Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29067F06F61811EFB632EC76762E951A.roa
File: 29067F06F61811EFB632EC76762E951A.roa (raw, json)
Hash identifier: a/NWguS2WPxG0OZhHrfakheJXGVnfg9Lwz1COFcIi3M=
Subject key identifier: 15:91:30:72:C3:1F:1E:50:9E:A0:1D:FE:DD:10:30:07:3C:E2:C1:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C23
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29067F06F61811EFB632EC76762E951A.roa
Signing time: Fri 28 Feb 2025 21:08:30 +0000
ROA not before: Fri 28 Feb 2025 21:08:26 +0000
ROA not after: Sun 13 Apr 2025 21:08:26 +0000
asID: 138915
IP address blocks: 154.206.108.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93219 (0x16c23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 21:08:26 2025 GMT
Not After : Apr 13 21:08:26 2025 GMT
Subject: CN=67c225ce-4884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:a7:44:7a:58:43:9c:7f:8c:50:52:b3:68:
e7:7b:5d:18:95:b2:d7:76:d5:77:0b:2c:ec:5e:d7:
e0:ef:e1:58:e9:b8:37:06:17:27:e6:50:01:98:12:
3a:d1:58:94:f5:fd:c9:85:69:3d:f1:00:61:80:38:
8b:d8:b9:2d:ee:ed:22:11:60:13:e0:14:03:ff:38:
fe:70:c9:ae:60:79:71:9e:ba:13:c9:d7:33:a5:1a:
e7:a8:b0:2d:80:7d:d5:a8:42:77:f0:1e:c5:88:02:
6d:7d:3f:91:50:1e:cf:98:f3:33:f2:ef:4b:f0:ab:
b3:98:2a:ac:58:84:33:cd:28:a7:4f:0f:02:0a:c0:
0b:a4:cc:8d:b1:35:69:73:64:09:50:8a:67:6f:e1:
c3:b0:7f:4c:45:65:5b:72:89:fb:46:b3:cb:40:ea:
ca:f1:34:6e:57:30:99:cd:49:cb:26:c4:19:c4:91:
a7:6c:6d:44:c6:7c:09:6f:ca:7d:46:6c:b6:40:b3:
da:03:45:04:d6:13:ac:b6:46:bf:42:60:d2:82:6d:
2d:f7:1a:29:1b:9a:b7:79:5d:dc:49:45:89:b7:54:
d7:c8:bb:2c:51:5f:f8:83:7c:5f:5c:ae:81:07:e2:
f1:2d:11:74:3a:f3:39:f6:e0:ea:a9:07:f1:78:d1:
26:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:91:30:72:C3:1F:1E:50:9E:A0:1D:FE:DD:10:30:07:3C:E2:C1:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29067F06F61811EFB632EC76762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.108.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:b5:19:8e:2e:bd:25:fa:67:61:85:ea:a6:03:1d:38:c1:5a:
15:90:5f:5e:f6:c4:c1:a9:b3:26:77:de:ce:db:92:17:26:31:
71:66:da:1d:ef:94:e8:65:f4:95:4f:4d:38:01:b9:1d:d5:d9:
fd:a2:bf:99:8d:87:0b:7a:28:96:22:74:27:e1:db:c4:f9:35:
3f:f0:af:4a:8f:c0:6c:8f:61:ef:fb:a3:0d:8f:43:ec:73:32:
25:ef:f0:d6:f9:fe:e9:72:b0:5e:31:4b:bc:a7:22:61:2c:83:
31:38:3c:72:22:9a:da:d4:b1:f4:b2:77:d6:9b:d3:3d:49:08:
8d:5b:c6:1b:66:3a:76:04:e6:5b:cb:70:e3:ac:a8:dc:fb:b4:
fe:13:85:c8:f9:8a:22:45:0a:12:54:9e:19:b1:51:41:78:9a:
ba:f5:c7:a2:12:78:51:6b:bf:85:93:08:98:e5:d5:b0:d1:9c:
41:5f:a7:24:da:ff:4d:cd:0b:a3:fb:d9:35:dc:c0:a1:2e:76:
93:ca:69:c0:24:5e:f9:de:3c:f6:cd:99:fb:36:83:65:76:e1:
b7:e8:75:b9:ba:74:6d:7d:61:44:bb:70:f6:41:de:71:9e:d6:
47:b1:b2:76:ef:09:4c:d7:f6:e2:10:95:7f:ab:0b:a4:6f:4c:
15:ab:e8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:45 2025 by rpki-client