Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D5F39A2F62E11EFA7BA7A89762E951A.roa
File: 1D5F39A2F62E11EFA7BA7A89762E951A.roa (raw, json)
Hash identifier: V5E0ZJh6RZUsc4UXiCkIpGD1r7igWH4Noo5dVTjISnc=
Subject key identifier: 1E:BC:AF:F3:84:C8:C8:D2:D0:42:49:09:E5:AD:94:DD:47:47:C0:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D5F39A2F62E11EFA7BA7A89762E951A.roa
Signing time: Fri 28 Feb 2025 23:45:39 +0000
ROA not before: Fri 28 Feb 2025 23:45:36 +0000
ROA not after: Sat 19 Apr 2025 23:45:36 +0000
asID: 138915
IP address blocks: 154.93.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93411 (0x16ce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 23:45:36 2025 GMT
Not After : Apr 19 23:45:36 2025 GMT
Subject: CN=67c24aa3-094d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:09:a4:a5:03:99:d6:3f:95:b3:ad:ee:6d:09:
21:1e:ee:7a:3b:6b:9b:f8:bc:05:c7:45:d6:5e:a2:
08:2d:e2:0c:24:5b:73:28:37:38:60:f7:9c:27:ed:
8f:d9:8a:2c:09:20:c3:27:5a:31:e3:fd:d7:c1:fd:
2f:7d:21:be:51:d6:f1:ff:71:8f:5f:07:0e:f2:4f:
3d:6e:9a:d8:38:08:73:d1:23:b1:0c:54:7f:4d:84:
65:5e:83:10:8d:45:f0:83:da:ff:cf:a5:76:f9:2d:
7f:bc:11:d5:8d:69:37:e9:eb:17:7b:72:0a:12:ab:
2b:e1:5e:eb:c3:90:61:27:bb:74:fc:6f:ed:4e:0c:
db:e9:c3:b2:15:f4:86:48:58:37:be:86:6f:48:28:
43:e7:37:cb:cb:db:2e:48:e0:c6:45:69:58:75:3b:
29:ea:10:99:cc:7a:44:ce:89:09:d4:b1:57:14:f6:
f2:73:3d:79:88:1c:51:11:76:7e:a6:bc:cd:55:d3:
bd:38:b1:51:19:a5:08:62:99:a7:39:ad:6d:d3:73:
8e:67:8c:ac:25:ba:97:bc:ca:14:77:00:fa:3e:6a:
08:40:8c:b4:fc:8e:5d:2b:0b:cd:ce:92:92:ab:a9:
01:ec:58:7f:dd:b0:ae:c8:4c:e0:60:61:60:5f:a1:
38:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BC:AF:F3:84:C8:C8:D2:D0:42:49:09:E5:AD:94:DD:47:47:C0:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D5F39A2F62E11EFA7BA7A89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.49.0/24
Signature Algorithm: sha256WithRSAEncryption
27:07:c0:5c:af:9c:c1:6d:8a:3a:68:fd:9b:6c:b7:fc:48:cb:
71:eb:33:35:d5:47:d5:82:15:f4:31:79:39:d7:ba:03:a1:ae:
36:5b:a6:4b:a8:af:a9:68:00:40:c5:36:32:51:8e:05:b3:85:
9f:a9:b7:9a:20:51:18:68:0c:5e:70:56:07:92:60:1e:85:1f:
a3:38:9b:51:a1:b3:65:83:da:07:de:21:08:ea:9b:56:86:ac:
06:c9:bd:74:65:6c:63:9d:99:32:ab:7c:fa:a2:c0:6d:82:06:
6d:b5:c7:36:05:c0:77:06:d0:5c:95:d7:62:3e:32:85:e5:e4:
cf:c8:95:0c:22:f9:ac:d2:00:45:ec:e2:ee:62:76:bc:25:32:
a6:c4:81:81:f5:4c:4e:3c:3c:5a:03:2c:f0:da:5a:9a:10:69:
43:d5:1b:96:c0:84:91:46:af:97:db:85:77:50:76:7f:79:2a:
cb:11:59:15:91:3d:cb:25:3f:9b:1e:a1:71:53:65:f6:90:40:
8f:cc:b7:b0:a4:b9:76:81:42:96:8a:74:b2:f8:02:97:72:a3:
28:73:56:6f:19:6a:3c:6c:71:47:b9:f3:e8:ab:a8:81:8c:9c:
a2:dd:f1:26:76:a7:81:13:3b:87:8b:42:45:5d:1f:51:af:f6:
08:b1:51:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:35 2025 by rpki-client