Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4CC0B30F82011EF85316E53762E951A.roa
File: D4CC0B30F82011EF85316E53762E951A.roa (raw, json)
Hash identifier: R5R+YTf0vPWpyzpwYv2JAkoaUYvoOE9+eA9+qU4+fkI=
Subject key identifier: 64:E7:70:2E:2A:E8:FC:19:FF:C2:38:89:AE:EF:8B:87:14:1B:29:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017063
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4CC0B30F82011EF85316E53762E951A.roa
Signing time: Mon 03 Mar 2025 11:15:37 +0000
ROA not before: Mon 03 Mar 2025 11:15:32 +0000
ROA not after: Wed 30 Apr 2025 11:15:32 +0000
asID: 63139
IP address blocks: 154.93.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94307 (0x17063)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 11:15:32 2025 GMT
Not After : Apr 30 11:15:32 2025 GMT
Subject: CN=67c58f58-a92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:32:ac:3f:44:20:37:de:25:4c:db:20:61:
4b:72:d0:60:18:7a:bd:a7:42:da:c0:a5:9a:e5:47:
e6:d3:60:74:72:30:e0:f6:00:62:ae:bb:2b:6b:23:
81:e0:59:ba:3c:72:cc:ed:ef:40:ea:b5:7e:9f:32:
7f:de:b2:c4:f7:97:ce:13:da:b2:19:29:5d:a2:7e:
25:48:d1:83:40:ce:90:06:f5:55:67:88:92:f7:91:
75:0f:d3:e7:6a:e9:15:e6:71:46:8e:3b:7a:72:8d:
98:ac:08:74:0e:7a:e8:6d:25:a3:21:3e:42:d8:cb:
be:cc:2e:24:51:7d:32:b5:8f:89:c2:0d:77:6b:6a:
74:37:e9:07:1b:92:c4:63:af:11:07:08:fe:33:93:
36:97:06:1b:ef:81:67:d1:9e:96:c8:41:67:5c:96:
aa:b7:dd:af:a9:6f:73:33:e0:c0:8a:5f:eb:b1:58:
b9:39:82:0b:65:0a:5b:c9:21:de:7d:c9:d2:3d:8d:
ac:d9:e7:31:db:cb:d6:60:32:b2:03:e8:d1:f8:29:
25:46:82:93:32:98:25:f2:09:f0:68:c0:20:53:f0:
1d:32:61:3f:b3:78:00:6f:6c:08:1c:ee:4b:0c:e1:
a2:3e:22:bb:5d:40:a3:2a:de:2d:18:c6:ca:ec:ad:
18:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E7:70:2E:2A:E8:FC:19:FF:C2:38:89:AE:EF:8B:87:14:1B:29:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4CC0B30F82011EF85316E53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.69.0/24
Signature Algorithm: sha256WithRSAEncryption
be:f4:80:a9:03:0c:d0:60:bf:b4:f1:85:08:81:a1:8c:90:f7:
e6:07:d5:38:a5:46:88:3a:37:61:33:7d:d6:33:df:5b:3e:d2:
6c:ec:ef:3c:83:16:af:23:01:46:79:08:46:95:f7:64:c0:17:
9b:dc:e9:12:18:0a:52:3e:e8:1d:c4:ba:df:04:74:5f:70:1a:
f8:05:b8:45:a9:ab:43:de:7e:ec:5b:a3:96:cc:c5:3b:23:3e:
6e:8f:5d:f2:20:0d:94:75:b9:a3:e9:da:87:44:3a:ad:1d:53:
2e:af:53:4d:b7:61:a4:19:33:1e:e3:65:77:88:60:07:93:ab:
2d:11:e7:27:e2:c7:65:5a:a3:4b:15:f0:aa:81:91:8a:96:9d:
db:f7:8f:e4:c4:a2:0d:7e:8b:0c:75:58:54:8d:39:13:dc:05:
f3:60:91:b4:3b:8d:b2:7a:1e:49:94:49:15:2b:d9:6a:d2:ce:
10:44:2a:b9:6f:f3:0d:55:70:5c:80:d8:d7:f4:61:0b:b6:ad:
2d:07:eb:43:64:90:4f:54:61:ad:70:d3:04:d2:b0:af:15:29:
86:00:5d:98:52:d3:8c:99:26:0f:5b:a8:38:8b:bc:79:b0:4b:
ac:a0:1f:be:59:a7:cc:45:3a:cc:fc:fe:c0:03:6d:ab:38:c8:
79:86:e1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:15 2025 by rpki-client