Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/018DE392F67711EFA06D608A762E951A.roa
File: 018DE392F67711EFA06D608A762E951A.roa (raw, json)
Hash identifier: KeaMsPD3k3/EGTB/UkeFYVdyQH1Aa7weJPmXl/jGqNo=
Subject key identifier: CA:F4:6F:88:28:11:EC:CC:93:B7:3E:D4:E3:38:DD:C5:68:4C:8F:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/018DE392F67711EFA06D608A762E951A.roa
Signing time: Sat 01 Mar 2025 08:27:26 +0000
ROA not before: Sat 01 Mar 2025 08:27:22 +0000
ROA not after: Mon 31 Mar 2025 08:27:22 +0000
asID: 151407
IP address blocks: 154.88.64.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93528 (0x16d58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 08:27:22 2025 GMT
Not After : Mar 31 08:27:22 2025 GMT
Subject: CN=67c2c4ee-126c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:85:00:26:66:b8:3c:61:8b:f9:1c:60:2a:
80:61:07:05:87:db:9f:b1:7c:7a:06:83:30:d2:6b:
a3:d6:4f:67:45:f9:66:a0:a5:e4:31:f3:05:e7:d8:
1f:bf:21:dd:54:38:11:cc:8a:2f:b6:ed:bf:f1:4d:
f0:73:a9:28:ca:c4:d6:11:70:d1:be:83:8f:80:6b:
d2:ab:25:05:f8:26:2b:3a:24:b6:22:c8:59:7d:c8:
ee:fd:eb:9b:d8:91:4a:22:96:b4:55:8a:ba:3e:53:
85:0b:d8:d8:26:41:a7:78:4c:13:48:5f:4e:ec:24:
66:cd:61:c8:8c:dc:2b:98:d5:fd:ba:ba:62:2b:f0:
cc:13:29:61:40:10:8b:3e:9b:03:3b:2c:c6:57:03:
03:17:e4:7f:59:e6:73:ef:a2:c3:c1:5c:67:e1:88:
f3:ef:ac:18:a7:27:5e:40:ba:4d:e2:ec:f7:e9:d6:
db:c5:30:20:a5:d5:ba:2b:a2:46:12:9d:87:ab:77:
e2:c0:18:f6:ea:e7:9d:d8:f3:96:d0:dd:c2:7b:49:
0f:0e:3e:4a:bd:32:44:ce:ce:31:99:34:92:5a:96:
cf:75:21:84:54:1b:bf:73:01:dc:44:c0:68:d5:59:
b1:c8:6d:41:31:88:1b:29:01:be:b5:b9:ed:2d:e9:
33:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F4:6F:88:28:11:EC:CC:93:B7:3E:D4:E3:38:DD:C5:68:4C:8F:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/018DE392F67711EFA06D608A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.64.0/23
Signature Algorithm: sha256WithRSAEncryption
81:35:fa:0c:12:c5:7f:ef:46:b3:6e:b1:70:1b:8c:69:38:6f:
17:07:2b:83:29:c4:ac:21:0b:1d:a4:09:32:3f:46:7c:a4:b6:
9b:2e:a3:08:9b:38:0e:d0:e2:92:6e:4d:67:a9:14:52:61:58:
d0:90:fe:f5:f6:95:b2:56:47:9e:87:eb:e5:90:57:99:01:cd:
20:d4:72:8f:36:7d:d8:96:42:61:19:22:fe:87:ab:2b:44:18:
9d:7b:7d:f2:ce:9b:32:56:dd:52:e8:f6:7d:35:4c:cc:35:76:
34:4b:16:38:8c:8d:20:d5:af:04:16:86:6a:33:07:d9:38:6a:
a8:07:37:98:a5:73:22:46:ee:26:60:26:45:dc:22:ad:d6:58:
dd:44:6e:d3:3e:3a:85:79:a7:b1:a2:ff:f2:82:78:76:86:c9:
e5:eb:18:cb:db:0a:20:6c:67:47:76:da:fd:b9:fa:0c:dd:30:
28:69:a1:5d:c0:b7:40:9f:37:52:43:6e:a0:ff:d4:d7:8c:c5:
3f:d2:48:c1:dd:f9:de:e0:6e:ff:e6:e5:cd:28:7e:ad:d4:47:
04:91:a1:f8:93:37:e3:5f:9f:ca:81:e7:ad:3e:7d:23:c1:0c:
86:f9:9b:34:4f:8c:96:30:42:8d:9c:15:e2:8a:d9:53:c2:16:
7b:d2:25:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:33:23 2025 by rpki-client