Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBD4B34CF81611EFBE27D48E762E951A.roa
File: CBD4B34CF81611EFBE27D48E762E951A.roa (raw, json)
Hash identifier: 4dzVvUenqptlHOxVrXM/iyFZyfrzIgHiYp83vmkRdmc=
Subject key identifier: 70:94:BF:B3:7E:FF:39:1A:C9:DE:89:81:25:1D:9F:8F:42:C8:6A:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBD4B34CF81611EFBE27D48E762E951A.roa
Signing time: Mon 03 Mar 2025 10:03:47 +0000
ROA not before: Mon 03 Mar 2025 10:03:42 +0000
ROA not after: Wed 30 Apr 2025 10:03:42 +0000
asID: 63139
IP address blocks: 154.94.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94188 (0x16fec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 10:03:42 2025 GMT
Not After : Apr 30 10:03:42 2025 GMT
Subject: CN=67c57e82-e8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:14:fc:49:50:53:60:08:d1:21:04:a1:05:33:
26:33:d2:b8:9e:8a:bb:c6:e8:2f:69:e4:83:66:90:
42:30:b3:19:ed:13:63:23:35:1b:bc:34:05:30:32:
e4:f1:ae:7b:16:db:4e:d3:f5:07:13:2d:f1:bc:24:
6a:47:31:05:5c:58:1d:e8:4b:24:a7:fc:3e:db:e4:
ba:ef:91:37:e1:b7:1c:2c:47:2d:09:92:da:44:36:
31:dd:14:22:d1:ce:7c:83:ae:28:f0:f8:0e:07:d3:
8a:ab:8b:16:48:8e:e8:b4:d9:a9:69:79:8c:ef:43:
58:5e:ee:55:af:e7:e0:50:7f:8f:9a:8d:e3:4d:1c:
f0:46:f9:37:11:fa:10:b5:0b:2d:ef:c1:22:ab:83:
22:4d:8e:4f:ad:b4:84:15:32:88:39:f8:14:c0:6e:
c4:91:f7:5d:21:26:29:b1:a4:cd:d3:a5:40:29:b6:
33:e5:a2:cd:ae:ab:9c:73:48:92:44:b0:61:12:23:
40:60:b4:81:19:f9:f7:cb:86:bb:96:71:b0:25:0c:
2c:bb:ea:04:bd:39:76:b6:da:b1:3f:73:1d:0c:5a:
58:79:35:af:6a:8d:e0:50:b9:73:d1:15:05:53:7f:
92:94:ef:3c:b7:f1:2e:4e:0e:43:6f:1c:b4:da:b3:
94:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:94:BF:B3:7E:FF:39:1A:C9:DE:89:81:25:1D:9F:8F:42:C8:6A:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBD4B34CF81611EFBE27D48E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.121.0/24
Signature Algorithm: sha256WithRSAEncryption
08:d6:a9:2f:31:65:dc:62:a6:84:5c:7c:4d:2c:15:cf:fb:92:
e5:4d:c2:fc:0d:c3:4d:18:af:45:fd:b4:4b:0e:69:5b:e9:b9:
f0:c9:01:85:d7:5e:34:4b:6f:2e:dd:f3:e8:4e:2e:3d:92:40:
e5:00:93:32:06:c1:79:d9:36:bd:41:15:e6:72:7f:ea:33:a3:
49:d8:91:16:8a:d4:01:71:01:46:39:b7:30:dd:da:72:e2:88:
6d:4b:2a:51:d2:d6:90:d0:40:34:22:d5:be:e1:46:ec:45:24:
be:7f:e3:a5:8a:39:27:6e:c7:b4:2d:00:53:c1:70:d8:8b:ec:
c7:42:85:b8:2f:65:ca:46:e5:e6:02:36:b9:5b:2c:b8:02:73:
cb:14:19:fa:4e:57:60:9f:ca:50:08:4e:33:9d:78:ef:34:70:
17:04:92:ef:df:ae:3f:5f:71:66:c8:d2:f4:61:1e:13:07:c4:
94:ef:91:2f:7d:55:62:a6:0d:97:ed:68:c3:1f:11:d4:41:c5:
fb:10:43:b3:29:15:73:78:97:6c:3d:3f:4b:e0:31:be:19:99:
65:6c:b5:ab:47:2a:18:42:bf:ee:da:db:96:71:58:59:91:74:
33:ce:61:08:9a:0c:a8:b5:5d:03:4e:59:3c:db:4e:af:b4:ac:
31:07:b0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:55 2025 by rpki-client