Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E446708F67A11EFBF382BA2762E951A.roa
File: 9E446708F67A11EFBF382BA2762E951A.roa (raw, json)
Hash identifier: ViYKDCy6owATIoAiPUoZqlco7PQ3Qis67444BsHpM3Q=
Subject key identifier: 70:70:32:BF:5C:D7:C3:B8:B6:94:E6:5C:FA:C1:44:BD:33:5A:34:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016D72
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E446708F67A11EFBF382BA2762E951A.roa
Signing time: Sat 01 Mar 2025 08:53:17 +0000
ROA not before: Sat 01 Mar 2025 08:53:14 +0000
ROA not after: Wed 30 Apr 2025 08:53:14 +0000
asID: 138915
IP address blocks: 154.93.84.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93554 (0x16d72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 1 08:53:14 2025 GMT
Not After : Apr 30 08:53:14 2025 GMT
Subject: CN=67c2cafd-c381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:67:23:a9:82:86:cc:e9:a7:dd:5f:25:4c:
14:cd:92:2c:7a:d5:7b:02:01:33:39:a0:5c:97:55:
51:a4:d4:f9:5f:ba:d1:ee:36:4e:77:1c:f0:cb:ec:
02:f9:c2:91:a0:fd:39:a6:78:3c:49:00:62:93:7c:
b2:83:31:f6:0a:01:87:e2:61:c6:b9:b1:ff:99:68:
7f:26:bc:00:48:b2:6d:14:cb:59:c1:cf:5a:5c:99:
53:91:c1:77:47:51:27:a0:b9:1c:70:59:da:13:aa:
ae:47:33:92:88:1f:aa:da:64:80:55:21:65:55:82:
a1:2d:4c:49:cc:cf:26:a6:b6:4d:11:8b:b5:5d:93:
1b:05:c5:8b:20:cf:b8:56:3c:a4:a6:b0:9b:66:ad:
69:e1:f2:cc:8e:86:1a:d6:eb:bd:04:27:d0:c6:b9:
88:8b:22:87:0a:60:06:71:16:f9:8d:5e:e5:d4:ea:
cd:c9:69:23:cb:e2:82:72:ec:21:59:3d:e1:47:f6:
cc:9b:09:14:89:93:c7:16:cf:24:17:2d:55:7f:e9:
b4:a1:8a:7d:4e:34:f8:ff:e0:73:96:c0:86:3a:8b:
92:c0:6b:78:fe:d4:f2:9e:d5:8b:ac:c6:0a:75:80:
88:d9:72:8d:8b:bd:7c:cf:21:ce:8e:dd:1e:4c:29:
d1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:70:32:BF:5C:D7:C3:B8:B6:94:E6:5C:FA:C1:44:BD:33:5A:34:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E446708F67A11EFBF382BA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.84.0/23
Signature Algorithm: sha256WithRSAEncryption
54:ae:47:90:2d:d9:b4:00:5d:4d:b3:26:f5:b8:16:5f:2c:cd:
bb:87:a1:1d:3b:f5:e3:ce:93:a9:2c:01:ba:4e:98:93:ea:d8:
e3:8e:6a:46:a8:2c:8a:6d:b2:d0:fe:60:c4:45:9f:6d:82:e9:
52:63:3f:fd:b3:98:69:ac:23:cf:b0:b6:b9:81:63:ce:86:93:
a6:78:36:f0:6f:e6:8f:76:02:44:93:3b:43:fd:b8:09:dc:b6:
8a:16:ca:9f:a2:ec:39:73:8a:65:d9:4d:cb:4e:a0:e2:36:04:
08:19:0d:1d:9c:da:39:c9:b9:fb:86:a7:9c:b3:78:75:5e:c8:
b7:d0:6b:b7:cc:cd:31:ca:a1:1e:73:35:d3:c1:d1:34:f4:ee:
e3:79:4d:15:49:56:63:8b:ea:89:d7:e0:dd:65:bb:df:3b:24:
8f:57:02:57:3f:99:5d:4c:bb:23:7d:f0:da:bb:15:97:84:2f:
dd:b6:4c:22:c0:53:52:38:2c:59:c4:3c:e2:3d:f0:30:91:04:
e2:c9:53:34:d3:0c:1d:f7:25:bb:49:36:bb:1b:94:13:5a:c4:
cf:f6:bc:5b:a9:40:1e:65:f8:5c:0d:e2:d2:09:d0:ee:9d:73:
15:6b:aa:01:8d:b6:09:6a:e0:ac:b4:8e:71:cf:7a:83:ca:2f:
db:8b:4a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:56 2025 by rpki-client