Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41C42984DAF811EFAEC59D4A762E951A.roa
File: 41C42984DAF811EFAEC59D4A762E951A.roa (raw, json)
Hash identifier: B88+BmgicuYnMDYi6Hrx/Zi0NXNUMPyTfs1eyIS/iRc=
Subject key identifier: DF:05:B5:8C:10:4A:D3:B4:98:82:67:0C:0C:5C:22:FE:B3:CB:5D:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014903
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41C42984DAF811EFAEC59D4A762E951A.roa
Signing time: Sat 25 Jan 2025 08:42:06 +0000
ROA not before: Sat 25 Jan 2025 08:42:03 +0000
ROA not after: Sun 30 Mar 2025 08:42:03 +0000
asID: 63139
IP address blocks: 154.94.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84227 (0x14903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 08:42:03 2025 GMT
Not After : Mar 30 08:42:03 2025 GMT
Subject: CN=6794a3de-27e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:34:32:ff:2e:c5:00:a7:3e:e6:cc:c0:43:
38:5c:bd:c6:6f:7e:e1:b7:bf:5b:d5:5b:49:30:76:
c2:3a:78:c3:d6:35:a3:16:d3:b3:26:ad:ed:91:fc:
5f:a0:14:13:cf:e0:29:69:2d:8c:21:36:69:56:4c:
13:2b:6b:6f:0f:2c:c4:77:5c:04:c6:74:c1:5a:98:
88:fe:65:f9:a5:d4:4f:ae:2b:31:da:55:85:7e:f5:
39:70:4e:2b:27:ab:94:eb:96:45:57:c5:24:67:65:
e2:45:46:87:bc:f2:97:12:56:8f:8b:d1:d4:60:55:
ca:76:f1:51:11:4b:ac:ba:7f:87:02:92:e0:3c:e0:
72:d7:4c:09:94:5d:fe:f0:b4:8a:ac:59:bc:c0:0a:
c9:83:95:8c:7f:1f:c8:ed:8f:57:59:50:ca:46:67:
0c:a4:bb:98:0e:19:1f:df:58:2c:cd:9f:6e:a3:3c:
03:9a:2b:ea:51:a5:b4:b1:b7:86:d8:7c:1b:51:07:
6b:1d:ee:78:82:8a:b6:72:d3:69:fc:77:87:2b:6d:
64:ca:92:4b:32:21:9b:1a:a7:c6:ef:c1:43:15:ff:
62:ff:b8:11:63:97:ad:0c:25:16:81:3e:7b:5f:6b:
d3:f7:f1:a3:5d:d2:4b:5b:15:fb:63:9b:ed:e8:47:
0d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:05:B5:8C:10:4A:D3:B4:98:82:67:0C:0C:5C:22:FE:B3:CB:5D:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41C42984DAF811EFAEC59D4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.108.0/24
Signature Algorithm: sha256WithRSAEncryption
37:73:3a:3c:76:e0:e0:1d:2b:d9:22:e3:1d:bd:f8:9a:f9:73:
da:d6:81:f8:fb:5a:04:cb:ed:43:97:96:61:6a:37:19:57:2a:
2d:f4:1c:8e:74:65:40:d6:8e:18:e7:82:d1:81:fa:dd:a9:3c:
5b:ee:4f:0f:6e:2f:64:e1:f0:79:32:19:d9:f8:a7:be:2e:ce:
60:86:0d:fe:c5:35:52:a2:67:c1:43:ab:46:f7:b4:b5:87:86:
5a:79:b0:ce:6b:95:bb:33:c1:71:36:a1:1b:fe:6f:d1:d1:82:
a6:21:53:cd:02:94:eb:58:f0:95:62:6e:55:ca:7c:23:d9:4f:
66:05:3c:d6:0f:d4:47:ca:b2:e9:c3:1b:4c:ce:76:7f:ba:f9:
c8:36:98:5b:4a:e0:54:8d:dc:30:4c:8f:09:77:d2:6b:93:3a:
59:87:79:c4:ab:dd:d5:33:df:6d:a2:2d:78:01:db:42:2f:8b:
92:ff:2a:78:22:27:1b:50:4f:83:39:85:82:a8:ce:64:c9:71:
eb:a4:51:63:fa:24:d6:55:56:af:69:b4:20:d9:a4:db:16:81:
af:d6:93:83:80:ab:28:f4:2e:bb:30:c4:a7:e9:0e:fe:af:c8:
00:3b:9e:28:0f:38:9e:59:cd:cd:7c:37:96:a5:5e:15:21:e7:
cc:d9:cc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:58:23 2025 by rpki-client