Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84CDBD56D8CF11EF9BF309B0762E951A.roa
File: 84CDBD56D8CF11EF9BF309B0762E951A.roa (raw, json)
Hash identifier: 8QAi4XEom2J/e/cjjmoGVbDmBul9vxOH4Gy9gdKJ9TE=
Subject key identifier: DA:B2:38:59:DD:77:91:CA:97:AE:E7:F0:81:9D:A3:F2:A5:79:A6:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FB0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84CDBD56D8CF11EF9BF309B0762E951A.roa
Signing time: Wed 22 Jan 2025 14:45:27 +0000
ROA not before: Wed 22 Jan 2025 14:45:23 +0000
ROA not after: Tue 01 Apr 2025 14:45:23 +0000
asID: 138915
IP address blocks: 154.93.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81840 (0x13fb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 14:45:23 2025 GMT
Not After : Apr 1 14:45:23 2025 GMT
Subject: CN=67910487-0a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:cb:89:c9:c1:36:e6:c7:fa:2a:ef:f9:42:
3e:e1:6f:9e:c9:31:49:ee:9c:71:5f:0f:7e:ee:27:
b0:fb:bb:2c:fa:aa:06:df:dd:3d:79:b2:93:f6:5d:
3b:d9:26:54:cd:da:90:f2:e6:95:b8:9e:09:35:a4:
df:3e:68:86:e3:3f:2f:80:73:ae:7f:09:92:94:e7:
8e:dd:7c:2a:14:c9:ef:8e:eb:67:0f:a9:c2:9c:91:
a3:8b:cf:16:84:2d:85:f2:6b:9f:ee:1b:7e:14:ba:
e6:60:23:60:b5:c3:9c:6d:50:76:1a:0c:b8:3a:71:
d1:6b:00:d3:6c:ce:f4:54:d2:b7:69:ea:64:70:3d:
55:8d:62:66:8e:af:27:39:4f:17:d0:c0:65:95:e8:
75:0d:d9:dc:22:dd:44:26:47:67:c3:b2:f0:b1:4b:
96:51:e3:63:60:4d:de:8b:0c:2b:9c:2d:cd:ab:ab:
62:11:28:d0:ca:f6:7c:ee:3e:91:05:4c:85:80:b8:
a4:bf:0e:67:99:bb:f0:52:bc:32:7f:e6:6d:88:2b:
1b:f9:1a:85:69:87:6b:43:5e:72:96:2f:4e:de:d6:
58:ca:08:05:87:42:67:c8:d5:7e:ba:2b:37:81:08:
19:19:9e:af:04:14:eb:24:f9:0e:b3:1c:58:71:2b:
7e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B2:38:59:DD:77:91:CA:97:AE:E7:F0:81:9D:A3:F2:A5:79:A6:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84CDBD56D8CF11EF9BF309B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.73.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:57:a6:99:c9:ad:a3:c5:42:59:2e:68:03:58:e1:32:dd:12:
6e:89:ed:ec:f0:05:a0:a5:1e:77:ff:6d:31:dc:c3:ec:7e:e5:
07:f6:c1:27:95:5b:38:9d:6d:10:16:62:09:3a:e7:81:49:cd:
ca:b2:0e:3a:5b:dc:7a:31:eb:3c:d1:38:21:a8:50:a7:dd:7e:
1e:66:e5:25:ea:53:f9:ff:fb:a6:0b:84:d8:20:94:77:43:1f:
9a:54:dc:26:cf:c4:33:13:74:6d:7e:cc:64:f5:f0:86:95:91:
62:34:37:fb:21:7b:46:ae:1a:01:40:45:a3:9f:7e:e1:46:99:
3a:58:96:cc:57:2a:7a:9f:71:2c:47:92:58:78:ed:e7:5f:e3:
07:fe:57:bc:3e:5a:0e:cf:35:0b:c2:50:6d:f7:63:c5:2f:3e:
17:df:9e:da:e5:a7:d3:8f:6f:e7:ad:d2:7b:68:99:b8:b5:8d:
67:b3:65:f6:47:a3:16:4d:5f:4a:c0:d6:0b:8f:20:23:c9:ee:
55:b2:78:f2:da:ca:32:d9:71:7f:15:f9:e7:79:87:04:7e:57:
d0:33:82:ee:66:a3:fd:07:ec:1d:59:7b:48:a9:45:50:16:12:
64:84:13:40:1d:7c:f5:49:4f:0e:32:67:da:10:7c:43:10:1f:
a5:0e:72:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:34:55 2025 by rpki-client