Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE6181BEDC0E11EF9A56BC98762E951A.roa
File: BE6181BEDC0E11EF9A56BC98762E951A.roa (raw, json)
Hash identifier: ydo26cDV5JE5Mfw+O7iORC0TwVzGKAaI4vJNx96EheI=
Subject key identifier: 1F:6F:3B:BD:52:45:D0:9A:F2:03:52:1D:5E:4F:09:13:44:98:94:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B38
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE6181BEDC0E11EF9A56BC98762E951A.roa
Signing time: Sun 26 Jan 2025 17:55:35 +0000
ROA not before: Sun 26 Jan 2025 17:55:32 +0000
ROA not after: Tue 01 Apr 2025 17:55:32 +0000
asID: 63139
IP address blocks: 154.94.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84792 (0x14b38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 17:55:32 2025 GMT
Not After : Apr 1 17:55:32 2025 GMT
Subject: CN=67967717-9ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:85:0a:73:67:f2:a2:82:bd:93:86:69:87:
70:1e:21:d7:e3:6e:26:94:6f:e1:c7:e9:08:05:b0:
22:b5:8c:14:46:0f:32:53:47:88:30:96:74:0c:5f:
6a:83:6e:77:9e:52:79:e5:f9:76:64:ea:25:13:94:
3c:7a:83:a4:25:4c:d0:b0:a8:4b:e9:06:69:82:3f:
92:34:06:16:80:3f:2f:39:7c:2e:f9:19:ef:56:a8:
d8:79:4c:e1:0c:d0:61:e8:8e:6c:d9:40:11:39:c0:
bf:d6:5b:92:31:75:5f:2b:04:e5:17:3b:d9:84:12:
bb:8c:e8:f5:ec:46:82:86:f6:d7:04:f4:93:6c:f9:
ec:65:d2:e6:ff:bb:3e:43:ca:6d:98:b6:70:1f:fb:
2b:5c:6a:97:6f:22:63:27:ce:07:5c:0b:c4:b9:ca:
6f:dc:43:32:cb:69:af:58:42:83:4b:12:53:aa:44:
92:0b:af:af:87:a0:ba:29:21:b2:eb:64:ac:70:dc:
ed:f8:a9:9c:cd:37:dd:93:35:5d:ad:ae:97:07:03:
3c:ad:e1:b1:13:e4:a4:7d:62:cf:61:b6:af:cb:1e:
e4:cd:e1:a2:36:ae:13:22:37:bf:95:88:f2:c1:23:
50:5e:88:87:06:fe:bb:21:fc:56:cd:f6:f1:1b:c4:
d1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6F:3B:BD:52:45:D0:9A:F2:03:52:1D:5E:4F:09:13:44:98:94:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE6181BEDC0E11EF9A56BC98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.86.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:b4:0c:79:e8:45:82:05:27:27:7e:27:af:c4:f3:22:eb:2f:
80:a6:10:49:3c:07:ee:c4:fe:56:c8:38:98:c3:ed:2b:c3:ba:
a0:f5:be:05:db:01:3a:0d:64:c7:44:57:27:72:60:41:65:24:
d3:ba:b4:45:ee:42:85:c0:96:a4:30:cd:bf:75:c8:cb:09:ed:
c9:37:46:fa:a2:3f:2a:c5:f9:99:30:c8:52:7d:2b:c5:29:93:
31:83:30:17:d9:be:25:a6:26:6c:a7:11:bb:14:52:d6:47:ed:
18:d6:28:1a:16:58:31:c1:bb:16:43:25:2d:93:03:b5:69:33:
c1:d4:12:c8:1a:ff:f2:70:ca:dc:72:3b:8c:6a:c0:fb:31:67:
60:50:bb:00:a0:62:6f:0a:0c:d5:a7:4c:a4:cb:66:96:12:ae:
b4:7e:e5:b8:3f:dd:30:63:b0:7f:5b:05:d7:76:e5:0b:44:a1:
01:32:d8:d0:ef:78:56:da:f3:a0:a6:e2:9f:ff:c0:ae:63:98:
e1:f1:88:a7:e9:29:d4:ad:21:c4:7a:91:09:57:c4:31:54:de:
0f:df:9f:f5:b6:58:d6:35:0d:9c:83:5c:7e:db:a8:d2:81:9d:
cc:69:8e:d3:4e:53:be:3b:b3:75:97:19:5c:93:ff:2c:6d:23:
46:0e:4e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:01:44 2025 by rpki-client