Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/794E203ED8D811EFB248146D762E951A.roa
File: 794E203ED8D811EFB248146D762E951A.roa (raw, json)
Hash identifier: fNasynThDoi/X1w1CBUPudqGgWAL9QMwstOZEuGsdag=
Subject key identifier: D8:14:CA:65:44:59:86:2F:9C:8B:55:BB:16:90:F4:47:F2:8B:0C:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/794E203ED8D811EFB248146D762E951A.roa
Signing time: Wed 22 Jan 2025 15:49:33 +0000
ROA not before: Wed 22 Jan 2025 15:49:30 +0000
ROA not after: Tue 01 Apr 2025 15:49:30 +0000
asID: 138915
IP address blocks: 154.93.112.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81876 (0x13fd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 15:49:30 2025 GMT
Not After : Apr 1 15:49:30 2025 GMT
Subject: CN=6791138d-f54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:5b:dc:5c:d2:74:2f:02:9f:b1:e0:ab:98:
86:df:79:61:6c:22:35:f6:71:2b:32:06:7c:db:8c:
0f:9b:c0:2f:20:98:4c:0a:41:21:3f:33:ea:34:ba:
f0:87:03:ea:3d:aa:7d:36:8a:b4:28:6a:c1:f5:d3:
8d:fb:7e:51:23:95:06:93:52:ae:b5:e6:2c:94:9d:
f8:2a:0a:d3:95:e4:7d:bf:f9:fd:38:1c:f1:2c:99:
ab:a0:da:04:2c:c0:18:e8:0e:83:92:16:2d:f0:a5:
dc:77:70:fe:20:5e:59:e9:2f:27:dc:ca:6a:ac:92:
7b:c1:3d:bd:83:aa:dd:68:8c:ce:93:fa:eb:b1:bc:
3b:1e:d9:0e:af:30:ea:90:66:bc:7a:c2:08:a6:52:
7e:5e:0d:b1:2f:53:d3:f8:23:b8:4e:2a:26:b3:16:
22:c0:11:b1:9e:fe:4d:f3:ec:a6:a0:32:d1:f4:47:
b0:76:07:b5:8c:57:31:49:33:1d:83:1f:2d:6c:c8:
3d:6e:b3:47:f9:5a:f5:41:d1:18:18:ff:1b:c9:e4:
7c:5a:d7:d8:a0:74:9e:a0:c4:19:87:0d:a9:c6:77:
b9:11:7c:a7:ae:9d:69:bb:48:24:e8:01:cb:83:6a:
1c:5a:1e:69:8d:4f:7c:fb:26:56:17:69:61:95:ec:
66:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:14:CA:65:44:59:86:2F:9C:8B:55:BB:16:90:F4:47:F2:8B:0C:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/794E203ED8D811EFB248146D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.112.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:60:a0:1d:54:98:17:dc:dc:3b:54:ee:fb:ea:0e:0b:5d:e3:
43:72:d1:74:38:b8:19:b3:15:ca:db:23:67:5c:20:b8:4a:5d:
59:fe:c0:6b:3b:0f:67:07:6e:85:bb:9d:62:7e:8c:c4:92:88:
6f:6d:99:bd:68:d8:30:fb:6a:0f:7d:a0:62:a6:a5:1e:4f:b5:
28:fd:fb:0f:59:da:1a:13:0a:9f:4f:15:57:69:c3:92:ed:04:
ac:6d:04:a5:36:86:29:e0:c7:8e:46:ab:ff:06:2d:ba:55:9c:
3e:f9:67:5a:34:49:dd:3d:db:05:5e:7c:fb:07:a0:71:4b:6e:
d6:c5:df:ca:1e:6a:66:48:83:02:7b:f7:22:3c:a6:eb:61:02:
09:99:9a:b7:3b:0b:e2:69:a4:59:90:a1:e4:df:a5:74:b6:91:
70:05:06:f7:07:d0:ae:10:58:3a:44:78:03:a8:0e:d9:18:cb:
70:7f:df:37:98:ae:98:9e:b0:6a:0b:d3:9c:6d:62:1d:e7:ab:
40:81:20:ff:31:b9:58:5e:f9:67:e2:64:f6:d1:55:02:95:e1:
2c:70:70:45:de:f6:04:d4:94:92:bb:c3:f0:b7:b7:c1:67:83:
11:3f:27:bd:22:61:9c:6a:d9:59:ec:dc:3f:c1:f6:6d:1b:11:
52:32:71:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:29:47 2025 by rpki-client