Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B41AA3DEF2DE11EF9453F551762E951A.roa
File: B41AA3DEF2DE11EF9453F551762E951A.roa (raw, json)
Hash identifier: WG7NhUmunjkvDCjSykg2Jumr8rQdUE7T1zaw4A8h/LE=
Subject key identifier: F8:21:44:F8:08:87:23:6C:52:DD:7A:15:34:76:4A:29:DB:D5:6B:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015CA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B41AA3DEF2DE11EF9453F551762E951A.roa
Signing time: Mon 24 Feb 2025 18:39:39 +0000
ROA not before: Mon 24 Feb 2025 18:39:35 +0000
ROA not after: Mon 07 Apr 2025 18:39:35 +0000
asID: 138915
IP address blocks: 154.223.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89256 (0x15ca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 18:39:35 2025 GMT
Not After : Apr 7 18:39:35 2025 GMT
Subject: CN=67bcbceb-6dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:fc:54:c9:47:cb:45:91:63:8e:07:e1:6d:
0e:30:3b:58:a3:6a:4d:a2:d7:5f:76:6a:99:3c:fe:
c6:a9:7c:f3:06:d7:53:a7:23:f0:d3:38:b8:6c:a2:
6f:f7:17:68:55:43:b2:f2:98:a7:57:fb:d3:a8:aa:
6b:05:56:1f:33:8d:6d:1b:b0:53:27:38:78:84:90:
ac:d4:8e:0b:46:d0:ec:73:98:cf:c3:8d:23:fb:13:
45:17:28:eb:00:7c:7f:54:0b:dd:f8:7e:8f:36:e2:
d2:a7:78:66:0d:6f:f3:bb:e7:27:c5:ae:4c:fb:d8:
c3:5f:fa:5c:85:d3:bf:34:99:4d:6b:86:e8:1f:7b:
e9:b9:3e:9a:90:bb:99:2c:ad:3a:c9:25:2e:53:ab:
24:2e:08:eb:d4:82:78:b1:84:fd:0b:9d:bb:8c:cb:
21:1d:76:9b:54:7b:5b:74:2c:dd:96:13:19:22:a4:
67:4b:96:61:98:0c:8a:00:d4:4d:7a:53:c1:5b:90:
9e:e8:da:b4:bf:6b:30:7f:41:3d:ba:0f:91:f3:ec:
77:7a:57:85:08:54:51:0b:33:1d:28:15:c1:47:e6:
58:55:53:6c:c0:92:4d:87:71:33:2f:d1:0d:8b:cf:
8d:d1:95:1b:c3:18:db:98:7a:78:00:9e:38:29:b0:
bd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:21:44:F8:08:87:23:6C:52:DD:7A:15:34:76:4A:29:DB:D5:6B:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B41AA3DEF2DE11EF9453F551762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.62.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:ef:68:b9:63:65:68:96:9c:9d:10:17:cb:51:b3:f9:19:10:
42:12:8e:7d:f8:67:16:01:b1:c5:fe:04:35:59:c5:a0:ae:5a:
0f:5b:e5:3d:d7:bf:aa:11:58:97:38:a3:1e:df:b1:b7:3f:43:
6c:2d:1a:0f:14:0b:02:59:c3:66:1a:d1:9b:a2:3b:f3:78:f7:
bc:ca:f3:60:1a:ba:40:bd:45:2b:13:70:bc:3b:14:bc:00:cb:
a9:76:fd:d0:c7:11:5d:cc:6e:f2:eb:3f:0e:0d:56:80:41:12:
89:ef:1d:a8:51:2e:6a:7b:80:61:e1:b0:c0:c9:d3:9a:e6:74:
db:ef:4f:18:ff:b3:24:3d:3e:cf:23:30:cd:a5:c1:8d:4c:ca:
18:bb:c3:1f:a9:c2:03:4c:a3:5a:00:9f:81:e2:c7:21:d4:51:
bf:1d:e5:b9:55:9b:7c:86:d5:8e:80:df:c3:d7:e5:cc:22:90:
f4:1b:d4:7c:bd:8b:b9:dc:49:97:8b:0f:22:eb:21:78:2b:12:
30:67:51:b4:31:d9:d3:0d:fa:ce:d8:7b:a8:7f:81:05:68:b8:
9b:1d:82:9a:6b:5b:a5:72:2e:52:8b:36:ae:e7:27:3d:94:a0:
f3:96:2f:b8:09:01:3e:d2:e6:e9:fb:40:6e:14:93:93:78:50:
00:e1:a1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:55 2025 by rpki-client