Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ED92DEADC0B11EF97981982762E951A.roa
File: 4ED92DEADC0B11EF97981982762E951A.roa (raw, json)
Hash identifier: wpCbdrJy0hLN5Ey2y6KDwUVAedgDLEv5OVEKcpPK+pE=
Subject key identifier: F3:57:4B:95:C7:B8:68:EB:26:D7:A0:45:06:8F:6A:53:D9:8E:1C:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ED92DEADC0B11EF97981982762E951A.roa
Signing time: Sun 26 Jan 2025 17:31:00 +0000
ROA not before: Sun 26 Jan 2025 17:30:56 +0000
ROA not after: Tue 01 Apr 2025 17:30:56 +0000
asID: 138915
IP address blocks: 154.94.66.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84770 (0x14b22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 17:30:56 2025 GMT
Not After : Apr 1 17:30:56 2025 GMT
Subject: CN=67967154-e826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:cb:80:f6:65:44:f7:d8:75:76:27:4c:92:
5e:2e:0c:a5:95:cc:80:2d:f7:92:03:58:d2:de:e0:
b6:3b:28:ad:50:d7:33:71:92:0d:c9:91:4b:c3:3a:
01:45:0a:f4:16:1d:f9:ee:fb:f7:ab:b4:2e:03:46:
08:7e:d8:6d:64:d1:8f:57:e5:dd:f8:cc:cc:16:2d:
47:da:f6:37:6d:c2:88:16:57:31:68:d3:50:f3:80:
a3:47:d8:f9:3d:39:99:d8:91:cb:90:7b:9a:53:5e:
59:e0:af:09:19:ac:8a:72:97:74:b0:ab:30:2d:ec:
99:3e:7d:e3:77:1a:93:b1:26:40:91:13:d2:ae:1e:
0f:e8:ce:cc:a9:a1:5a:f4:5a:53:03:83:12:73:37:
37:d9:33:39:e4:2c:e9:78:c7:78:42:a1:a2:b3:fe:
ee:6a:44:d6:aa:0c:5d:6c:7c:ed:36:df:24:44:9c:
a4:9b:a4:86:73:8b:5b:13:ca:99:47:4b:51:cd:a5:
31:c6:3a:40:c3:11:c8:4e:6f:85:68:b6:e5:91:ea:
02:ec:16:59:63:42:81:1a:18:ee:fe:e3:95:f1:8b:
99:ea:e1:c8:18:e9:99:45:34:5d:5d:35:b0:5c:d8:
7f:a6:39:e5:a2:84:75:a0:25:97:fc:63:67:4b:35:
19:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:57:4B:95:C7:B8:68:EB:26:D7:A0:45:06:8F:6A:53:D9:8E:1C:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ED92DEADC0B11EF97981982762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.66.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:a8:bf:e2:ff:49:29:41:66:c6:fd:ab:63:57:8e:6b:c6:83:
0d:8f:2d:d2:ab:59:91:e1:2d:76:41:9a:a0:ca:27:f2:e4:7d:
90:01:d4:92:37:25:04:56:18:6a:68:ea:61:7a:73:2e:30:f1:
ad:f4:40:e5:ff:4e:5c:43:5d:a8:13:5f:05:82:4d:90:4b:87:
8b:64:5b:e6:2d:35:f4:7d:e8:1b:d9:66:af:aa:e5:2f:43:82:
85:37:73:f1:09:34:65:23:9c:ee:b1:66:9c:63:4b:e0:81:d0:
39:f1:38:59:60:14:76:05:0b:86:dd:c9:68:8e:44:18:13:25:
94:c1:0b:6f:c6:f9:63:17:c2:1c:0c:49:42:41:b1:aa:79:19:
48:59:38:43:7a:32:a7:0c:df:13:eb:57:5a:0c:bc:88:ad:7e:
69:bb:2e:67:6b:27:c1:f9:ee:71:f5:64:4a:36:66:b2:71:b9:
9e:b9:6c:0a:72:fc:1a:cd:99:d3:b3:ff:97:0a:78:44:cd:78:
e5:19:4a:67:38:54:cb:b7:4d:73:eb:42:8f:fa:12:47:84:f3:
d6:dd:f7:f8:d3:6e:07:8b:cf:25:58:34:cb:2d:cc:a2:f4:9e:
7a:47:59:d1:aa:e2:2c:ec:17:4b:fe:ee:b7:a7:89:2a:4d:1d:
f7:0e:03:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:32:32 2025 by rpki-client