Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D3E227EDC0A11EF931FCF79762E951A.roa
File: 0D3E227EDC0A11EF931FCF79762E951A.roa (raw, json)
Hash identifier: iezWmWSyKcDK+GED+wPAB2XApfIstlNU2g0s3T2NhKM=
Subject key identifier: EF:1A:6F:C1:69:93:3D:CB:40:55:3C:07:5B:FD:05:7E:66:73:45:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D3E227EDC0A11EF931FCF79762E951A.roa
Signing time: Sun 26 Jan 2025 17:22:00 +0000
ROA not before: Sun 26 Jan 2025 17:21:57 +0000
ROA not after: Tue 01 Apr 2025 17:21:57 +0000
asID: 138915
IP address blocks: 154.94.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84762 (0x14b1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 17:21:57 2025 GMT
Not After : Apr 1 17:21:57 2025 GMT
Subject: CN=67966f38-af4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:b7:65:3c:3d:f8:f9:53:9e:c4:13:de:20:
cd:0d:1a:50:a9:a7:c8:ed:52:43:5c:44:95:2d:f5:
2f:57:8f:b9:fe:30:4e:0f:2a:fe:00:39:0c:73:8d:
9c:fa:3a:64:fa:28:a9:95:75:60:38:75:d9:e1:c4:
4a:e6:c8:45:1e:2d:e8:36:ba:4a:27:38:fe:d8:63:
d1:b6:07:17:a5:fc:9c:ec:be:9b:8e:a1:49:b4:44:
ec:19:cb:b7:64:ab:4b:4b:ee:42:38:ad:f1:d4:d4:
95:16:11:e5:d0:70:e2:2f:ce:1e:e9:d1:bd:35:ac:
37:3f:7b:80:41:a1:ce:8a:02:42:8e:83:2b:1e:5f:
dc:0d:29:7e:ef:b2:83:af:bf:30:b4:92:5a:fd:9e:
f7:e0:72:16:7e:a3:ae:32:27:06:a7:0b:9d:cd:c1:
3a:aa:c8:a7:11:6a:89:76:a3:d0:ac:6f:fd:ca:23:
17:ac:cf:c8:10:f5:5d:6f:b2:de:94:d7:72:19:15:
64:93:63:a2:3e:c1:df:a3:f5:59:5c:9f:d6:42:47:
56:72:69:6b:84:44:1e:49:c3:c9:46:49:ef:74:3c:
c6:3e:06:f4:61:c3:77:52:2f:f3:3e:76:6a:57:f5:
c0:d2:73:51:9f:f3:4a:b9:ad:2d:b6:44:d0:15:d1:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1A:6F:C1:69:93:3D:CB:40:55:3C:07:5B:FD:05:7E:66:73:45:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D3E227EDC0A11EF931FCF79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.86.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:e7:90:8b:72:58:d1:38:0c:d9:0c:76:bc:f8:f0:f7:06:5c:
23:e7:d3:df:de:3a:8e:ff:8a:37:6b:01:28:27:91:e0:72:0b:
60:39:02:2e:5f:87:b9:f7:84:37:7e:fb:d0:06:d3:b3:bc:34:
66:0f:9f:da:fb:48:e7:7d:44:cf:5e:51:bf:46:e4:48:01:c2:
f3:96:47:04:1e:7d:fd:f4:10:90:26:15:0a:d4:da:e5:a1:5f:
3c:b6:0f:de:84:ce:79:ce:07:0f:63:7f:10:78:6b:af:40:69:
7c:b7:58:8b:b7:3a:31:38:d2:ff:b6:03:38:b7:83:24:de:59:
7b:ba:ba:9b:0e:a3:19:35:2a:17:50:7e:1e:42:e1:84:31:35:
a6:3b:1e:e0:3c:6b:0f:4a:f7:70:43:2e:59:1d:a5:9b:7d:61:
8b:e2:fe:f9:46:a4:6e:09:7d:35:30:c4:f3:64:04:3b:2b:92:
7c:f4:12:58:d0:8c:36:32:ae:60:1c:12:45:23:96:3d:74:da:
2b:2e:81:83:dc:9e:99:24:3c:22:e5:82:51:fd:d4:4b:f1:99:
c5:ea:69:a7:57:5e:a3:46:10:73:07:e4:c9:87:a6:fc:25:e8:
a1:89:75:8e:2c:b0:18:74:a1:56:83:40:c5:da:c9:ce:fe:e1:
85:b3:55:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:01:54 2025 by rpki-client