Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/925C02C0F44011EFB36E164B762E951A.roa
File: 925C02C0F44011EFB36E164B762E951A.roa (raw, json)
Hash identifier: 7uEzCbEs9Uee0WFsMXoK/K2coV+Y6e7IgSODH4yH9Ck=
Subject key identifier: 85:38:A7:ED:D8:4F:8F:17:8F:4E:6B:51:11:4D:CB:98:0A:AF:B9:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016359
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/925C02C0F44011EFB36E164B762E951A.roa
Signing time: Wed 26 Feb 2025 12:52:44 +0000
ROA not before: Wed 26 Feb 2025 12:52:40 +0000
ROA not after: Sat 19 Feb 2028 12:52:40 +0000
asID: 17561
IP address blocks: 154.82.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90969 (0x16359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 12:52:40 2025 GMT
Not After : Feb 19 12:52:40 2028 GMT
Subject: CN=67bf0e9c-5128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a6:e1:09:0e:06:5d:de:e0:51:c9:e9:d8:24:
8a:4d:17:8d:2d:f1:74:c0:9b:a2:43:cf:a0:42:1d:
bd:f1:11:f7:00:fc:93:82:00:5c:ca:de:fd:1c:08:
bf:77:22:fe:0a:3d:47:8b:1b:8e:fc:bc:4d:45:8e:
de:a1:8c:ac:fe:9a:36:02:93:31:11:55:4b:4b:db:
02:b5:97:0d:37:a2:9a:b7:92:de:37:0e:40:d0:66:
f3:15:fb:16:0a:b7:f6:0b:d4:58:01:73:9a:19:6f:
be:4d:36:7a:39:fd:c3:26:68:d1:cd:9e:8c:7c:0a:
b0:da:7e:f8:0e:4a:58:08:a8:64:62:c1:a0:4b:82:
2b:9e:03:8a:b5:fe:14:91:57:ea:6a:34:10:1f:6d:
85:31:ce:72:27:d7:fa:09:37:30:34:e1:b4:02:e5:
9d:71:c1:7e:92:02:13:48:60:6a:6f:4f:b5:5c:6a:
30:ba:d2:27:f9:6a:b0:99:28:c5:22:a1:d2:34:c2:
31:03:60:a8:30:b0:c1:e5:03:73:4e:98:fc:c5:c6:
33:0a:1f:47:fd:bb:57:dd:47:af:6b:b9:71:b2:bb:
67:cf:40:6a:55:7c:44:28:8b:08:1c:c3:2c:fd:b1:
c3:5e:c2:b8:e2:92:4c:c9:8f:47:25:da:2b:bc:2a:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:38:A7:ED:D8:4F:8F:17:8F:4E:6B:51:11:4D:CB:98:0A:AF:B9:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/925C02C0F44011EFB36E164B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.138.0/24
Signature Algorithm: sha256WithRSAEncryption
06:c7:b5:31:26:1a:d0:73:d0:9f:69:e9:01:57:30:e4:2e:65:
50:4e:ef:f2:a7:be:1a:69:0e:bc:fd:b9:d2:d7:aa:ff:c1:8c:
63:b3:8e:cd:48:bb:5b:87:41:8c:33:22:72:9b:a8:09:fa:d8:
82:9c:8e:3d:74:e9:c8:c6:94:ad:a6:d8:53:ef:50:58:5b:d0:
96:c4:53:17:92:8a:a8:58:61:2b:24:5c:18:03:58:f0:be:88:
4a:82:97:8c:8a:aa:05:6e:40:c8:0b:96:13:ea:54:57:c9:be:
bc:f7:0e:1c:eb:cf:14:25:37:ac:8b:d1:16:b1:50:b6:f3:3f:
c2:9c:73:09:c0:22:a7:6e:22:b1:59:82:54:ce:70:a3:f8:41:
8a:60:5b:d6:49:f7:65:07:2e:98:1f:af:05:59:09:4f:d6:19:
68:55:0c:35:4e:67:bb:12:4e:64:a7:0e:4e:0d:fa:4f:22:f1:
f7:64:8e:c3:38:05:86:7e:a5:cd:bb:72:d5:3b:91:0e:04:34:
ca:d5:30:b5:96:ba:a2:9d:eb:30:80:d2:d1:16:1b:b1:b5:3b:
ad:18:14:8d:4f:9b:2c:66:9a:01:73:fc:b1:d1:c5:59:1f:34:
3f:c8:c4:56:cf:b5:6e:23:2f:9a:92:99:b8:88:4b:1e:75:c6:
b3:84:16:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:06 2025 by rpki-client