Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15BBDFC0F5AC11EFA5B47A98762E951A.roa
File: 15BBDFC0F5AC11EFA5B47A98762E951A.roa (raw, json)
Hash identifier: ikWmwmMgIaMRN29NaW7x+1CXn+Y76/lNfdjzsQRMcLk=
Subject key identifier: 93:A1:65:9A:32:DF:CF:7C:D4:73:25:37:B1:65:4F:54:1B:96:8A:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15BBDFC0F5AC11EFA5B47A98762E951A.roa
Signing time: Fri 28 Feb 2025 08:14:52 +0000
ROA not before: Fri 28 Feb 2025 08:14:48 +0000
ROA not after: Sat 29 Mar 2025 08:14:48 +0000
asID: 147176
IP address blocks: 154.197.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92667 (0x169fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 08:14:48 2025 GMT
Not After : Mar 29 08:14:48 2025 GMT
Subject: CN=67c1707c-91ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:7e:a5:57:77:ae:c9:38:8e:09:4b:43:11:
e1:c5:e3:0f:53:69:f7:8b:ca:60:e5:fc:8e:04:48:
62:24:43:3a:07:b1:b8:b2:6b:f7:1b:39:4f:2e:01:
2f:32:73:90:f1:ea:4b:89:a8:1e:b9:50:6e:ef:b3:
ff:4b:47:c2:bd:cc:2c:2e:f3:da:82:a0:79:00:e7:
30:bd:d0:53:cc:8c:4d:82:5f:f7:06:43:f1:ac:b9:
ce:8a:f1:90:6c:81:6d:54:99:de:c1:51:94:1c:d1:
94:c5:7a:7c:5c:af:bd:a1:14:53:f0:26:e0:d8:80:
33:47:f4:fa:9f:57:5f:74:72:d0:8f:3d:34:81:1f:
f7:41:a5:a5:9b:ea:e8:d8:34:d5:ae:83:ff:c1:e4:
70:c3:27:a6:91:95:fd:f6:1e:36:c8:cd:b1:2b:fe:
a4:be:61:bd:e8:6b:87:28:d0:92:d0:26:f6:53:2d:
7d:9d:d5:d4:5a:21:b7:69:f3:cd:99:83:e4:19:a1:
be:fa:20:c6:0e:45:f5:4f:3e:8d:6a:fe:96:0b:8b:
c6:07:0f:70:14:89:d7:39:0f:b2:62:d6:08:72:15:
16:ef:bf:f9:b4:80:cc:70:7b:1a:b0:e1:5e:58:65:
57:26:77:8f:00:42:c9:40:67:86:c5:e9:63:1a:64:
e6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A1:65:9A:32:DF:CF:7C:D4:73:25:37:B1:65:4F:54:1B:96:8A:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15BBDFC0F5AC11EFA5B47A98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.116.0/24
Signature Algorithm: sha256WithRSAEncryption
10:5d:8d:8f:12:ad:82:05:b5:8f:d5:82:67:cc:20:eb:75:60:
51:bb:a3:b1:61:61:03:e3:2c:d1:83:dc:c4:17:94:bd:6f:89:
33:f9:fb:cf:7c:c9:0f:7c:ec:96:eb:ab:bf:d0:dd:e4:6f:dd:
96:2f:bc:fc:aa:87:be:8a:16:20:03:c0:ba:b7:ef:14:57:4e:
bd:76:7e:1b:9e:06:58:7a:19:b5:d0:27:f6:0b:a5:fd:fe:41:
eb:65:f4:3d:6b:b4:1c:4a:e2:cc:a5:a5:1a:d6:7c:76:5f:e4:
8b:d7:ae:3a:de:69:8c:ff:34:99:1b:ca:b4:97:b6:a6:59:22:
26:3f:bb:36:ef:b1:d0:d9:16:a5:09:c1:9a:e6:f9:48:09:31:
47:91:7c:58:d3:e3:06:fb:7f:ba:8d:bf:66:41:24:00:4f:1b:
85:6b:04:9f:f5:16:a0:4a:5c:fc:6e:73:f6:49:98:9a:64:ad:
9f:8d:f3:4c:63:f9:f3:fe:fb:6f:1e:c8:8c:13:f0:c4:2f:93:
96:34:61:ae:b8:1c:ca:8d:2b:68:b6:0f:81:3f:19:4a:21:56:
c8:97:1e:b7:76:28:05:db:5c:67:e2:df:17:7b:e7:c9:e8:11:
c1:f0:6b:12:60:b3:8a:36:da:74:9a:2d:ee:19:30:3b:18:f4:
52:d3:3c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:34:39 2025 by rpki-client