Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70A84D8AF82011EF9D79B352762E951A.roa
File: 70A84D8AF82011EF9D79B352762E951A.roa (raw, json)
Hash identifier: Jdr5piokOFZWq47YPF5uNyTmYYM1Ow+1uwAOWvhx9KU=
Subject key identifier: 51:E6:93:2D:D4:C6:06:5F:15:56:9E:3E:C2:EC:81:D2:D3:5B:B6:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01705D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70A84D8AF82011EF9D79B352762E951A.roa
Signing time: Mon 03 Mar 2025 11:12:48 +0000
ROA not before: Mon 03 Mar 2025 11:12:44 +0000
ROA not after: Wed 30 Apr 2025 11:12:44 +0000
asID: 63139
IP address blocks: 154.93.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94301 (0x1705d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 11:12:44 2025 GMT
Not After : Apr 30 11:12:44 2025 GMT
Subject: CN=67c58eb0-9b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:62:92:e4:97:e5:5e:5a:56:7a:00:00:1f:9a:
b3:7e:17:2b:9f:dc:fa:40:07:c1:70:4c:5f:df:5d:
81:80:c1:ef:d3:51:66:32:2c:06:74:70:33:d0:7c:
7a:8e:da:9f:39:6f:68:18:fa:0e:81:03:10:41:82:
96:54:f7:7d:94:44:94:6a:03:22:7e:4b:2b:fd:a1:
1d:74:0d:89:cc:94:08:80:53:a3:71:d7:96:6d:56:
1c:c5:3f:4c:4b:85:14:99:57:36:06:aa:fa:09:04:
a7:34:71:77:b9:c6:14:ad:43:4e:38:cd:a9:a7:ac:
6e:78:94:73:af:59:c7:30:dc:8b:66:89:ea:a1:37:
dc:18:df:2c:ec:3a:a4:82:9a:da:ce:bd:19:0d:17:
65:3f:72:74:ad:5a:fc:b9:26:a4:fa:ff:73:ae:37:
28:1f:5c:39:1f:fb:0a:cf:95:b9:c3:87:b7:9d:08:
0a:e0:0e:17:6a:05:97:04:9a:16:dd:7f:8b:b8:b9:
25:53:64:e9:f6:81:7b:60:30:53:24:bc:07:c3:a6:
00:c4:2b:ee:27:9e:24:96:ca:26:9d:9d:2e:8f:f9:
25:60:f5:2e:74:ff:ff:69:1c:77:d6:af:8f:ba:ef:
01:0f:be:a2:54:e4:3b:ce:1f:8d:7e:86:3c:3f:19:
71:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E6:93:2D:D4:C6:06:5F:15:56:9E:3E:C2:EC:81:D2:D3:5B:B6:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70A84D8AF82011EF9D79B352762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.70.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:46:d5:e5:b2:52:50:28:9a:0d:22:0e:d3:7b:1d:35:df:05:
95:72:78:d7:87:b0:71:d0:02:09:68:5f:1a:aa:56:be:f6:75:
cf:df:41:80:d5:cc:9e:e9:17:bc:81:23:49:33:1f:93:08:ee:
38:23:08:59:9a:0b:02:15:77:a9:07:98:c7:c6:7b:7c:29:ec:
a8:a3:ca:e4:0b:70:23:48:06:80:0b:08:f6:03:ef:22:9e:63:
27:7c:f8:04:8b:1b:3e:7c:3e:62:9a:57:22:30:6d:54:a0:b6:
40:ae:f5:94:87:97:6e:09:c1:75:68:d6:27:f6:05:03:87:4f:
59:1b:b7:94:90:04:b9:c3:10:5f:0a:a7:30:cb:8b:b8:11:38:
1f:48:96:03:98:ef:93:cf:0c:0b:93:6f:1c:55:4b:65:1c:15:
ca:0a:5c:4f:d9:48:88:c8:ad:f2:61:c5:60:e4:67:4c:8c:0f:
9d:d2:b3:d2:7a:b1:5b:28:59:c7:86:30:52:e6:b1:d5:f5:a2:
a7:56:cd:20:46:af:0a:9c:56:1a:93:7b:fe:0f:a5:b3:c8:a0:
77:e7:07:2a:d5:31:76:3e:1b:75:0b:8b:83:b7:3f:49:1c:36:
5b:a7:62:eb:4c:4b:e1:e0:97:27:a0:46:16:d6:74:3e:1a:ca:
31:7e:7a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:44 2025 by rpki-client