Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA733EB6CF5E11EFAB9A2E4B762E951A.roa
File: AA733EB6CF5E11EFAB9A2E4B762E951A.roa (raw, json)
Hash identifier: 5ahW/1RbDoQ5y7vsLyRKt43QKQR9UIY8iP5mwbRHsXA=
Subject key identifier: 92:74:97:ED:74:41:12:55:CA:F5:5A:45:05:4F:60:A5:1C:1B:5F:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA733EB6CF5E11EFAB9A2E4B762E951A.roa
Signing time: Fri 10 Jan 2025 14:24:56 +0000
ROA not before: Fri 10 Jan 2025 14:24:53 +0000
ROA not after: Fri 12 Dec 2025 14:24:53 +0000
asID: 984
IP address blocks: 154.81.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80379 (0x139fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 14:24:53 2025 GMT
Not After : Dec 12 14:24:53 2025 GMT
Subject: CN=67812db8-690a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:a0:33:93:f2:ce:ab:0e:8f:48:a1:e4:c3:
f2:6d:2d:e9:28:fa:a4:19:b8:8d:b4:b6:1a:1b:11:
e6:50:99:17:89:c2:37:5a:19:77:0e:78:64:06:40:
92:e2:ca:23:f9:35:51:8b:2f:e8:13:d6:fb:dd:ab:
53:b9:b6:65:f1:ff:f2:83:4f:91:5a:cf:27:65:ed:
ae:ed:fe:7e:5c:76:57:e6:e0:03:51:27:ee:bb:c3:
a1:f1:e6:9a:f3:86:96:16:57:44:a8:60:ae:15:5c:
07:4e:e7:ef:06:fc:9f:63:62:13:07:60:34:a7:fc:
f3:98:ad:18:d4:34:1f:2d:30:8b:71:f0:56:3b:99:
09:46:8e:47:be:62:32:58:ba:69:ab:1b:c5:31:36:
59:5c:55:68:03:17:0a:d2:31:87:c5:6c:6d:f2:d9:
56:38:c9:be:a1:9a:23:a4:72:57:15:c0:00:7f:84:
27:1b:43:60:4d:0a:b0:9b:a2:cb:b0:f5:b8:36:20:
91:73:9a:c4:d1:6e:f3:1f:0f:be:d4:a2:f2:a4:1d:
9a:bc:15:37:6b:da:f8:21:3f:88:45:42:dc:14:de:
e6:13:18:60:a7:9c:0a:ad:7e:b9:f5:74:63:3c:b2:
fb:f3:37:a4:73:2e:4e:d2:6b:c1:4c:b3:2d:d3:6b:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:74:97:ED:74:41:12:55:CA:F5:5A:45:05:4F:60:A5:1C:1B:5F:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA733EB6CF5E11EFAB9A2E4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:62:11:db:00:ad:e2:eb:a8:04:4b:c2:e4:b1:b6:8a:95:15:
ea:05:0c:25:78:8c:9d:36:44:92:d1:e5:d4:dc:23:ae:e5:61:
e7:8a:23:c0:d9:98:77:37:02:7d:14:e5:9f:5a:07:9b:4d:0e:
5d:4d:a1:de:7f:c4:d5:dc:a0:46:ef:57:b6:81:0c:73:a9:41:
71:40:15:1a:56:a9:ce:39:62:e2:93:13:5f:c4:75:1a:4f:1f:
e7:4f:63:6c:96:81:2b:e7:26:9a:6d:05:f3:a0:98:3d:20:35:
fd:5b:91:61:e7:cc:aa:db:94:d5:c4:41:02:06:21:35:2f:32:
a0:f4:90:78:07:c9:4e:5a:a2:4d:c3:10:65:a4:14:ec:78:7a:
47:56:bb:0c:83:9e:98:ef:89:01:d2:70:b2:a7:47:ba:23:b8:
54:24:0a:2c:1a:6d:c7:14:f3:d2:b3:c2:ed:a8:c0:86:ef:2b:
07:66:da:cc:6d:57:9d:48:b4:5b:65:54:c6:a2:0c:6a:86:41:
49:65:f8:af:9a:e0:c1:23:f0:26:f5:a7:e6:f1:e6:54:fd:f9:
54:f2:2b:3c:97:ba:2b:40:75:2a:8d:2d:0e:7d:ca:f2:90:b8:
f5:0f:f9:41:33:29:22:c8:e3:ef:44:06:9a:1b:50:68:b5:a9:
ce:d8:a1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:06 2025 by rpki-client