Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BAD2856F62A11EFAF58F671762E951A.roa
File: 7BAD2856F62A11EFAF58F671762E951A.roa (raw, json)
Hash identifier: kAcz4ZYvSBB17EGtHRuiYT2A5VeVfbqnfuh2jG7Mx9c=
Subject key identifier: 54:A7:13:66:6A:71:8F:79:C6:6A:6A:01:D6:FF:C9:4E:E3:9A:42:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CC3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BAD2856F62A11EFAF58F671762E951A.roa
Signing time: Fri 28 Feb 2025 23:19:40 +0000
ROA not before: Fri 28 Feb 2025 23:19:36 +0000
ROA not after: Sat 19 Apr 2025 23:19:36 +0000
asID: 138915
IP address blocks: 154.93.38.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93379 (0x16cc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 23:19:36 2025 GMT
Not After : Apr 19 23:19:36 2025 GMT
Subject: CN=67c2448b-5c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:be:a3:cf:84:55:5b:05:4a:b5:b2:78:34:90:
72:80:ab:fb:4c:dc:d0:2e:8a:80:ff:19:cf:4f:cd:
88:79:b1:e2:ff:47:b1:fc:14:e9:5e:8d:04:40:cc:
68:3f:fc:ae:9b:d4:f9:6e:e0:5f:86:ce:a1:ee:5f:
a2:a3:b2:9a:6a:57:12:14:72:86:5b:6a:29:b4:42:
53:81:9f:8f:00:f3:20:05:30:6b:de:0d:09:ab:e7:
28:0d:a0:05:dc:82:3d:d7:da:ed:37:35:87:92:67:
88:9b:59:23:e9:1a:94:2c:f3:e7:92:ef:ea:51:16:
e3:93:90:d1:76:f3:d3:68:26:ea:05:8c:4a:60:8a:
57:90:0a:cb:73:e4:8e:a4:10:8f:01:42:4a:c5:00:
b9:1d:5b:42:9d:3c:22:24:6b:df:dd:a8:ca:52:e9:
d0:24:68:09:a9:62:5f:5b:6b:24:f6:3b:4d:a2:49:
8d:51:3f:90:44:23:7f:a6:4b:59:54:02:86:61:6a:
5b:14:32:5d:92:79:8a:7f:6a:fa:33:ec:db:de:f7:
3a:6c:de:c7:5d:0d:35:ab:7b:3a:31:6a:5a:83:7d:
85:67:42:36:3c:e3:6d:f5:bd:11:f6:0f:7d:d5:21:
05:6c:2a:70:a1:54:9d:5b:a1:8a:7e:13:8c:59:92:
c7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A7:13:66:6A:71:8F:79:C6:6A:6A:01:D6:FF:C9:4E:E3:9A:42:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BAD2856F62A11EFAF58F671762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.38.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:d6:ea:8b:c8:56:35:f1:da:2f:97:75:df:4d:63:5c:6b:1a:
8c:8b:ec:a3:ac:af:32:a0:b1:78:eb:bb:2e:2f:00:d2:12:c2:
1b:97:78:2f:c0:c6:aa:2a:52:9c:4a:9b:31:96:34:be:73:7d:
8b:f0:4c:f4:38:34:9b:30:be:3a:41:c6:0a:49:94:64:c5:dd:
b1:87:d9:a4:29:dc:6b:8f:6d:6c:3d:59:97:94:a4:8d:e6:47:
47:ad:58:81:82:67:68:61:a5:48:7f:07:1e:cb:c9:d8:20:c7:
ca:9c:81:01:30:be:65:c0:c5:ff:c7:09:fd:e1:b6:a8:0b:12:
b0:39:dd:2a:f4:e2:ca:37:9f:34:42:a6:86:d1:c6:1e:ed:f8:
56:e6:ef:ec:27:32:85:b1:11:e2:6e:70:55:ab:99:81:98:fd:
00:67:08:e6:5f:7c:fb:37:98:cd:d1:19:c6:95:31:8c:23:3f:
e3:2a:fd:5f:57:23:32:4b:f5:21:35:9d:2c:61:fb:e8:0c:f3:
ba:b6:56:da:c3:de:9b:56:65:7b:76:ba:75:cd:f2:ec:86:12:
8e:50:4f:37:9e:39:cd:1a:8d:6a:56:5d:3a:98:13:ca:68:d2:
57:64:ef:de:38:e3:cb:a2:e3:15:97:21:0a:0c:a0:a2:26:32:
bc:11:e4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:24:51 2025 by rpki-client