Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E71554CF81E11EFBEF38C43762E951A.roa
File: 9E71554CF81E11EFBEF38C43762E951A.roa (raw, json)
Hash identifier: Nu/L69KweVwT5XJf0Eklv/TWFEbyusCfXBr6jEiemuc=
Subject key identifier: B2:4F:2F:B7:93:D0:D9:7B:90:4E:1C:32:DE:9B:A2:85:55:34:2F:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01704B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E71554CF81E11EFBEF38C43762E951A.roa
Signing time: Mon 03 Mar 2025 10:59:46 +0000
ROA not before: Mon 03 Mar 2025 10:59:42 +0000
ROA not after: Wed 30 Apr 2025 10:59:42 +0000
asID: 63139
IP address blocks: 154.93.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94283 (0x1704b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 10:59:42 2025 GMT
Not After : Apr 30 10:59:42 2025 GMT
Subject: CN=67c58ba2-c1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f0:bf:29:88:b4:1a:43:8b:5a:33:1e:d2:68:
f1:2e:10:60:d5:39:84:e1:4c:c4:1c:15:2d:29:41:
12:75:81:9e:b1:80:42:7f:b1:59:4a:e8:31:d6:ad:
2a:08:2a:40:3b:7c:10:c3:33:85:9c:95:63:f5:68:
9b:6f:cf:25:f1:db:bf:7d:f0:6f:8e:8a:24:7e:69:
90:d3:d2:a5:bc:b9:96:a1:c4:d7:75:c5:ed:bd:c0:
0b:81:fb:e5:fb:b2:91:ed:41:88:af:e0:40:1d:24:
c1:df:bb:b5:fa:20:bb:60:7d:0a:c5:15:d5:25:4c:
58:8d:17:ff:df:b5:50:86:ad:22:94:53:4d:80:9f:
78:c1:e2:05:87:28:6d:c4:ba:d1:3d:4b:fc:29:4a:
29:2c:15:80:ab:36:eb:43:ff:5c:ed:98:03:86:64:
c7:41:c0:b5:05:45:49:f2:18:cd:2c:24:b6:ac:57:
84:ad:9c:3d:52:fd:cd:65:0f:d4:31:48:28:89:7c:
39:7c:2b:88:49:e2:04:d6:0e:90:94:92:7a:0f:d9:
ac:4e:65:5d:df:54:4c:ea:37:ec:16:6a:48:af:9b:
af:3f:a1:40:a1:09:e6:f1:df:01:2f:de:f7:1b:fa:
f0:61:43:f2:f3:8a:e2:f6:7f:84:20:4f:60:74:78:
b3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4F:2F:B7:93:D0:D9:7B:90:4E:1C:32:DE:9B:A2:85:55:34:2F:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E71554CF81E11EFBEF38C43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.75.0/24
Signature Algorithm: sha256WithRSAEncryption
52:91:4d:fe:4f:b0:3c:cb:55:3a:33:89:e5:f1:fb:53:1b:88:
a0:4e:ca:eb:89:00:06:6b:37:88:9a:6e:5a:b5:15:1e:9e:7e:
ff:43:c8:36:8c:56:8b:b4:32:ab:cb:2a:23:b6:be:d6:13:50:
0d:17:a4:34:38:4e:5b:68:b6:ef:18:6e:c3:74:71:03:a7:67:
a8:52:c7:5d:15:91:9f:48:f0:ae:fd:27:80:2f:cb:8e:29:78:
f4:11:49:e6:95:88:7a:3e:6d:7e:eb:e6:d8:07:40:5b:00:6a:
56:ae:3e:31:82:d2:55:d8:3d:3f:c9:0b:f9:21:da:f8:aa:a2:
95:b7:97:2d:10:6a:ac:2c:1d:8c:ec:8b:c8:c2:50:c2:21:05:
fb:d9:50:da:4f:be:c2:e5:64:f9:88:04:a7:70:ca:4e:fc:a0:
b9:db:de:90:e2:52:d6:ba:48:4d:62:96:76:bf:2c:db:b1:25:
a6:82:5f:60:82:32:3f:0a:54:5d:df:e2:fc:4d:f7:ee:03:bc:
fa:c3:2e:ff:d5:79:cb:97:4f:3e:fe:bd:b4:ae:a1:28:33:31:
d5:44:dc:7f:82:63:22:d8:b6:a2:ec:89:65:f8:53:3f:61:98:
c4:a0:08:19:1d:3d:f8:d6:59:31:15:b6:2a:7e:f9:f1:91:aa:
06:41:a4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:21:07 2025 by rpki-client