Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/831980A2F56311EF9647D198762E951A.roa
File: 831980A2F56311EF9647D198762E951A.roa (raw, json)
Hash identifier: uS8gwH8LFAEcr1C05F+VrL2srgqD2m0IqSS0V0Cclpo=
Subject key identifier: 8A:19:D1:41:EE:CC:10:E4:CA:93:7A:86:6F:24:4F:14:44:38:C9:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/831980A2F56311EF9647D198762E951A.roa
Signing time: Thu 27 Feb 2025 23:35:22 +0000
ROA not before: Thu 27 Feb 2025 23:35:18 +0000
ROA not after: Fri 11 Apr 2025 23:35:18 +0000
asID: 63139
IP address blocks: 154.203.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92584 (0x169a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 23:35:18 2025 GMT
Not After : Apr 11 23:35:18 2025 GMT
Subject: CN=67c0f6ba-75e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e0:af:b4:cf:ed:85:60:64:bc:b2:b9:6f:32:
5f:20:7f:98:32:5b:c0:c2:2e:0a:af:63:ea:b8:5c:
d1:69:6e:1a:c8:c3:44:5f:a8:ee:5f:8f:32:23:dc:
4a:d8:fd:7b:63:87:87:f9:1d:59:5f:1b:ee:4a:8f:
11:6a:7e:97:eb:5d:29:fc:be:52:b4:47:67:43:79:
0a:c5:f9:81:09:31:d1:c3:99:92:dc:de:17:34:a3:
45:94:ec:8b:cf:a4:48:6b:2d:87:45:bb:5b:70:cf:
c7:1b:40:3d:c0:59:f5:2a:61:34:3c:9b:46:cf:b5:
65:6e:e4:2b:13:10:42:29:1a:88:cf:00:a1:5a:8b:
ae:2c:19:24:9f:34:38:62:18:df:74:ab:83:4b:4b:
9d:13:3c:3f:7c:0e:c8:c3:9b:6d:d5:fc:d2:ec:f9:
fb:1b:56:e1:e1:b4:1c:17:82:3e:a3:9d:c2:c3:de:
cc:29:1a:78:69:ae:2f:60:70:1d:cb:69:ab:b9:0e:
16:2a:7e:ea:48:e9:db:5c:c9:63:30:9d:d0:ba:de:
73:d4:4f:d9:2e:b0:db:7a:46:e3:0b:bf:21:4b:3f:
94:88:a2:f6:67:2f:01:de:9c:6b:29:b0:10:4e:dd:
e0:ce:e7:7e:0f:87:21:4a:e3:9f:14:a6:b2:03:4f:
65:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:19:D1:41:EE:CC:10:E4:CA:93:7A:86:6F:24:4F:14:44:38:C9:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/831980A2F56311EF9647D198762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.178.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ef:d3:a9:ff:03:cc:16:f6:ed:7d:71:46:1c:f1:43:a7:01:
ca:af:f0:87:08:5d:5a:10:83:42:5c:9c:f8:2d:64:bf:15:c2:
ab:61:bf:78:0b:78:cf:05:2f:46:fe:df:fe:6a:39:e5:45:1c:
63:44:9e:8b:7e:69:36:43:fd:f9:34:ab:93:9f:7c:8b:55:cc:
bd:17:f9:4d:4a:e7:cd:2b:28:b4:30:1a:2c:3c:e2:ed:37:46:
ac:06:e7:57:e6:55:71:f3:56:23:b0:13:d4:a5:7a:de:03:4d:
ca:53:77:29:a0:bf:70:fb:75:f0:a1:99:5b:bb:ab:63:a5:4f:
15:78:16:22:d1:b8:41:99:8f:70:e5:81:93:4c:c5:bf:5c:d1:
42:0b:6d:da:8f:64:ea:c5:6c:fa:6a:1a:ee:fd:ff:3b:2c:48:
3c:62:90:5a:46:45:8e:12:b2:b2:d8:59:55:31:38:8d:d5:83:
7a:25:e0:d5:fb:93:d0:0b:57:07:c4:36:b1:0a:2e:bc:63:a0:
77:e1:e9:31:34:42:41:72:bb:95:88:0b:7c:2a:51:cd:69:0e:
36:5e:e5:05:82:22:b4:bb:94:2d:00:a3:9f:7c:11:13:65:4f:
29:f5:07:bf:6d:e2:2f:8f:0e:28:da:ce:8c:0b:ff:87:bd:d6:
02:4c:5c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:42 2025 by rpki-client