Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0F176E2F41A11EF9059AC42762E951A.roa
File: F0F176E2F41A11EF9059AC42762E951A.roa (raw, json)
Hash identifier: Los5eUyKiCmKrknLuj2SMftUkFLx/CR/QzVPlKDPlj4=
Subject key identifier: 93:B1:E9:A5:1E:29:16:F6:5D:F8:F6:CE:16:50:7D:06:F5:2F:43:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01614D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0F176E2F41A11EF9059AC42762E951A.roa
Signing time: Wed 26 Feb 2025 08:23:22 +0000
ROA not before: Wed 26 Feb 2025 08:23:18 +0000
ROA not after: Thu 19 Feb 2026 08:23:18 +0000
asID: 328608
IP address blocks: 154.200.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90445 (0x1614d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:23:18 2025 GMT
Not After : Feb 19 08:23:18 2026 GMT
Subject: CN=67becf7a-2ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3b:a3:a6:f5:30:5a:4b:38:ee:04:26:55:82:
a2:12:5d:3e:d1:57:65:0f:16:c7:b8:ec:75:01:77:
d0:68:55:64:35:ea:4b:c0:c0:77:96:54:61:f3:02:
a5:51:45:cc:f2:f8:6e:21:f3:2c:d4:7e:7f:92:04:
8c:e6:08:af:35:ac:f9:d4:77:a8:f4:5f:09:c5:d4:
1c:d6:29:0c:fd:42:36:29:36:11:23:c2:d5:65:39:
9c:de:e7:9f:bd:31:5a:d7:56:7d:15:d9:06:3d:3c:
7d:ad:bc:73:cb:16:26:9a:9a:6e:f3:20:15:ce:96:
c9:32:de:23:8d:13:a0:1a:75:72:44:f6:72:74:e1:
46:cc:55:26:e7:09:05:20:ee:a0:8e:61:68:19:3b:
07:e0:34:b6:c8:7c:d5:88:93:e8:77:4a:e2:0d:50:
c6:65:d8:24:1f:50:ed:1b:73:27:40:f5:8a:1b:54:
87:46:ee:11:2b:af:37:da:86:4a:aa:b4:91:36:d8:
94:a9:6d:0e:f2:ba:68:ef:cd:49:63:41:3d:ca:cc:
6a:0c:bc:09:69:5d:ee:4f:08:ed:b2:8e:5c:7f:8f:
79:22:3a:81:a2:4d:0d:7b:e3:82:b1:bd:dd:f1:d5:
45:e9:77:57:c3:78:59:e7:c6:76:f1:f0:ec:6c:da:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B1:E9:A5:1E:29:16:F6:5D:F8:F6:CE:16:50:7D:06:F5:2F:43:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0F176E2F41A11EF9059AC42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.184.0/24
Signature Algorithm: sha256WithRSAEncryption
48:e2:21:c6:fa:37:34:61:81:ce:48:00:e5:73:69:6a:43:9d:
07:f7:c4:8f:5d:d2:74:be:18:24:61:8b:e8:56:5a:c9:03:10:
6c:6a:7b:61:6b:a8:31:c2:0b:8d:da:1f:44:49:97:63:af:b7:
29:06:5f:5d:54:b3:2c:2a:2b:fd:e6:7c:24:5a:2e:37:45:dc:
90:ab:9b:42:8e:dc:c0:bf:2a:96:3f:6c:02:46:97:d2:55:3c:
2d:4f:27:db:6c:49:af:dc:e3:20:97:af:5f:24:a7:b4:8e:37:
43:2c:a7:c3:ab:f2:57:b2:a8:8d:e4:f6:18:c1:c6:68:87:07:
d2:6e:d5:74:84:5c:e2:e0:3e:ef:49:0e:54:af:5a:4d:17:2f:
4f:0d:be:6b:5f:ad:17:f6:9d:4c:dd:95:d3:e9:8c:2c:0e:5d:
2d:5a:bc:2d:53:d4:7f:2a:d3:2e:56:c3:e4:f4:07:96:9f:da:
5b:91:10:5d:15:9a:c7:79:f5:d1:f0:74:bc:69:22:95:7b:60:
c3:2e:1e:ec:29:7e:ff:7f:9f:74:14:e8:e8:a8:22:bf:d1:73:
3a:79:47:0b:4b:79:3c:10:a2:cf:57:eb:c3:f7:1e:c9:e2:2a:
b1:5a:99:1b:83:c3:0b:7f:c3:1f:1e:85:84:af:35:7a:5a:d5:
00:01:7f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:55:16 2025 by rpki-client