Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02939778F82011EFABEF3D4D762E951A.roa
File: 02939778F82011EFABEF3D4D762E951A.roa (raw, json)
Hash identifier: wt1BMyR3cUSsIe1QoyyDDNB+iXsjo2wUZd5i1WwSOM8=
Subject key identifier: 24:9A:0D:D1:1D:A2:C1:97:1F:2E:19:CF:9A:65:95:DC:AF:9D:01:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017059
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02939778F82011EFABEF3D4D762E951A.roa
Signing time: Mon 03 Mar 2025 11:09:44 +0000
ROA not before: Mon 03 Mar 2025 11:09:40 +0000
ROA not after: Wed 30 Apr 2025 11:09:40 +0000
asID: 63139
IP address blocks: 154.93.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94297 (0x17059)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 11:09:40 2025 GMT
Not After : Apr 30 11:09:40 2025 GMT
Subject: CN=67c58df8-85cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:d7:5d:4b:64:62:8e:7f:5d:11:1d:47:27:
32:a3:fb:8b:6f:38:a8:98:a4:63:db:c3:95:2d:d8:
84:3a:e0:2e:94:e7:39:4a:a8:0a:de:1a:77:13:6e:
f5:75:41:a2:0a:ec:ab:a2:7c:a3:04:e6:2d:5b:7d:
96:e1:00:11:5d:76:b1:0c:8a:9a:f1:1f:23:cb:e4:
e2:52:63:77:f5:ac:4c:17:2a:dc:a7:86:28:07:35:
ac:52:7e:bd:41:26:f6:c7:03:76:8c:33:48:b8:54:
0f:e9:33:4b:fa:0b:91:e6:50:96:de:5f:df:c7:69:
1d:b3:4a:4f:40:1a:66:cd:30:16:97:bc:5e:63:5d:
12:c1:0e:b5:41:67:25:45:c2:81:28:09:3c:9b:86:
f3:90:2e:34:c2:7c:77:00:f8:7e:30:78:90:56:6a:
f5:b2:45:d1:d4:51:05:f7:41:96:7d:0e:13:1b:2a:
64:11:a8:ef:0d:49:16:5e:6e:68:11:08:f7:08:3d:
36:b3:c1:e8:a1:bd:42:1f:10:5a:97:f2:2a:95:20:
0a:f6:bf:d8:61:8c:57:5a:e2:8c:9f:79:a9:c6:fa:
2d:3c:62:d9:93:8d:8a:6f:6d:a9:06:1a:4a:ad:d2:
c1:d0:d2:bd:79:00:1d:f8:5a:f8:ad:83:93:ff:cc:
a6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9A:0D:D1:1D:A2:C1:97:1F:2E:19:CF:9A:65:95:DC:AF:9D:01:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02939778F82011EFABEF3D4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.71.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c6:9b:ca:14:c3:e4:fc:97:7b:9b:82:55:e7:29:e8:27:5a:
63:72:1b:34:80:2b:bf:8a:79:ad:3a:f3:82:e6:c4:08:ef:a9:
20:2f:d0:31:00:45:a1:51:d5:80:33:d9:65:9c:03:4d:c6:36:
8d:64:35:df:bf:d7:58:57:bc:9f:95:4c:35:a1:10:e5:a7:c9:
9b:4f:85:94:18:d9:71:2b:7f:62:3f:24:f2:8e:10:4e:b5:ac:
3b:de:de:0e:d1:bf:a3:30:06:86:e5:4c:5a:a1:1f:6c:ea:52:
29:13:98:10:f4:f3:76:21:de:3b:aa:0c:04:72:f7:fa:59:31:
f9:a0:01:1d:a8:45:b1:92:b9:07:da:e8:b8:97:c4:f5:54:c5:
28:b6:2c:1e:ce:0d:dc:29:cd:53:dc:89:29:23:54:54:c8:11:
c9:e0:19:49:cc:ef:64:3a:43:d5:0d:e7:d2:19:4e:34:fe:64:
8a:16:95:25:39:4d:3e:6b:d6:df:63:11:71:07:f2:e6:80:70:
b8:e7:d1:3a:15:aa:fc:49:7b:e2:d0:83:0e:b3:b0:78:45:38:
11:01:68:18:69:83:9f:ac:b7:cd:2a:ad:74:26:56:88:f9:11:
24:86:48:77:eb:bf:87:1f:9e:e6:87:e5:95:c2:3d:1b:0f:54:
01:06:c6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:48:07 2025 by rpki-client