Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7884A84F82911EFADEDFF8E762E951A.roa
File: C7884A84F82911EFADEDFF8E762E951A.roa (raw, json)
Hash identifier: aZDx8OVIulexOOqGVqsctKHlB8dP25/wFgJwQZ6IZFo=
Subject key identifier: 1E:D5:02:72:C6:CD:45:63:09:95:BB:9B:33:25:C7:69:A9:DA:57:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017090
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7884A84F82911EFADEDFF8E762E951A.roa
Signing time: Mon 03 Mar 2025 12:19:40 +0000
ROA not before: Mon 03 Mar 2025 12:19:36 +0000
ROA not after: Wed 30 Apr 2025 12:19:36 +0000
asID: 138915
IP address blocks: 154.93.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94352 (0x17090)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 12:19:36 2025 GMT
Not After : Apr 30 12:19:36 2025 GMT
Subject: CN=67c59e5c-00e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5d:47:af:0d:0b:db:27:98:0d:c5:f5:c7:ee:
57:b3:cd:1e:50:87:e8:35:bd:71:b2:e2:1e:d7:40:
a8:87:f6:50:f5:4d:c2:4d:b6:f7:6c:df:b3:ba:ac:
3a:98:e9:b2:6a:78:a2:cc:b3:3e:47:47:5d:4b:c0:
5e:36:ec:c6:7b:fb:66:ba:4c:1b:99:f2:c4:2f:41:
1a:bf:7c:7d:c2:21:b8:58:32:9b:b9:ca:ee:0e:fd:
89:1e:d7:15:6a:d1:a0:bd:b6:16:03:d5:4f:d7:72:
d5:4a:07:26:bb:c5:e6:8d:56:d0:1b:64:72:8e:cf:
56:6e:05:24:d5:a1:89:77:c5:f3:57:40:ae:50:d8:
00:01:41:6f:42:72:3c:59:cc:ca:1c:45:b4:10:98:
89:f5:f3:b3:fd:da:36:f1:18:25:ec:49:a7:da:f3:
06:39:82:70:a2:80:07:7a:78:69:52:e1:6e:26:22:
7d:e5:3c:10:af:02:4e:f8:7a:5a:f2:a1:4e:67:0a:
e9:14:31:c0:9c:47:ea:ae:d2:68:5c:1a:ed:f4:c2:
3e:00:72:6c:55:cf:e9:a5:bd:ce:d4:ca:1d:35:7e:
2a:04:63:77:15:ce:d2:83:bf:25:31:5b:c5:91:ea:
ba:83:e4:99:7e:b9:5d:91:78:b3:f7:35:35:c9:c0:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D5:02:72:C6:CD:45:63:09:95:BB:9B:33:25:C7:69:A9:DA:57:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7884A84F82911EFADEDFF8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.99.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:c9:be:0d:73:c4:22:2e:65:c4:48:a8:63:20:10:df:bd:fa:
09:1f:cc:c3:17:bb:fc:e2:9c:d5:0b:04:65:03:1a:1b:f5:3b:
26:3b:99:c3:66:ae:61:bd:6f:09:aa:26:f6:cd:89:5f:15:7b:
b7:71:cb:e0:79:e8:6b:b1:b2:ad:94:70:e2:3c:11:33:c3:de:
b1:91:70:8d:d4:a3:86:57:b1:96:3e:d8:22:6e:6d:63:24:d2:
27:71:fe:b4:31:18:91:61:c0:02:90:15:25:65:8e:91:11:59:
a8:45:5f:b5:19:76:f0:05:5f:22:25:06:de:e0:a6:7b:e9:ce:
ac:7a:a0:07:82:84:8d:41:dc:14:ee:7e:73:15:59:0f:ac:be:
da:4f:75:28:e3:d3:3c:ef:b9:00:d0:ea:8b:f0:cc:10:5b:ba:
52:e2:9a:6d:99:1b:cd:32:bf:a3:fc:24:94:02:d4:d8:82:96:
15:ef:51:21:0e:10:7c:c9:95:d5:b9:f8:7e:9a:78:87:51:b5:
24:7d:af:be:16:52:14:39:82:68:57:53:1f:bc:ce:ab:71:8d:
92:b6:7b:5d:a3:77:da:06:bf:ac:c0:03:8a:5b:9b:86:65:b3:
15:70:a2:e7:2f:62:35:49:33:2c:42:88:b3:5c:3e:5f:9c:d8:
00:e9:13:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:04 2025 by rpki-client