Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52AE6DFEDAFD11EF9CAF1A6E762E951A.roa
File: 52AE6DFEDAFD11EF9CAF1A6E762E951A.roa (raw, json)
Hash identifier: daex+55nP06pxQEOi8QNp24m/mm8Uq+fOqiwZeHzcXk=
Subject key identifier: 87:1A:A9:F5:23:91:3F:C9:22:D2:35:73:34:DA:E7:C3:43:7C:C7:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014921
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52AE6DFEDAFD11EF9CAF1A6E762E951A.roa
Signing time: Sat 25 Jan 2025 09:18:22 +0000
ROA not before: Sat 25 Jan 2025 09:18:18 +0000
ROA not after: Sun 30 Mar 2025 09:18:18 +0000
asID: 63139
IP address blocks: 154.94.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84257 (0x14921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 09:18:18 2025 GMT
Not After : Mar 30 09:18:18 2025 GMT
Subject: CN=6794ac5e-ba95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3a:4f:17:5f:fb:19:7d:36:b8:e5:62:46:33:
cb:07:92:cb:49:e4:1c:19:cd:ca:b2:d2:28:7c:b4:
53:d9:e9:cf:bb:f9:60:3e:2b:90:29:77:94:87:85:
e5:7e:bd:c1:07:97:17:6b:d9:03:51:28:c0:5f:09:
1e:20:98:2e:9c:b8:e9:1a:ca:a4:b1:3c:51:1c:fa:
9e:a9:62:11:d8:56:a3:a0:e2:4d:6b:03:8f:93:47:
a8:14:d0:57:d6:ee:4d:f3:dc:aa:ed:23:46:b5:4b:
a9:f3:3e:55:13:fa:f2:26:a5:9d:cf:5f:e0:e3:3b:
15:d8:d9:1a:cf:4b:3a:dd:84:0f:62:c9:68:d6:2f:
e8:5a:9e:66:2d:1e:e2:45:89:39:b5:43:dc:d0:d6:
a5:97:8a:b4:46:9b:d3:71:be:c2:cb:bc:1e:66:58:
5c:ca:fb:40:19:dc:85:a5:94:94:35:33:4c:a1:18:
a9:04:cc:75:a5:03:0d:d9:d5:63:ab:1a:61:61:9a:
2f:8d:53:3f:51:fb:24:13:28:c0:2d:5a:60:17:5c:
d9:38:f1:2d:89:79:85:9a:d6:35:6b:d4:88:42:7e:
06:06:ad:ef:86:10:b4:52:48:b0:9f:ff:4f:75:bf:
c7:ef:a4:96:97:10:f9:ed:92:77:e4:b6:f3:94:90:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1A:A9:F5:23:91:3F:C9:22:D2:35:73:34:DA:E7:C3:43:7C:C7:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52AE6DFEDAFD11EF9CAF1A6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:43:ce:bb:7d:95:bb:85:55:b1:2e:d1:4a:f9:83:99:04:1b:
67:ab:65:b9:80:0f:dc:6f:9b:e0:52:28:8b:d0:88:9c:cf:e1:
08:2d:e7:80:f0:fb:4d:f4:91:05:97:13:61:6e:57:14:46:57:
0b:4c:2b:4a:93:95:ab:b4:96:9e:97:d1:8f:51:5d:8f:9e:c0:
05:b0:26:bc:7b:a8:9d:69:da:2e:95:6f:fb:81:73:91:e4:fd:
c0:fd:e2:97:80:ed:33:5a:6f:96:8e:31:24:2e:b5:28:af:01:
35:e4:2d:36:d7:91:f1:ee:37:22:7a:68:72:34:0b:1c:da:c5:
96:36:fc:47:20:58:34:f9:41:c7:a8:e3:c6:a7:c2:b2:dd:8b:
77:ec:81:a1:f9:4f:5a:e8:30:bb:b3:1c:9d:81:d2:2d:1f:e6:
03:b9:4b:e5:7a:14:0d:cd:59:38:ef:2f:e9:a8:a8:eb:f0:4b:
cd:b1:b2:89:71:31:8b:e9:7d:bd:03:ba:4f:26:d0:e8:62:93:
73:e4:1b:3f:19:51:dc:02:25:87:da:6a:ae:74:74:28:9a:52:
e4:19:d0:06:81:18:4c:8e:09:d5:8e:ee:a8:02:a0:97:42:a2:
38:02:84:bd:ab:42:16:53:59:4f:c9:64:fe:0c:ee:8b:c3:79:
3c:e5:4a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:03:49 2025 by rpki-client