Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FE69F92BEDD11EF9E7B776A762E951A.roa
File: 4FE69F92BEDD11EF9E7B776A762E951A.roa (raw, json)
Hash identifier: 42YMcpVtqtTWkzwQysr/zNQE9A1G/YBs1sIwV2wfYzc=
Subject key identifier: 97:C1:B8:FB:C3:B4:14:94:30:E4:BB:1E:80:F3:91:E1:32:01:F4:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FE69F92BEDD11EF9E7B776A762E951A.roa
Signing time: Fri 20 Dec 2024 14:18:41 +0000
ROA not before: Fri 20 Dec 2024 14:18:38 +0000
ROA not after: Wed 25 Jun 2025 14:18:38 +0000
asID: 55020
IP address blocks: 154.84.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73018 (0x11d3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 14:18:38 2024 GMT
Not After : Jun 25 14:18:38 2025 GMT
Subject: CN=67657cc1-b16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fd:78:47:b5:40:9f:9d:9e:82:ba:b2:fe:21:
6a:ed:1c:2d:7b:09:3e:1f:48:a6:3d:89:82:32:8d:
00:a0:76:bf:9e:b1:74:6a:a2:1f:4c:84:b5:6a:36:
5a:aa:2f:37:1e:2a:fc:d1:99:18:66:1c:19:7e:1f:
59:45:2b:73:4e:b1:59:ee:a0:28:d5:d4:b3:e0:52:
f9:72:2d:ea:ce:72:70:52:83:ac:b2:e8:80:8a:12:
1a:62:4a:df:da:31:04:91:52:82:cc:e8:74:9c:1e:
2c:10:9c:33:96:9b:48:bd:68:93:89:ca:ca:bb:39:
94:e9:0c:12:de:ab:eb:39:21:3a:81:8d:6c:02:0c:
12:f2:74:e7:c7:8f:45:f4:52:f4:20:7d:be:89:78:
28:3c:f7:da:e5:68:14:e8:ac:a1:81:b6:6b:a3:90:
0f:4b:85:a3:d2:a8:95:0d:7a:80:58:08:04:d4:15:
76:eb:3e:3b:e1:c5:80:f2:90:40:af:e2:c1:2a:47:
09:db:11:77:b0:d1:0a:6e:5f:67:ed:4f:bb:95:9f:
26:46:b5:e3:f9:7b:e3:70:b0:81:a1:76:86:91:50:
9b:43:ec:27:4d:a3:1b:fc:86:26:b6:82:e9:aa:bc:
b1:89:8d:95:4f:c9:22:dc:38:5c:ab:05:2c:83:9d:
28:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C1:B8:FB:C3:B4:14:94:30:E4:BB:1E:80:F3:91:E1:32:01:F4:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FE69F92BEDD11EF9E7B776A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.40.0/21
Signature Algorithm: sha256WithRSAEncryption
bd:d7:3b:15:52:f5:38:cf:45:5b:5c:c3:67:58:c6:be:0d:6f:
e9:de:aa:0a:f4:2c:1a:e9:b2:af:ff:f3:7a:8c:60:81:d7:53:
2e:9f:59:cd:ae:d8:67:a6:0e:31:4d:42:46:b6:95:7a:38:9f:
ff:29:ae:fd:7d:19:5e:f1:10:1a:22:b9:cc:b5:cc:5f:89:62:
36:ec:b0:bb:ad:c1:6d:76:fb:81:f4:c2:82:1e:c1:9f:be:10:
21:3e:74:35:0e:ee:14:06:4d:c2:57:7b:d1:e0:a0:bd:45:89:
cf:cb:8e:87:22:c0:a6:92:5f:ef:e0:d5:37:d9:42:72:70:30:
d7:82:70:11:19:d9:fb:33:d0:e8:58:ba:99:bf:d3:7f:93:48:
23:f2:f9:f3:31:82:1e:2f:6b:3e:78:00:ea:32:49:90:af:88:
2a:01:5b:98:2e:d6:5f:b9:cf:b1:aa:3d:30:e7:33:59:3f:eb:
c5:ad:05:55:f2:53:f8:e8:7f:4c:fe:c6:24:fd:80:37:7f:de:
b4:bb:ab:1c:4d:de:49:39:f3:67:a4:56:54:94:f6:26:69:95:
03:ce:01:1d:f5:ec:e4:b0:e5:87:49:7e:be:b9:de:77:44:98:
70:aa:52:76:cc:a1:0a:e9:f5:82:5b:ea:fa:c7:08:24:9a:fb:
32:94:85:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:57:25 2025 by rpki-client