Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10292986F61611EF9CFC0169762E951A.roa
File: 10292986F61611EF9CFC0169762E951A.roa (raw, json)
Hash identifier: qAvKgZ1f+kDVL4X0KsZxzL3AQuF7vRuVjB4qEe067Ng=
Subject key identifier: 4F:B5:CE:FF:EA:69:81:7E:97:02:4F:74:FA:75:CF:36:79:4E:F7:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C0F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10292986F61611EF9CFC0169762E951A.roa
Signing time: Fri 28 Feb 2025 20:53:29 +0000
ROA not before: Fri 28 Feb 2025 20:53:26 +0000
ROA not after: Sun 13 Apr 2025 20:53:26 +0000
asID: 138915
IP address blocks: 154.206.68.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93199 (0x16c0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 20:53:26 2025 GMT
Not After : Apr 13 20:53:26 2025 GMT
Subject: CN=67c22249-a7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:83:d9:07:b7:df:42:9e:ff:50:5c:b5:c8:a6:
d0:29:c3:d2:96:69:93:56:d9:46:b1:48:30:74:7d:
04:cc:f4:a2:71:d4:60:16:4a:db:21:f7:f8:8f:2e:
dd:1c:ca:0a:0f:a2:bf:99:fe:c0:28:f5:50:d3:78:
87:18:17:db:ef:a8:76:ce:0d:6b:b5:17:95:c0:ca:
f6:2d:0a:34:89:c3:95:93:28:1d:e7:92:42:18:f8:
e9:7d:e6:1a:d6:97:99:07:f5:c2:85:76:ef:46:33:
6c:44:4c:3b:c8:67:87:88:eb:c5:a2:d6:0e:48:d3:
f8:e6:ac:09:16:bb:e1:64:bb:f4:68:85:80:0c:f0:
4d:fc:2e:4c:5c:75:f5:09:44:9c:b0:49:1e:f9:c0:
1f:fd:94:3f:67:34:af:c7:6b:61:87:d1:c9:fa:ad:
3a:01:94:18:47:8f:2e:24:43:a9:58:30:e2:dd:78:
94:0c:32:6f:7e:ea:a3:d1:1a:87:53:9a:fc:0e:8e:
0c:14:77:54:56:da:06:81:d2:c7:40:48:17:e0:2c:
95:5d:81:6b:9d:84:d5:1d:c8:7c:b2:b8:86:6c:6c:
02:8e:e6:09:e1:82:3e:ff:89:91:25:78:31:34:be:
d5:6a:2c:c0:f4:8a:c2:a8:7a:48:10:12:4a:14:3a:
37:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B5:CE:FF:EA:69:81:7E:97:02:4F:74:FA:75:CF:36:79:4E:F7:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10292986F61611EF9CFC0169762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.68.0/23
Signature Algorithm: sha256WithRSAEncryption
43:16:20:6b:a3:a8:3e:54:91:5c:ba:0f:b3:dc:58:e0:92:e5:
94:8e:88:a4:03:00:c6:1b:0f:eb:25:70:5e:4e:9d:c9:00:f7:
a7:98:e5:d3:66:12:1e:c3:ee:3f:c1:69:ac:cc:f6:a8:13:2a:
ec:03:f8:97:fe:f3:ff:ba:ea:4f:6d:6a:ef:a8:e4:53:83:01:
45:8e:89:14:68:0f:2b:e5:c3:c9:9d:19:5a:e0:19:45:03:d6:
3c:26:64:e2:ff:fd:fc:e7:ab:57:fc:a3:02:be:a7:63:1b:90:
df:ec:45:ea:f4:16:08:d4:ac:04:6f:43:f7:e5:d1:37:57:ea:
ef:4e:3c:4c:9e:79:4d:e5:56:1a:47:f8:25:6f:0a:19:e7:21:
06:53:d1:0f:14:96:f8:0c:83:6d:11:3b:33:7c:cb:9a:1a:db:
de:aa:d8:a7:7b:4e:3c:5b:6b:e3:02:cf:d9:0d:3b:a4:7c:4f:
8d:6c:d6:37:13:15:18:05:12:f0:d9:16:9b:1d:87:2b:70:3b:
40:82:a3:11:e9:66:c9:38:4e:d1:a1:c8:01:3a:9a:5a:67:4d:
3e:b7:47:3b:c9:ae:e3:78:d8:cf:20:78:8e:2f:67:0b:a7:f9:
86:14:5f:a1:a1:ff:ce:53:0c:d6:e0:0f:59:92:e5:54:5e:6f:
11:29:d8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:45:16 2025 by rpki-client