Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD2CBC64DC0A11EFB4EE527F762E951A.roa
File: AD2CBC64DC0A11EFB4EE527F762E951A.roa (raw, json)
Hash identifier: klzby2+c68z4+fOH+ZlOzNRIbZU1S/tMt1PAq8oq9qU=
Subject key identifier: 8C:9D:8D:76:0D:63:64:37:27:7C:8C:26:AF:57:86:28:54:70:5F:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD2CBC64DC0A11EFB4EE527F762E951A.roa
Signing time: Sun 26 Jan 2025 17:26:29 +0000
ROA not before: Sun 26 Jan 2025 17:26:25 +0000
ROA not after: Tue 01 Apr 2025 17:26:25 +0000
asID: 138915
IP address blocks: 154.93.124.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84766 (0x14b1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 17:26:25 2025 GMT
Not After : Apr 1 17:26:25 2025 GMT
Subject: CN=67967044-0282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:47:0f:0f:f7:f4:bf:ef:f8:bf:36:9f:7e:10:
17:3d:5d:01:95:2a:bc:c3:fe:5f:96:ef:bf:ed:53:
f4:ef:6d:87:34:3b:26:29:05:ce:4c:ca:1f:32:ff:
01:ae:81:c6:b3:7d:54:a7:78:50:db:a5:f9:57:5d:
65:cc:1e:0a:b1:d0:15:a5:5b:87:38:70:48:00:6a:
c2:0c:f9:cb:1a:91:6f:e4:83:b4:c5:1b:bc:9b:6b:
d0:ac:d4:54:f4:b6:31:c5:1c:92:3a:da:34:fa:cb:
fa:1a:f7:45:f5:26:13:57:8e:aa:e5:d1:a4:02:a2:
ca:ec:a0:c1:6b:85:14:64:f7:a1:13:e8:1f:a5:c4:
de:d9:3e:ff:0c:eb:1d:82:8e:47:4f:5e:f6:b8:d3:
e6:6c:5e:21:56:b3:fa:ac:a5:5b:d3:07:39:1d:6c:
e6:65:e3:c9:4b:66:1a:35:ea:e6:7c:bf:06:d4:6a:
cb:a2:db:70:c1:af:cc:02:0b:91:fb:58:9f:58:55:
54:48:07:76:f4:0e:ea:46:0e:ec:6a:e4:f2:79:87:
3b:1c:ac:d1:05:82:ae:c6:1e:7c:a2:bc:5f:c6:a9:
51:ce:28:51:49:2e:b1:6a:ef:ea:31:bc:dc:d7:85:
30:fd:15:d4:a7:53:a0:5d:ba:cc:d8:6a:92:82:17:
38:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9D:8D:76:0D:63:64:37:27:7C:8C:26:AF:57:86:28:54:70:5F:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD2CBC64DC0A11EFB4EE527F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.124.0/23
Signature Algorithm: sha256WithRSAEncryption
36:cb:03:b9:c4:da:b6:ed:4d:c3:d7:32:d3:0b:23:8e:d4:37:
8b:5f:e3:1f:47:98:cd:bd:5b:ca:68:29:bc:26:1a:c3:3b:4d:
9e:5f:76:8e:43:85:93:fb:e5:c7:db:c7:c9:07:5c:c1:28:11:
c2:31:ee:cc:e2:ce:86:ae:95:18:be:59:f6:06:b5:20:5e:a8:
b1:d9:ca:27:f3:4b:7e:ae:2e:61:5f:cc:2c:d8:7c:39:09:ed:
09:77:f1:57:e0:32:3d:d0:40:38:82:b0:7f:1e:5c:0a:49:a8:
03:f1:0f:ec:7d:1c:e7:6f:0a:04:8d:23:7f:8f:db:ba:31:1e:
df:f9:03:47:0c:06:f2:90:8f:a3:cc:7c:28:9d:3d:4a:7b:b7:
3d:3f:7a:5c:93:dc:53:13:af:8b:20:97:da:8f:0d:26:bb:22:
87:44:ea:4d:b2:50:4c:d4:66:c3:70:9e:29:9e:88:13:b9:56:
2f:eb:8d:5f:95:2e:51:22:97:28:90:ad:78:85:59:fe:d2:a4:
44:4f:f2:0e:de:94:2f:4e:b3:c9:a1:92:4c:6a:48:6a:aa:6a:
c7:e0:77:4b:bb:ed:2e:57:06:ed:0c:03:11:6d:37:e7:88:c4:
9a:e0:7d:95:8a:37:ce:c2:df:d2:49:f3:64:43:27:d9:2e:e9:
25:3f:cc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:17:28 2025 by rpki-client