Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98946752F47E11EF8B7E347B762E951A.roa
File: 98946752F47E11EF8B7E347B762E951A.roa (raw, json)
Hash identifier: P39nZRqWhxFUzoSO+gk6mxOr05Re2C1wUyUtEFUn07E=
Subject key identifier: 70:A2:C1:B4:9E:CE:E7:4C:4E:0F:73:70:54:1C:19:87:D7:71:56:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98946752F47E11EF8B7E347B762E951A.roa
Signing time: Wed 26 Feb 2025 20:16:43 +0000
ROA not before: Wed 26 Feb 2025 20:16:40 +0000
ROA not after: Sat 19 Feb 2028 20:16:40 +0000
asID: 17561
IP address blocks: 154.218.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91621 (0x165e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 20:16:40 2025 GMT
Not After : Feb 19 20:16:40 2028 GMT
Subject: CN=67bf76ab-f0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:9b:2d:48:ac:b9:d8:f2:5d:53:71:b5:07:
c4:96:a8:67:86:34:d1:d4:96:f0:ff:6a:04:c9:24:
8d:10:1e:89:20:59:fc:41:94:83:6b:e3:be:64:4f:
c8:3f:80:d4:4d:8d:5c:60:18:fe:94:21:35:48:77:
1b:3c:ea:09:7e:51:62:bb:06:c3:1f:2e:57:fd:51:
12:17:3d:c7:0d:75:05:e8:1d:e8:98:41:ed:f8:a9:
ef:20:dd:72:1b:37:b4:b6:3f:be:22:ed:50:7f:69:
37:de:7d:7c:62:d4:eb:b1:3d:f1:97:fc:b1:74:75:
21:94:d7:50:69:49:7d:36:cc:b2:24:91:fa:ea:08:
9a:2c:80:4a:96:ce:9d:42:ef:17:8a:1b:f9:09:10:
d0:6a:a4:79:37:27:fd:69:4b:b3:41:7f:ec:d3:7b:
83:d3:ce:e0:10:ae:d2:f8:21:8c:ff:84:a3:f7:7b:
ea:99:20:e5:49:dc:ee:88:7b:19:47:57:6e:d8:51:
d0:07:39:f3:a7:74:20:d8:88:3a:a0:af:2b:b3:93:
2a:dc:1c:6a:6a:bd:5e:df:1f:e1:82:b9:42:07:53:
13:9c:65:0f:53:e8:73:f2:6a:8c:bb:0f:95:b1:38:
9d:b8:b7:50:21:14:96:c4:c2:4a:4a:55:e0:01:85:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A2:C1:B4:9E:CE:E7:4C:4E:0F:73:70:54:1C:19:87:D7:71:56:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98946752F47E11EF8B7E347B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.62.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b2:05:98:f0:aa:29:d3:8f:5b:8d:18:6c:fd:13:d8:d0:61:
05:e1:8d:60:50:60:67:30:cb:4c:85:5d:2d:12:65:24:b0:9c:
aa:9b:6d:06:f4:02:8d:19:d9:1f:05:eb:5d:b7:42:4c:79:bb:
50:ed:27:cd:31:be:21:f3:6b:c9:1b:49:75:a5:ee:24:ca:18:
fc:f7:53:03:48:ff:e0:9d:20:c7:66:54:31:e6:9b:06:f5:d1:
bb:05:04:ac:f0:f8:53:5c:e7:ee:f1:ba:f0:d0:0e:05:3b:e2:
a8:f4:45:60:8c:1f:59:7c:c3:75:47:db:83:2a:5a:83:50:85:
51:1e:b7:a9:26:dc:09:03:20:ff:04:f1:72:b6:c1:52:c3:7f:
34:42:a5:4f:51:65:7d:a2:31:9a:f0:75:90:f9:b9:67:12:bd:
4c:ab:e1:ed:60:9d:5e:61:5a:75:cb:79:46:06:6c:e7:db:e9:
7c:01:82:ca:1b:c8:a6:d2:df:7f:82:93:07:35:0e:a3:62:7c:
7a:6f:8b:fe:3a:c3:3e:e3:f7:83:02:76:2f:3d:a5:ee:08:2a:
80:53:97:71:02:a4:11:8c:d3:ac:f2:c9:d0:f9:54:44:89:bf:
a0:0c:ea:00:73:7f:7d:34:04:29:8d:7b:45:47:58:42:a1:e7:
b5:cc:b0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:52 2025 by rpki-client