Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/1A2092F6044611F095BFB244762E951A.roa
File: 1A2092F6044611F095BFB244762E951A.roa (raw, json)
Hash identifier: 0SLkUBB5NPSR/wjDecq70mS7cvLncEMmvdIdrHVhmHQ=
Subject key identifier: D0:21:B6:0C:F2:0D:39:23:5F:A1:D7:4D:4E:B7:62:92:F2:26:E1:92
Certificate issuer: /CN=F368B07FAF/serialNumber=78825B2BC908A40FEF62B26482D61A98575FCBD3
Certificate serial: 0AEC
Authority key identifier: 78:82:5B:2B:C9:08:A4:0F:EF:62:B2:64:82:D6:1A:98:57:5F:CB:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/eIJbK8kIpA_vYrJkgtYamFdfy9M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/1A2092F6044611F095BFB244762E951A.roa
Signing time: Tue 18 Mar 2025 22:12:38 +0000
ROA not before: Wed 19 Mar 2025 22:12:34 +0000
ROA not after: Mon 01 Mar 2027 22:12:34 +0000
asID: 37314
IP address blocks: 154.119.64.0/20 maxlen: 20
154.119.64.0/24 maxlen: 24
154.119.66.0/24 maxlen: 24
154.119.76.0/24 maxlen: 24
154.119.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2796 (0xaec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368B07FAF
Validity
Not Before: Mar 19 22:12:34 2025 GMT
Not After : Mar 1 22:12:34 2027 GMT
Subject: CN=67d9efd6-376d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d2:f0:51:a1:ce:ba:fd:f9:d3:93:2b:fb:d5:
0c:44:99:f5:2a:4e:aa:5c:df:32:ff:e5:5c:4c:4e:
00:ae:be:84:72:2d:8c:ce:f0:b1:95:5c:00:b9:78:
29:d7:59:89:2a:f9:4b:2a:89:af:2b:20:b9:a0:9c:
69:5f:7f:a6:bc:de:9d:d0:ad:ea:07:8a:68:ff:28:
50:2b:65:97:0d:84:a2:5f:9a:42:54:b0:7f:65:5b:
34:1e:c2:b2:e9:e5:61:5a:b6:af:41:78:bc:5b:b7:
f6:20:07:07:04:b3:75:a6:b9:8b:49:d7:83:5b:6e:
df:62:a4:a0:f2:0f:91:18:63:2a:9b:2b:c4:aa:81:
72:93:eb:a9:e8:15:1a:9b:ee:ad:3d:28:b7:8e:df:
57:1e:4c:10:3c:3a:50:26:1b:16:9a:53:3a:d4:c9:
01:bf:2b:aa:a1:13:5a:e3:7e:7a:0c:54:bb:c2:6e:
17:76:e6:42:31:10:42:39:29:08:86:97:a6:cc:8d:
99:d8:59:82:1f:98:3f:d3:d6:70:05:00:ef:b7:a6:
f7:25:5b:40:cd:40:4b:59:92:05:03:04:6a:ee:f5:
79:ad:1d:5b:16:a0:dd:14:7c:35:fd:29:7a:41:bf:
ca:45:c5:e6:a7:0a:f9:06:a3:bf:3a:85:d1:b7:1c:
ac:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:21:B6:0C:F2:0D:39:23:5F:A1:D7:4D:4E:B7:62:92:F2:26:E1:92
X509v3 Authority Key Identifier:
keyid:78:82:5B:2B:C9:08:A4:0F:EF:62:B2:64:82:D6:1A:98:57:5F:CB:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eIJbK8kIpA_vYrJkgtYamFdfy9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/1A2092F6044611F095BFB244762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.119.64.0/20
Signature Algorithm: sha256WithRSAEncryption
47:84:fa:d5:22:da:ba:8e:3d:b4:1c:b2:b0:c4:08:a5:a6:05:
7f:e4:cb:9f:59:b8:14:3e:17:65:4c:a5:fc:76:ab:e8:73:17:
64:1f:f1:31:54:bd:c8:73:10:ef:d7:7c:b3:05:d8:17:87:b3:
c4:f2:e1:c9:03:08:0a:2d:ce:ae:78:07:86:c1:be:0c:c6:76:
5e:5b:df:9c:88:cc:6e:71:e8:7b:8c:b0:7f:22:ef:54:47:9c:
92:b9:89:6a:98:79:de:7f:d5:f6:6b:ef:4f:60:12:44:f5:2b:
d9:32:29:68:9a:f3:ae:99:0d:e8:db:2d:46:78:a8:be:eb:f3:
69:67:bf:80:9c:97:5a:40:af:60:b8:83:26:e3:a9:87:c2:bc:
3a:d0:db:53:e7:67:2f:2b:88:de:40:6c:9b:2c:a1:15:13:ec:
eb:14:af:8e:b1:58:47:3e:97:af:68:76:0e:80:0f:13:fb:23:
21:dd:ca:0f:fe:2b:17:d4:6d:95:b3:bf:87:36:83:71:6a:a9:
6b:76:ce:60:6b:d5:95:f4:74:80:08:7a:76:2b:a9:f7:49:b2:
8d:5b:8c:b7:03:89:33:be:27:8d:27:16:ad:d6:fb:c4:3c:b2:
e4:25:81:93:ec:c1:4b:8a:cc:d8:22:80:07:28:3f:1e:14:ea:
9f:8d:e2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:13 2025 by rpki-client