:76:0e:3e:db:31:06:eb:7d:e8:2a:
97:59:13:25:72:9b:21:da:02:b2:01:fe:b5:7e:0d:07:4d:09:
63:ea:c7:62:26:99:b6:d0:60:75:b8:74:e2:e8:99:82:69:71:
aa:7a:75:3b:65:96:14:a4:0a:96:5a:da:65:71:67:cd:9a:6b:
8e:fc:94:f9:b5:9c:d6:b3:fc:f5:96:b8:31:eb:24:13:89:77:
f4:94:52:f9:13:a0:ee:d4:0a:86:c3:98:12:8f:38:71:c4:85:
32:02:df:33:61:36:cc:b3:14:46:83:9b:66:0e:b9:9b:fa:ca:
05:cb:44:02:17:d6:07:d0:82:0e:6f:10:d0:99:cd:bc:65:4c:
09:32:22:d7:1e:fc:ce:15:e5:6c:ff:c0:a2:6e:56:08:1b:7f:
a6:26:97:a7:bd:17:ea:c1:fe:71:27:e1:15:f3:13:ad:db:82:
4c:d9:c4:58:2d:7f:94:4c:71:cb:71:ed:c2:86:70:da:75:f7:
90:e2:3f:44:80:74:a2:f3:ce:ba:2a:d9:55:67:9f:89:74:31:
c2:ca:d4:cb:cb:6b:85:be:c9:0d:10:b8:34:3d:e6:22:d8:be:
a8:45:2e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:09 2025 by rpki-client