Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73700806F6B711EFB21219BC762E951A.roa
File: 73700806F6B711EFB21219BC762E951A.roa (raw, json)
Hash identifier: kRdk+ztWdZ3Ek0H9RS/IF1Wi+PN7/Q88ddEhvzMpGOA=
Subject key identifier: C5:33:A1:A8:66:13:60:A7:C9:63:07:95:AA:B2:DC:7B:56:EF:73:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016ED5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73700806F6B711EFB21219BC762E951A.roa
Signing time: Sat 01 Mar 2025 16:08:45 +0000
ROA not before: Sat 01 Mar 2025 16:08:41 +0000
ROA not after: Sat 05 Apr 2025 16:08:41 +0000
asID: 203020
IP address blocks: 154.207.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93909 (0x16ed5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 16:08:41 2025 GMT
Not After : Apr 5 16:08:41 2025 GMT
Subject: CN=67c3310d-1c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:df:fb:c5:b2:90:e8:ae:ed:fd:2b:de:76:
22:a0:a2:92:bc:8e:df:ca:9c:96:c7:04:53:1e:52:
b0:c0:08:a9:71:0c:56:4f:c5:4e:0f:34:d1:2f:88:
f8:63:5c:38:6f:bb:21:29:a2:f7:18:bc:4e:09:91:
ca:9f:cd:3a:8a:99:e7:05:43:ca:c3:42:e4:ac:3b:
7c:23:be:94:c1:51:73:66:12:12:44:25:78:76:3a:
33:34:03:1b:f2:b8:e0:13:a0:02:24:fa:4a:08:66:
13:84:de:59:c3:e9:5e:a3:97:71:ed:27:64:f1:54:
ff:60:d7:41:b7:f5:2b:5d:0c:0d:82:44:78:4d:0b:
f8:fb:54:59:37:2b:a1:32:f4:74:de:0c:5a:e1:1d:
03:b7:7b:27:d0:a0:6f:24:e9:b1:f6:5f:13:81:a1:
8e:c8:68:a3:98:22:b9:96:9c:66:8f:6e:a3:6d:26:
2f:a6:49:1b:ea:d6:b8:fa:04:83:1e:bb:2b:fc:3b:
01:d6:f7:62:e0:3a:9f:e0:ec:02:89:e1:ab:33:9b:
8b:f6:4f:3d:4a:e5:24:44:a4:84:9d:99:af:87:17:
3a:d1:81:bc:c0:e0:d0:f5:af:64:d7:37:50:6f:dc:
bd:01:13:cd:27:76:23:0c:a7:4b:9a:6f:56:62:07:
c2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:33:A1:A8:66:13:60:A7:C9:63:07:95:AA:B2:DC:7B:56:EF:73:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73700806F6B711EFB21219BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.84.0/22
Signature Algorithm: sha256WithRSAEncryption
57:a2:e0:43:cf:77:30:dc:a5:a2:69:2e:7a:bd:13:70:c5:ff:
4f:2f:9d:cc:1e:f0:ac:9a:6d:7f:8e:2e:67:61:9f:af:c1:3a:
b1:7f:94:f1:7e:5b:df:df:8e:2e:f8:e5:b2:78:70:ad:4b:77:
07:78:fd:f6:68:57:57:36:7d:2b:ab:2c:ce:dc:42:90:6b:f2:
20:71:52:d0:7b:84:33:5d:eb:84:d6:57:85:06:40:95:7c:a1:
97:9f:4a:56:4f:69:5c:2d:64:80:68:07:57:a1:e1:70:c9:09:
29:61:bd:6e:d8:51:f4:27:8a:02:94:0b:b3:b7:57:d6:13:29:
69:51:ef:e2:6d:30:af:92:03:3a:4b:22:1f:af:78:82:ba:6c:
db:88:5a:91:8c:43:74:41:ba:5b:82:ca:e8:ec:d3:79:c0:c6:
f3:55:ce:30:e2:f6:e9:62:dd:1b:64:c5:fe:62:30:ae:0e:ef:
fb:5e:4a:5d:95:8f:58:ef:01:77:dd:27:b4:67:b6:02:15:e1:
a4:20:66:60:d4:0d:2c:fa:97:94:9a:dd:d0:75:b3:8f:a4:4b:
34:c2:17:6f:32:51:b5:1d:b7:78:25:08:f1:f8:6a:0b:fb:12:
98:c0:50:a9:d9:4c:b1:ac:56:a5:88:eb:92:d3:10:f8:34:86:
78:0d:25:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:33:20 2025 by rpki-client