Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEA102B0F44511EFBCB5536E762E951A.roa
File: EEA102B0F44511EFBCB5536E762E951A.roa (raw, json)
Hash identifier: C20ty5AiqnZJnXr3wDekJOgWI4AIJmewySkIQW1AtcE=
Subject key identifier: 87:56:6E:55:5E:B2:31:F0:23:18:74:9C:BB:A3:B5:D3:29:F7:87:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0163CB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEA102B0F44511EFBCB5536E762E951A.roa
Signing time: Wed 26 Feb 2025 13:31:07 +0000
ROA not before: Wed 26 Feb 2025 13:31:03 +0000
ROA not after: Thu 19 Feb 2026 13:31:03 +0000
asID: 984
IP address blocks: 154.210.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91083 (0x163cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 13:31:03 2025 GMT
Not After : Feb 19 13:31:03 2026 GMT
Subject: CN=67bf179a-fe26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:7e:ac:45:66:46:ec:47:50:b2:fa:b6:39:
79:6d:61:8a:e7:8e:d5:85:14:13:f0:2b:d1:b7:9c:
af:f8:8a:b7:f3:9b:e1:20:c2:03:24:ba:9c:ce:45:
55:24:5e:1f:e0:bb:c4:4f:ad:de:a8:6e:cd:23:9c:
fd:df:0e:25:f6:03:34:03:80:fd:b4:e3:39:55:7b:
d6:78:a3:6e:20:7e:90:39:58:e5:d5:c6:05:c9:b5:
c7:02:44:1d:3f:34:d5:ce:c8:af:cd:88:99:86:5f:
2e:7d:d3:61:83:04:20:f2:c5:fa:fe:83:18:53:ec:
a5:7d:d7:d6:e1:94:94:3e:27:8e:8b:e5:a2:72:7c:
db:bb:5d:bd:b7:21:27:dd:52:49:a0:0d:5d:43:15:
28:80:15:40:f7:b5:3b:58:f4:b0:c5:e8:fd:46:0a:
8e:84:95:5a:f1:95:0f:8a:97:de:be:5b:cc:a2:56:
29:44:0f:92:de:50:a1:3c:13:42:6e:3e:b1:97:a5:
5f:a9:c7:4b:e8:90:7e:ea:7b:d0:67:1c:b8:a4:66:
bb:69:cd:16:28:2e:98:44:86:8f:7a:dd:af:bb:e4:
67:84:fe:70:03:2d:98:02:ea:21:e0:68:75:03:2f:
80:ba:18:8f:4a:44:c4:53:b1:82:8f:a1:ac:33:07:
4f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:56:6E:55:5E:B2:31:F0:23:18:74:9C:BB:A3:B5:D3:29:F7:87:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEA102B0F44511EFBCB5536E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.13.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:05:d1:e7:c5:e5:a4:7c:ea:04:87:ea:6b:bb:07:3a:30:e9:
be:a8:83:e4:a8:b4:d4:45:d2:35:a6:90:90:d2:86:64:82:f2:
e8:ce:2f:23:96:d8:da:b8:b1:5b:12:79:7a:57:9d:1c:a7:d8:
b5:25:30:cb:47:e8:a0:fb:7b:71:5b:19:5e:52:1d:06:54:4d:
e7:e7:cd:39:c3:db:50:e3:2d:56:26:39:2b:0b:a2:f8:62:b7:
f8:3e:51:bf:dc:42:81:c6:28:ac:ad:67:44:52:53:41:e5:71:
6b:25:26:65:51:28:71:dd:98:92:46:98:72:2b:f4:37:ed:38:
6d:a0:b8:a7:9a:0c:41:29:e8:43:bd:41:43:04:44:55:2a:d7:
98:59:0e:2b:45:6f:fe:18:d5:33:2c:d6:af:65:29:ab:3f:ed:
8f:fd:e1:39:1f:2d:41:dc:90:2e:04:b6:33:b4:e4:d8:a3:b4:
1c:db:d1:33:12:2c:a5:27:d8:33:8f:75:6b:bf:bf:15:4a:3b:
ac:ff:25:27:3f:a0:bd:b6:9c:d7:c4:98:28:f6:3c:0f:24:83:
a4:4a:dc:2e:ae:d6:3e:de:6f:c8:09:76:e0:0a:ae:8f:84:4c:
5d:2a:37:a6:f1:ab:08:11:eb:58:55:41:28:92:61:7f:f5:2b:
15:66:07:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:45:12 2025 by rpki-client