Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D566B5EF80E11EF9A421257762E951A.roa
File: 8D566B5EF80E11EF9A421257762E951A.roa (raw, json)
Hash identifier: DJHcbIygNv6kD9/2oNqhZMiEpMAN2xH5IrzuCsG76/U=
Subject key identifier: 58:FF:25:C6:15:1A:A2:18:ED:A6:FC:10:D9:16:64:E9:3F:92:E9:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FA2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D566B5EF80E11EF9A421257762E951A.roa
Signing time: Mon 03 Mar 2025 09:04:46 +0000
ROA not before: Mon 03 Mar 2025 09:04:41 +0000
ROA not after: Wed 30 Apr 2025 09:04:41 +0000
asID: 63139
IP address blocks: 154.94.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94114 (0x16fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 09:04:41 2025 GMT
Not After : Apr 30 09:04:41 2025 GMT
Subject: CN=67c570ae-3e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:97:d3:d9:6e:99:d0:54:7d:c0:67:a1:be:d2:
5e:f6:0d:c2:9b:70:87:aa:9d:2b:87:94:44:a1:02:
b6:37:23:19:11:7a:ea:64:0a:16:3e:7d:b5:86:e1:
77:52:08:20:e1:d9:41:4a:96:6e:a7:bc:5b:f7:dc:
7b:a6:a4:3f:91:e8:f7:ee:4a:fa:94:86:91:fd:99:
d3:4b:2c:90:63:a3:3c:5f:45:d1:ca:42:ef:be:b8:
00:74:8e:89:44:f8:44:9c:b6:f7:70:e8:4c:2f:c0:
17:fb:60:d5:61:82:e6:3a:20:42:68:46:95:3a:5b:
a0:1a:2c:14:f1:e1:f3:07:cc:13:80:5f:01:d5:c6:
2d:ef:cf:8e:d1:95:99:e2:16:b2:a6:e7:ea:97:66:
f4:c1:4d:58:17:b7:f2:d5:14:0e:d7:54:26:4e:ca:
04:49:64:38:e9:13:70:3d:4b:df:4a:b4:b2:0f:02:
8f:45:ef:b2:b7:60:d0:ed:86:48:19:4a:0a:b0:44:
98:e8:f4:02:61:d2:55:d5:94:84:03:8b:1e:37:61:
13:c6:3a:b1:81:bb:5e:3e:d5:c1:df:f0:1e:25:31:
1e:f7:8f:74:32:c8:39:e9:64:ac:5c:71:bc:c9:14:
f9:dc:01:29:c3:d6:a4:3c:84:38:56:c6:55:ce:53:
c8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FF:25:C6:15:1A:A2:18:ED:A6:FC:10:D9:16:64:E9:3F:92:E9:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D566B5EF80E11EF9A421257762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.101.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:e0:d4:83:32:40:0b:74:34:35:70:63:89:e7:4f:dc:cd:75:
44:d8:ce:b6:a6:54:3b:5b:1c:6c:67:fa:e0:f5:61:c5:90:19:
49:e4:8f:43:7a:fa:56:4a:8b:4c:77:c8:5c:03:82:cb:54:dd:
69:b7:5e:f1:1f:bc:57:b4:a3:17:bc:3f:da:59:a3:6e:52:57:
1c:ad:e0:1c:c5:ce:7a:f2:24:95:63:8b:25:cf:ac:ab:25:97:
16:89:a8:65:14:4b:68:ef:80:56:62:8c:f9:12:da:5d:93:c4:
cf:8e:4b:60:d9:2a:9f:20:ed:e6:3a:17:32:8b:46:d0:2a:f0:
1f:27:76:7d:b3:34:f8:87:b5:a2:67:78:f7:81:be:7b:7b:b4:
6a:99:71:10:24:c2:a1:79:24:4e:b4:62:9c:2c:f8:ee:c4:2e:
e9:99:3f:a9:9e:a3:76:cd:54:d3:3a:1e:79:03:24:8c:43:fb:
a6:55:f9:d5:80:17:73:96:5f:75:7d:77:03:31:e5:c7:52:90:
12:c2:f9:05:9e:10:22:63:ed:c1:c2:1d:75:b4:82:0e:32:fd:
fc:58:0c:db:fe:df:ce:48:9f:c0:47:2e:dd:49:ac:18:f1:be:
98:ed:7a:b3:cd:56:6e:76:96:e3:12:e0:14:58:b2:93:8b:96:
cc:f5:8b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:01 2025 by rpki-client