Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D53BF4AF5D011EFAD473A90762E951A.roa
File: 1D53BF4AF5D011EFAD473A90762E951A.roa (raw, json)
Hash identifier: H7PqZ0qooMuENw9UMym3N4gRET4g8NBtKiS5QkPlF/I=
Subject key identifier: 8D:C4:12:EC:B4:5D:3A:FA:0B:CA:29:BB:F1:C9:2C:D9:8F:78:E9:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D53BF4AF5D011EFAD473A90762E951A.roa
Signing time: Fri 28 Feb 2025 12:32:47 +0000
ROA not before: Fri 28 Feb 2025 12:32:43 +0000
ROA not after: Fri 11 Apr 2025 12:32:43 +0000
asID: 138915
IP address blocks: 154.203.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92970 (0x16b2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 12:32:43 2025 GMT
Not After : Apr 11 12:32:43 2025 GMT
Subject: CN=67c1acee-98c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:dc:88:63:f8:a0:7d:0f:fc:c1:96:9f:d6:
8a:8b:64:82:1d:15:10:ec:69:97:fe:83:5e:7f:86:
d4:6e:b1:6f:5b:a0:d7:0f:13:a1:4c:27:ca:f4:a5:
81:f6:a2:a6:d4:d1:2b:e9:94:bf:89:e3:ce:67:b1:
6b:30:e3:ef:8a:31:a0:a3:d9:06:27:3f:cf:65:d4:
d9:ac:1f:1b:4f:6a:b9:c8:29:51:a6:59:46:13:96:
da:2d:ce:1c:20:f8:e3:bb:04:a9:f9:90:23:58:aa:
73:17:11:e1:35:21:ed:a2:f8:c6:c2:ae:b0:36:b5:
8f:6d:b9:15:b6:4f:66:f0:3d:35:8f:bb:da:7e:77:
21:b4:6d:77:fb:df:c0:b8:a0:45:d5:9f:c3:09:6c:
00:4a:7d:68:11:17:76:08:94:81:0b:22:7c:91:e2:
6e:2c:a9:b3:72:ba:d7:f5:1c:9e:ae:11:52:a7:00:
04:4d:9d:76:6e:19:b8:74:3f:d8:db:63:23:f4:22:
b4:f8:a7:d3:9d:e1:77:ca:8b:7d:fc:35:6c:e4:30:
f3:99:ed:2e:a7:7a:93:5e:42:43:ef:dc:05:28:5a:
2a:93:48:79:6b:9c:e8:b8:76:bf:3a:4a:87:ca:71:
38:31:94:6d:6a:1f:eb:3b:e0:be:a2:71:65:29:06:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C4:12:EC:B4:5D:3A:FA:0B:CA:29:BB:F1:C9:2C:D9:8F:78:E9:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D53BF4AF5D011EFAD473A90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.137.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:de:2d:cf:72:3b:f7:50:3b:1c:f0:e9:47:91:cb:b8:ba:59:
6a:4b:d3:c2:d3:76:93:05:51:26:38:03:66:30:17:d0:21:ae:
c1:23:f0:92:cd:1a:68:36:13:80:2b:b6:87:a3:f5:d1:a8:91:
c0:55:99:c2:b9:e1:97:2e:df:65:a4:20:58:2f:f7:ce:ba:b2:
6a:87:9b:2b:a3:08:55:f4:f1:08:54:a5:44:4e:aa:91:76:b6:
b6:10:29:4b:83:77:af:68:16:96:f5:2a:15:d8:36:49:52:38:
6c:c5:bf:af:d9:f5:6f:d4:83:4c:b9:c0:62:1a:9a:e6:5e:58:
73:c0:c2:ac:59:3c:52:78:e9:10:52:6c:ea:ea:8e:2e:55:19:
df:10:17:b9:c0:99:39:cb:4a:b7:a6:8e:a8:63:f9:22:d7:f5:
31:41:c5:81:d6:45:69:6e:57:1f:45:7c:25:08:00:12:0c:a0:
fa:ea:31:9c:d6:13:8e:cc:6f:a9:ef:10:ff:27:67:f9:4a:5c:
d9:ca:8a:fa:00:af:b5:b7:af:24:5d:a2:b5:d4:b3:9b:2d:66:
df:d6:a9:ca:b8:c3:ef:ae:4a:3d:9d:20:ba:7d:d5:75:1e:35:
ad:05:94:56:e6:62:3f:08:65:2d:26:24:32:f0:36:b4:f5:76:
9a:f5:7e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:19:14 2025 by rpki-client