Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A42FBCE4C93911EF831CE0A7762E951A.roa
File: A42FBCE4C93911EF831CE0A7762E951A.roa (raw, json)
Hash identifier: IvbZhWT7+TcK09BIKRJ9OALTcPZ81bTLPOusM+eXzrE=
Subject key identifier: 9A:F7:5A:9F:F9:60:B7:09:5D:31:42:59:91:8F:38:5A:4F:5D:6C:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A42FBCE4C93911EF831CE0A7762E951A.roa
Signing time: Thu 02 Jan 2025 18:44:48 +0000
ROA not before: Thu 02 Jan 2025 18:44:44 +0000
ROA not after: Mon 13 Dec 2027 18:44:44 +0000
asID: 17561
IP address blocks: 154.223.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78831 (0x133ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:44:44 2025 GMT
Not After : Dec 13 18:44:44 2027 GMT
Subject: CN=6776dea0-017d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:95:9e:f2:65:e1:59:df:1e:e1:8e:bb:00:
fc:00:66:7b:f8:84:f8:3e:3b:6a:a4:d1:eb:44:ff:
ca:68:89:c9:73:03:2b:af:5e:0f:7e:09:e5:8d:4d:
2a:8b:69:04:d8:0d:64:56:76:a7:b2:9b:39:3d:c2:
5a:86:e8:c9:4f:8f:0a:df:22:0c:97:0a:68:fc:d0:
d0:40:ba:ae:6a:a0:a4:8e:b2:71:98:91:06:be:55:
41:f3:86:ec:f1:2c:47:4a:14:03:7e:3e:8e:66:b9:
9c:c3:fa:9e:11:0b:1d:cd:59:b9:20:7f:d3:5f:59:
4d:9c:09:5a:af:81:f7:e1:d6:53:4f:8d:aa:d6:67:
cd:f2:13:63:3f:ff:5b:07:34:d8:a1:5a:fc:34:4e:
a6:76:2e:43:36:14:68:7e:12:1f:ef:94:dd:e0:18:
55:1e:14:99:5a:a4:1b:8c:06:3d:5a:b1:2a:ae:3b:
16:3f:c9:d9:14:6c:7b:7b:98:54:34:6e:e7:eb:a6:
ac:24:2e:c6:58:25:c9:7c:2b:d1:6a:fd:8b:43:1c:
c9:9d:0b:fd:ee:c9:4b:ad:84:ed:a5:19:8a:5e:30:
ed:bf:41:55:77:69:c8:5c:3b:64:ca:17:df:d3:fd:
12:fb:be:4d:27:56:7c:fe:d8:86:aa:6e:a6:9a:bf:
11:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F7:5A:9F:F9:60:B7:09:5D:31:42:59:91:8F:38:5A:4F:5D:6C:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A42FBCE4C93911EF831CE0A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.166.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:12:68:a2:19:94:59:81:b7:63:d9:03:c0:9f:c0:87:6f:10:
15:7b:3b:e2:fb:c2:1c:ad:40:b3:07:60:11:c2:63:90:7c:b0:
40:c6:6b:c3:34:47:69:34:70:61:b1:15:f7:e0:f8:96:e9:89:
88:a4:51:a2:d6:b3:14:9a:62:6d:aa:38:27:03:b5:d6:a6:8f:
c6:e7:d6:fc:dc:b9:6f:2d:06:7d:a4:3f:f1:5b:a4:06:84:55:
00:6c:5b:24:97:5a:fa:21:d3:b2:0f:f7:73:58:d0:a3:3e:e2:
48:09:a2:d8:2e:35:a8:2f:1a:ac:2f:23:c3:d4:b8:22:3c:b1:
c6:d6:6f:11:2e:95:ca:db:e2:a2:81:d0:dd:45:f4:f9:ff:5e:
ce:82:39:f3:f8:43:6d:06:42:0a:a3:08:9d:bc:1b:09:57:26:
1c:8e:5d:e5:95:28:9d:eb:83:db:3b:d0:63:6a:e5:f7:3b:8e:
13:4e:9c:34:ed:60:b4:d6:27:44:56:26:ac:ae:0e:7b:d6:78:
72:eb:8c:b6:86:7a:69:b9:06:fb:66:39:70:30:a9:55:4d:85:
39:f6:6e:fb:6c:ce:24:2b:72:c2:63:9f:69:99:22:04:ae:ef:
6e:b1:b4:33:1c:13:71:38:eb:23:a8:4f:c7:69:30:8c:10:c9:
c6:ce:2f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:06:21 2025 by rpki-client