Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97F930E4F59F11EFAAD8EB44762E951A.roa
File: 97F930E4F59F11EFAAD8EB44762E951A.roa (raw, json)
Hash identifier: m+7blbf9KMyWLhBk9hA/j6AsUMKVEEkB1Q/Di+uWnAY=
Subject key identifier: 24:C9:5F:A6:C8:B7:BD:46:EA:3B:B5:B8:44:2E:B3:9E:6D:4F:04:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97F930E4F59F11EFAAD8EB44762E951A.roa
Signing time: Fri 28 Feb 2025 06:45:27 +0000
ROA not before: Fri 28 Feb 2025 06:45:23 +0000
ROA not after: Sat 29 Mar 2025 06:45:23 +0000
asID: 147176
IP address blocks: 154.197.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92637 (0x169dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 06:45:23 2025 GMT
Not After : Mar 29 06:45:23 2025 GMT
Subject: CN=67c15b87-d1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6d:3f:7c:6b:18:aa:00:e8:b0:fe:1e:a2:28:
d1:b6:5b:f7:1a:1a:c3:52:80:ec:c6:73:84:0d:d0:
29:3f:12:31:0d:33:d7:42:96:4a:64:45:eb:48:f6:
7b:1b:e9:68:a3:00:f1:4e:3c:3f:f9:01:f4:7a:d4:
e3:01:d3:37:3a:10:34:fd:7f:b5:d7:66:83:00:4f:
01:15:50:9d:6c:32:7c:17:be:70:60:21:7d:38:f7:
20:a3:06:99:b9:08:63:a7:13:94:76:8e:15:9e:64:
1f:3f:48:69:f9:d6:fc:a4:60:e3:f3:a3:db:34:64:
19:6f:c8:c2:0e:d4:cd:45:97:35:23:d6:71:5b:12:
76:6d:48:1e:02:18:42:da:a4:23:3b:b7:02:f8:af:
77:24:74:fa:86:00:56:d6:cb:68:b8:8c:57:1b:86:
e9:e8:50:5c:7b:2b:bd:59:74:a9:fe:c8:7a:59:89:
dd:30:f3:9c:76:75:71:32:42:ff:b9:31:23:bd:45:
98:4e:d0:3a:40:df:3c:4a:6c:96:a1:45:ca:dd:d7:
73:af:d9:29:88:f2:c7:6d:1d:97:58:5a:a7:7e:05:
a3:0a:09:30:01:5c:ae:2a:b5:2c:58:61:77:65:84:
aa:c5:26:76:a1:9e:97:a8:b8:18:3c:4e:f3:e2:fc:
ed:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C9:5F:A6:C8:B7:BD:46:EA:3B:B5:B8:44:2E:B3:9E:6D:4F:04:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97F930E4F59F11EFAAD8EB44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.124.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:12:5a:0b:0d:6e:df:3f:d8:44:40:a7:35:b7:35:d5:96:59:
41:58:5c:57:a7:53:2e:cf:23:2f:a1:38:4b:40:0c:23:03:e2:
a5:01:56:f1:4b:f1:91:cc:8f:d7:6c:40:19:df:bf:6f:66:4b:
26:24:66:5d:8b:7b:bf:85:8c:79:b7:6d:93:23:ea:d9:ae:7a:
30:9d:4a:01:b2:66:ac:c1:d9:f8:62:00:2b:a0:fd:ea:03:f8:
5b:20:ca:79:25:54:53:da:24:c3:68:a9:d6:e1:1f:80:9e:ec:
e2:d6:33:83:3b:7a:a5:f5:b4:e5:60:43:13:76:24:f9:8d:db:
95:32:2f:a8:5d:5f:6a:cc:da:48:5a:28:64:a2:ca:a5:bc:de:
b6:24:f5:2d:ba:e8:d4:24:d2:ea:8f:b8:b6:02:1a:6b:d3:71:
e9:ef:4a:e6:f6:f2:38:be:26:97:c4:f5:d8:cb:71:5b:63:d4:
56:4a:fc:b3:88:8e:e3:db:17:7a:70:1e:08:2d:71:c4:58:5d:
1c:f4:aa:f1:7a:fc:e3:3f:24:66:0c:e4:a4:d9:ce:b1:61:7f:
66:dd:c9:98:f5:10:16:5b:76:f0:7f:04:37:fa:0f:b2:80:af:
a2:d9:c9:80:e0:1e:93:d4:ec:50:d7:bc:93:f5:b3:97:62:86:
5e:a7:89:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:37 2025 by rpki-client