Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5C8F2F8DAF611EF9393AFBD762E951A.roa
File: B5C8F2F8DAF611EF9393AFBD762E951A.roa (raw, json)
Hash identifier: 9/eRfO1rCHfkAQV1LUIGJ011DG+T7L90fOlfS7AaA6I=
Subject key identifier: C0:FF:0F:C9:75:78:43:D4:BE:FB:B9:51:DA:D7:DF:7F:A1:76:94:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5C8F2F8DAF611EF9393AFBD762E951A.roa
Signing time: Sat 25 Jan 2025 08:31:02 +0000
ROA not before: Sat 25 Jan 2025 08:30:58 +0000
ROA not after: Sun 30 Mar 2025 08:30:58 +0000
asID: 63139
IP address blocks: 154.94.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84217 (0x148f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 08:30:58 2025 GMT
Not After : Mar 30 08:30:58 2025 GMT
Subject: CN=6794a146-309e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:be:3b:28:bd:01:5f:1b:a8:22:a4:e7:4e:
f5:10:3a:e9:01:d6:fd:26:af:03:d6:84:c3:a5:eb:
89:22:26:3f:44:50:2f:d1:66:00:4d:a0:07:eb:3a:
48:d2:c6:bb:68:43:8d:3c:c5:06:c8:ec:2c:eb:d1:
17:eb:b1:b5:0a:46:6e:c3:61:f4:69:3d:7d:31:4f:
75:f1:08:54:d2:21:19:e2:09:38:14:45:3c:4f:27:
2b:3e:ce:5d:3b:cf:f8:f8:62:21:0b:f4:ae:39:c9:
fe:57:2d:8c:f2:61:84:b9:97:0e:d9:45:e1:f7:31:
f5:3a:38:3b:06:7c:45:6f:0a:1e:0d:3b:74:17:68:
ca:47:52:00:25:bb:1e:9c:16:c3:8f:24:0f:53:f2:
cf:57:1d:eb:98:82:1d:18:89:dc:e5:1e:0a:cc:5b:
a6:2a:46:bf:71:74:75:52:45:a8:98:73:86:83:35:
aa:34:68:54:a5:b2:98:83:ce:3f:8f:64:b2:f1:e6:
62:64:0d:98:c9:6a:db:33:69:b3:fb:20:95:ed:82:
4c:4b:b7:e5:94:21:d8:db:58:71:9e:f8:9c:96:2a:
5e:86:60:fb:a8:52:8f:20:09:f9:9b:17:5c:43:fa:
6d:13:d9:a1:e9:23:f3:fb:0b:7e:a6:c0:da:3f:be:
d3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FF:0F:C9:75:78:43:D4:BE:FB:B9:51:DA:D7:DF:7F:A1:76:94:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5C8F2F8DAF611EF9393AFBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.103.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b6:72:cf:c1:27:03:29:af:1c:2a:30:e8:ef:85:01:b7:00:
64:28:8f:33:1f:d2:00:7d:25:00:b3:c2:b1:0a:c9:35:cb:1c:
1e:d6:79:69:47:f4:24:21:86:a3:3e:01:6a:c1:8e:15:0f:66:
a7:d1:36:8c:5a:b1:a0:9d:d2:f3:72:84:52:48:e1:47:15:f3:
b9:76:70:84:b4:5e:fd:dc:b3:9d:c7:6f:45:00:0e:f4:15:1f:
b1:57:0e:7c:6a:f4:19:4d:4d:79:06:b0:ff:b9:d7:de:eb:86:
a4:da:66:7d:1e:a0:87:b2:51:88:5a:c0:08:bb:b5:e0:ac:1f:
bf:46:ca:6e:07:90:de:e3:46:8d:49:cc:18:18:16:c6:05:2d:
07:90:24:13:21:f2:11:c9:ab:ef:32:83:38:b0:27:43:20:07:
24:6e:1b:08:7d:e2:99:a2:e0:ae:0d:19:23:09:ee:dd:32:ac:
b4:cb:c2:58:a5:e4:f9:31:b2:e5:45:f6:07:fe:d0:af:d2:aa:
ed:ff:3c:03:26:92:7e:b2:bf:32:5f:3c:5a:8d:61:d8:f9:6b:
bc:9a:eb:a0:31:64:1e:3d:5e:37:49:63:92:8b:78:ed:75:7c:
6b:da:5f:fc:e0:99:02:c9:fc:fb:0d:16:d0:fe:36:b5:7b:41:
a9:73:4f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:56:56 2025 by rpki-client