Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1949E66DC0D11EFBB4AB793762E951A.roa
File: D1949E66DC0D11EFBB4AB793762E951A.roa (raw, json)
Hash identifier: X8gw7UEuH0ubRZ9tYRzWc2PORfdvDhokkawN7Xf2skY=
Subject key identifier: 1A:4E:21:1D:59:12:45:4D:91:EB:36:17:AC:3E:6B:E9:5E:F7:29:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1949E66DC0D11EFBB4AB793762E951A.roa
Signing time: Sun 26 Jan 2025 17:48:58 +0000
ROA not before: Sun 26 Jan 2025 17:48:54 +0000
ROA not after: Tue 01 Apr 2025 17:48:54 +0000
asID: 63139
IP address blocks: 154.94.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84786 (0x14b32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 17:48:54 2025 GMT
Not After : Apr 1 17:48:54 2025 GMT
Subject: CN=6796758a-85d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:d6:7b:8c:84:6f:87:54:e0:b9:31:58:0a:
15:7a:4f:77:53:db:12:36:83:b6:66:10:52:f1:f7:
bd:72:c8:b7:3d:c2:70:e4:75:0c:dd:a7:6c:b7:a5:
44:64:bc:e2:91:23:e0:2b:07:d8:4f:5b:a7:8a:21:
57:46:44:03:3f:3d:53:26:10:23:ed:7a:8e:f2:ad:
09:85:f0:20:dd:97:7c:7f:0b:ec:01:f8:f7:3e:75:
66:69:77:24:5c:5d:20:c8:73:35:04:a8:2f:4f:4b:
d5:25:4a:ef:aa:82:3f:ae:47:9f:60:16:9f:1b:8d:
04:32:aa:b7:37:2f:7a:e3:2c:47:7d:1e:c8:91:a3:
f6:22:a0:47:16:e0:32:2e:98:1e:38:9e:95:26:ba:
c9:0b:9b:a5:b7:4d:43:bb:da:33:95:ef:39:44:4c:
ea:c6:5c:27:31:a7:8f:d7:09:8b:32:5b:39:46:c5:
dd:92:52:ff:d1:18:bc:c9:e4:60:ae:21:96:43:3d:
4d:e2:97:2c:85:b2:11:4b:f2:89:af:5b:38:92:c6:
9e:21:04:22:b7:63:53:02:97:08:5d:d0:d3:e9:d5:
00:8e:5e:de:73:fe:84:f8:7d:1a:fc:93:b3:b1:01:
0a:d8:56:9e:5b:39:7c:b6:41:c9:68:bc:25:db:20:
2a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4E:21:1D:59:12:45:4D:91:EB:36:17:AC:3E:6B:E9:5E:F7:29:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1949E66DC0D11EFBB4AB793762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.83.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:58:80:d2:5f:e8:22:3f:e8:f4:25:c2:0e:4d:e6:a4:99:6c:
ad:f8:dd:ff:6f:71:95:4d:c3:2b:0b:11:ef:f5:5a:af:53:1d:
54:dd:ef:b6:26:22:1e:23:66:ef:48:11:c6:52:b2:1d:72:09:
13:d7:fc:6c:ef:a9:aa:ca:e0:f4:29:cc:a9:3a:e7:d3:61:7d:
c4:75:e1:27:84:67:53:ab:0e:54:cb:65:09:b1:25:17:d1:5c:
2e:0e:8d:2b:cf:20:d0:7c:fc:09:13:db:3b:1a:6f:15:01:6e:
bd:7b:75:29:d2:f7:8c:7f:c9:ae:4e:08:7e:e8:f3:f5:ef:3f:
a6:38:77:2f:1d:38:e2:4e:ff:a0:ee:50:ec:d7:db:07:2f:b2:
45:a7:cc:26:11:5c:15:46:73:53:b6:47:55:d5:b2:1c:e5:aa:
4c:11:00:b4:e8:81:18:90:85:80:a9:a0:e5:55:dc:47:60:05:
1c:24:06:ad:67:33:e8:d4:7d:d7:6f:56:44:c7:11:66:52:38:
ca:45:9e:d6:79:73:9a:68:56:46:30:ac:0a:ea:14:79:6c:9e:
39:4c:2e:94:43:51:3f:13:81:73:3d:d4:aa:00:76:80:f5:06:
6c:b2:50:20:3c:c6:97:b6:63:91:8a:b2:d8:17:52:88:bf:48:
2d:c9:49:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:06:40 2025 by rpki-client