Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2202713EF56311EFAF071298762E951A.roa
File: 2202713EF56311EFAF071298762E951A.roa (raw, json)
Hash identifier: pKvXTJ8TzXsmG4Iv5k43qpTTfTzT8LEF87/UaIHWNo4=
Subject key identifier: 09:52:C1:7D:39:10:F3:36:65:0F:BC:04:ED:AB:7B:BF:E8:60:71:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2202713EF56311EFAF071298762E951A.roa
Signing time: Thu 27 Feb 2025 23:32:39 +0000
ROA not before: Thu 27 Feb 2025 23:32:35 +0000
ROA not after: Fri 11 Apr 2025 23:32:35 +0000
asID: 63139
IP address blocks: 154.203.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92582 (0x169a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 23:32:35 2025 GMT
Not After : Apr 11 23:32:35 2025 GMT
Subject: CN=67c0f617-db60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:02:30:f9:25:69:84:e9:bc:c4:17:19:86:
c1:7c:f6:9b:d2:1e:44:7a:56:fc:18:23:2f:7e:a9:
0e:ef:cd:81:2a:b6:6e:b6:16:a1:3c:08:4a:b3:da:
87:54:99:0d:bf:93:69:6e:71:ac:58:91:40:92:b1:
91:0d:cb:aa:95:5b:d3:01:5e:5f:7d:e6:9b:c3:2b:
4b:2b:12:53:28:9c:c5:7f:71:39:3d:cb:cf:9f:c4:
b9:ca:7c:d0:e8:43:d4:5b:d3:89:12:4a:8d:92:72:
bd:aa:6a:b2:22:f5:12:e3:8e:e6:3f:3e:27:2f:0c:
fc:b8:95:f7:36:0e:63:c7:64:9e:eb:fe:cb:78:0d:
d3:68:81:c7:25:f7:cf:b1:c9:a4:6f:06:a6:74:ca:
41:04:db:29:3a:e6:a3:71:b2:f2:2d:1a:8d:c0:bb:
92:a8:e9:f1:7f:26:c5:84:df:71:f4:4e:c3:7c:33:
fa:68:4e:2d:a8:ee:d3:c2:53:cb:d8:d7:97:03:44:
ea:c3:8e:fc:90:7d:84:19:ff:b4:19:3c:30:c0:a0:
ad:3f:84:8d:a9:d1:d6:de:6f:d1:ca:fc:7f:8e:91:
aa:d6:74:a6:5a:ca:35:b8:73:61:d8:fa:e1:be:14:
bd:44:7a:41:14:c1:27:52:d5:ec:82:b4:64:02:ac:
a3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:52:C1:7D:39:10:F3:36:65:0F:BC:04:ED:AB:7B:BF:E8:60:71:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2202713EF56311EFAF071298762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.179.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b4:fa:e3:2d:ef:19:ab:43:00:bd:a5:b4:6b:e7:24:b9:82:
b5:e9:75:64:8f:13:4a:e6:ca:09:c2:63:49:85:55:61:a4:0e:
ff:93:32:02:3e:ba:cc:a7:ff:ac:2f:c4:30:e2:00:23:99:ce:
61:d9:a0:51:15:98:36:98:8f:72:b9:cb:e8:cf:0b:95:29:72:
d2:6f:89:21:52:de:22:1a:48:06:dd:a2:6a:cb:e7:fe:ac:91:
c4:ee:d1:b5:ab:9b:83:4b:ef:0a:d2:e8:14:23:b5:e7:06:62:
89:d8:2d:c9:77:fd:e4:c9:b3:6d:44:4e:a1:4c:ee:4f:bf:46:
cf:03:a7:e5:c3:86:fe:c7:07:e5:c6:b3:72:fc:c1:22:1c:84:
ad:74:a5:82:0a:28:c9:f5:0e:1f:56:24:a4:eb:aa:4d:4b:0f:
e2:43:6e:d5:7d:6d:2d:e4:be:3e:43:09:0f:d2:1a:40:c0:e4:
4b:76:18:f2:6d:12:02:ee:fa:05:da:4c:9b:a7:96:05:1d:29:
85:4a:fd:64:b4:01:ee:b3:1c:77:0b:20:de:39:a2:8f:b3:d8:
1c:78:9e:05:fd:c7:f0:87:f3:af:52:b3:1c:23:47:fb:a8:13:
12:f1:06:7b:d0:c0:06:3c:8e:1c:80:de:9a:0a:8e:a0:f6:08:
07:30:a2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:33 2025 by rpki-client