Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F468AA8D98F11EF8CA03EBE762E951A.roa
File: 9F468AA8D98F11EF8CA03EBE762E951A.roa (raw, json)
Hash identifier: GPq3+Zjqm7Xy+tfEYw0HLf2MDa6y/2a+98e5Y4ZCo8c=
Subject key identifier: CB:43:12:BC:4F:DA:B0:9A:07:69:4E:AF:70:19:2B:3F:89:29:CF:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014282
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F468AA8D98F11EF8CA03EBE762E951A.roa
Signing time: Thu 23 Jan 2025 13:40:35 +0000
ROA not before: Thu 23 Jan 2025 13:40:31 +0000
ROA not after: Tue 13 May 2025 13:40:31 +0000
asID: 138915
IP address blocks: 154.205.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82562 (0x14282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 23 13:40:31 2025 GMT
Not After : May 13 13:40:31 2025 GMT
Subject: CN=679246d3-f32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:56:6c:7c:3a:e8:25:95:74:6d:93:56:fd:
cb:02:c4:2e:9a:7e:7c:a7:18:7b:d7:19:61:b0:d9:
ee:aa:6f:48:11:47:ab:3f:e6:af:22:c7:07:64:4f:
a9:26:2f:90:b6:9c:87:3f:69:f1:58:2d:6c:9d:1e:
04:2d:07:37:71:97:bc:d6:a0:f9:ab:f1:a3:33:47:
0e:a7:69:ec:48:d4:b9:08:b9:c0:fc:03:0b:b8:e9:
ce:88:ed:24:f7:6d:0a:d3:4c:9e:c6:e4:74:f3:6f:
37:54:e2:34:97:bc:ee:d5:48:86:7c:79:a9:d3:84:
41:9b:51:64:f2:9f:f9:3a:11:b8:2a:d7:cd:17:6c:
a3:3c:0c:79:07:9c:d5:a5:d4:63:06:f5:4e:fc:7a:
71:43:b7:36:ec:b7:7c:e0:36:33:c6:a4:ce:b4:2b:
d5:f7:92:b5:ea:a9:95:a3:45:e6:e3:67:8c:f8:fb:
d3:3e:26:8a:31:1a:41:a3:4d:66:16:70:4c:5e:1a:
16:02:ad:06:fb:2f:0f:c2:4c:cd:7f:f7:f1:fc:3c:
6c:d1:b6:77:9a:0b:d3:35:9c:77:ae:ab:6f:69:17:
4b:d6:10:a7:ff:f2:9c:9c:8b:fe:bf:61:8a:7d:81:
9c:d1:11:af:ca:2e:56:e9:68:0e:5d:a7:0d:63:30:
53:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:43:12:BC:4F:DA:B0:9A:07:69:4E:AF:70:19:2B:3F:89:29:CF:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F468AA8D98F11EF8CA03EBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.154.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:8a:c2:a1:a1:75:b0:bf:e5:51:5b:07:a8:99:49:df:14:25:
69:d8:22:cd:b3:df:0c:c1:f4:ca:ad:a5:83:9a:4b:1a:27:ce:
b2:25:60:56:17:82:9f:04:c4:75:17:a1:9e:46:b4:8f:17:fe:
ef:17:0f:b3:74:dd:32:e2:14:95:da:b2:e8:0c:aa:d5:a4:47:
9f:2a:f7:49:5c:45:7e:06:a9:5a:c2:5b:4e:9a:30:3e:9a:09:
0f:ac:81:83:b1:0f:0d:55:85:c7:8b:a0:6b:21:19:eb:4c:24:
c8:49:56:a8:9b:f6:fc:fa:0e:5e:05:93:05:ec:9a:c4:59:e8:
25:eb:90:27:07:f2:24:15:6b:86:4a:e8:13:1b:94:4b:c4:22:
51:34:a5:7e:4f:9e:11:68:21:29:05:78:66:52:16:4d:67:d4:
c4:56:53:5a:bd:64:c2:b2:ff:49:fd:db:a2:9e:1c:25:11:36:
c3:aa:5a:6d:db:05:24:96:7e:51:95:1e:de:2b:25:b7:41:bb:
36:8b:4c:d7:51:26:f5:61:79:06:05:80:c2:fd:f9:7b:4b:e5:
dd:09:f7:cd:4d:50:d0:ef:80:ee:c2:8a:52:30:11:8d:21:e7:
39:81:4f:a9:4e:d1:70:28:f7:8b:0a:c0:cf:52:b8:9d:ef:b1:
58:b1:3f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:47 2025 by rpki-client