Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43C22CB8F82111EF8FA49C57762E951A.roa
File: 43C22CB8F82111EF8FA49C57762E951A.roa (raw, json)
Hash identifier: fZ03SH74jJGuO1fOG8km8iV/YuKMeN2vyxGAdfEmenY=
Subject key identifier: 5C:0A:06:0E:16:2B:86:80:BD:38:FA:1E:94:3D:F8:0B:1E:47:70:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017067
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43C22CB8F82111EF8FA49C57762E951A.roa
Signing time: Mon 03 Mar 2025 11:18:43 +0000
ROA not before: Mon 03 Mar 2025 11:18:39 +0000
ROA not after: Wed 30 Apr 2025 11:18:39 +0000
asID: 63139
IP address blocks: 154.93.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94311 (0x17067)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 11:18:39 2025 GMT
Not After : Apr 30 11:18:39 2025 GMT
Subject: CN=67c59012-340e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:49:b1:70:4d:7b:7f:c9:a8:74:31:e6:4c:
d5:21:7a:8d:8c:af:30:cf:8f:05:cc:8b:12:ed:a4:
6f:45:b5:b0:5b:3c:38:4b:ea:c4:2e:6a:66:c8:70:
1e:87:ce:b9:e5:25:74:4c:a8:9d:f0:e7:db:99:e0:
a0:7a:0f:7a:ff:d5:43:d1:d6:43:0c:87:db:1b:f7:
43:f0:24:93:3a:77:3e:bd:61:f7:69:da:ee:53:6e:
a9:0c:40:32:e0:be:8a:03:66:6d:38:98:43:1c:a0:
54:f2:40:e5:15:3f:97:a5:c1:7a:0a:e4:b9:d1:0b:
39:d1:0e:9a:59:fc:52:08:ea:8c:f6:d0:57:7e:a0:
a0:6c:75:db:ee:9e:86:85:92:0e:0c:0b:68:d8:c7:
27:7e:be:7d:d8:45:50:18:01:8f:aa:0e:e1:bd:e6:
b8:29:99:d9:69:5e:78:8a:ec:8d:6e:b7:c8:34:31:
59:22:59:68:b9:40:f7:70:38:a1:e0:e6:fb:ce:ca:
cf:e6:f6:2c:a7:85:97:c6:0f:d2:a8:6c:05:db:b8:
90:2e:00:35:cc:b4:2a:be:d5:65:3b:e0:17:bd:b7:
f4:2b:5d:b7:9a:c7:e5:61:e1:b4:80:b6:46:31:6b:
64:48:eb:bc:87:e3:cc:89:58:ba:5a:6d:77:c5:ed:
18:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0A:06:0E:16:2B:86:80:BD:38:FA:1E:94:3D:F8:0B:1E:47:70:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43C22CB8F82111EF8FA49C57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.68.0/24
Signature Algorithm: sha256WithRSAEncryption
21:54:6f:d9:0c:83:5f:6f:1e:0d:92:fb:ea:d0:40:7e:c2:1e:
11:a2:4a:55:4c:13:59:3d:ad:57:ff:b4:34:12:91:5c:c6:dc:
fa:3f:8f:fa:82:4e:cf:80:e6:50:65:74:46:31:83:b5:a1:29:
72:41:48:43:7e:37:c6:22:4d:70:cb:9c:b1:6a:82:96:87:f0:
44:f3:f2:4d:a4:c0:8b:9d:76:a4:25:97:7c:b6:97:a8:71:bf:
35:99:9a:ea:e6:fb:c7:02:af:fb:ab:6a:61:86:60:d5:61:6d:
83:13:b7:98:0e:90:b6:02:1c:bb:0c:be:2a:50:aa:47:c7:af:
b3:0c:72:45:7b:24:07:a7:d5:af:4d:ec:ed:ff:f6:06:0e:55:
78:bb:5e:f9:d9:0b:b3:01:1c:44:0b:bb:dd:fb:2c:5d:2d:0b:
66:01:67:63:9d:82:af:74:ca:52:ca:b2:43:00:34:02:62:0f:
0c:e9:0c:2d:5b:97:3c:90:8e:11:14:55:c4:a8:9e:66:e4:ca:
e9:49:83:f9:11:f8:5f:b0:0b:03:68:21:db:1c:2c:e1:d3:ae:
ca:b7:2d:b1:34:82:9d:d9:6a:12:02:e8:ef:11:5a:e0:2b:30:
7e:b3:54:0a:85:52:d8:6c:62:a6:07:40:b1:cf:fe:dc:28:7a:
af:ef:7f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:33:55 2025 by rpki-client