Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19944690DBD111EFBD8F487F762E951A.roa
File: 19944690DBD111EFBD8F487F762E951A.roa (raw, json)
Hash identifier: 4wp4E4cGtvFtt6oR8NvCxWia4GhPAm88lgTSH2bHowo=
Subject key identifier: 43:ED:3C:BC:A1:49:51:70:48:21:A5:25:2C:BC:EF:9C:96:C8:4C:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A73
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19944690DBD111EFBD8F487F762E951A.roa
Signing time: Sun 26 Jan 2025 10:34:20 +0000
ROA not before: Sun 26 Jan 2025 10:34:16 +0000
ROA not after: Thu 01 May 2025 10:34:16 +0000
asID: 400175
IP address blocks: 154.203.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84595 (0x14a73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 10:34:16 2025 GMT
Not After : May 1 10:34:16 2025 GMT
Subject: CN=67960fab-7486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:a2:71:31:d5:d4:f1:eb:49:75:e2:8e:b3:
8d:5a:30:aa:90:7f:e0:e9:fb:2f:46:fc:f9:31:26:
30:ea:fe:c4:4d:d7:05:5c:6b:a7:c6:f1:da:d1:0c:
5f:ac:a6:a9:07:e9:65:aa:81:13:63:d0:e3:27:e0:
05:b1:13:94:fb:8b:cc:1d:5d:51:82:1c:f4:b2:1a:
78:0c:d1:3e:3a:2b:fb:99:df:06:4e:fc:70:bb:0e:
a5:18:a5:b0:d3:36:32:9e:d7:11:da:6c:b7:2a:f2:
22:be:75:14:4d:dc:2e:24:41:aa:62:28:18:e7:79:
14:4f:a2:44:f0:a6:5e:69:4b:2e:5f:c4:36:dd:16:
ec:b1:23:ba:31:1d:7f:b1:b2:4a:f8:8b:03:17:2a:
f0:90:bb:10:8d:0f:2c:2b:fc:d3:cd:18:d2:c5:60:
63:30:e8:b4:4a:f9:ca:26:db:4b:ef:d0:09:3f:c8:
4b:01:92:39:f2:60:ba:1d:5b:b5:79:e8:1d:dc:21:
1c:00:1c:ae:1a:cf:bf:9f:21:94:23:7c:1a:2d:42:
f2:e2:ee:eb:8f:6a:94:a1:50:e9:78:61:e9:12:f0:
d6:a0:e2:15:71:6f:8a:85:48:d7:49:a5:9e:28:c4:
9e:30:a9:68:f8:b3:3f:17:0e:19:57:6a:96:84:50:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:ED:3C:BC:A1:49:51:70:48:21:A5:25:2C:BC:EF:9C:96:C8:4C:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19944690DBD111EFBD8F487F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.2.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:1c:a6:bc:e0:64:15:87:1b:6a:fa:87:4b:13:49:eb:b8:bc:
ad:2a:9a:cc:04:c8:34:2e:7d:74:42:36:26:95:94:fe:10:3e:
f3:6d:66:77:f8:1c:d7:0f:6d:ca:54:e0:d9:12:3e:fd:c7:33:
cb:30:5c:5d:4d:67:18:f7:07:fc:54:00:c6:e8:86:18:c8:17:
8f:91:82:8c:0f:8b:80:f8:2f:f3:c4:36:3b:30:ea:45:5c:ac:
45:5d:3a:1d:54:c7:9a:7a:63:53:e0:4b:72:74:5c:ae:2d:0c:
ab:fe:d3:59:bc:d0:43:be:97:6e:f8:29:80:eb:92:3d:27:b6:
39:53:f3:3c:9e:4d:41:af:8c:7b:34:00:00:23:4b:15:34:4c:
50:50:92:d2:37:58:72:41:ad:fe:3e:ac:c0:48:7c:9f:4b:df:
81:68:69:98:c2:ec:8d:90:a0:73:3a:c6:6c:5a:f1:92:d1:6f:
16:ac:72:ba:a5:f7:09:dd:bf:13:f7:69:43:10:06:2d:74:7b:
ee:f9:3a:89:5d:ea:b0:a2:7b:58:6d:cb:7a:c1:a5:62:1a:3d:
07:1e:a7:4e:c1:40:21:45:c8:35:e8:d7:c6:92:94:4b:9b:45:
66:1d:73:c6:ac:e5:9e:ea:b5:de:df:cc:64:e8:ed:a8:ec:04:
8a:c2:43:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:36:19 2025 by rpki-client