Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D75E7DD4F2CF11EF8221E56D762E951A.roa
File: D75E7DD4F2CF11EF8221E56D762E951A.roa (raw, json)
Hash identifier: +9CraDfCToR/Bz6I4FAmr6jWiVgj3l64+pCl46oTHqY=
Subject key identifier: C6:43:60:CD:85:17:31:C4:83:71:F8:74:DB:F1:07:AB:FC:5E:52:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D75E7DD4F2CF11EF8221E56D762E951A.roa
Signing time: Mon 24 Feb 2025 16:53:16 +0000
ROA not before: Mon 24 Feb 2025 16:53:12 +0000
ROA not after: Sat 29 Mar 2025 16:53:12 +0000
asID: 203020
IP address blocks: 154.223.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89222 (0x15c86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 16:53:12 2025 GMT
Not After : Mar 29 16:53:12 2025 GMT
Subject: CN=67bca3fc-49e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:3d:31:d0:7b:e6:ce:04:28:b3:4f:0d:98:
fa:e1:f0:cb:72:0b:dc:e7:39:f0:83:b9:ee:b8:d2:
c2:c5:9a:e4:f7:80:27:cc:ec:fc:80:d0:45:77:38:
d1:d4:bd:15:c9:69:13:02:c6:b7:c5:ed:b6:af:23:
e4:a4:57:39:85:90:a8:57:1c:5b:82:ea:7b:88:be:
09:40:00:3f:4f:d4:68:09:32:7e:25:d2:65:ac:7e:
9a:7b:f3:25:c7:65:6a:7a:c8:46:80:3d:9e:f2:bc:
ab:84:90:22:3c:6a:82:c4:56:fa:b7:6a:f7:d0:81:
39:2a:b9:b9:1d:fb:0e:a8:a1:f0:07:50:67:63:50:
40:c7:d2:22:e1:cf:2a:95:4f:c0:57:ac:a9:b7:ff:
b6:90:9e:d3:a1:f9:c7:ea:b6:5b:63:4e:1f:08:c6:
30:e1:34:1e:40:06:ea:ae:60:7a:e6:1a:ad:67:17:
01:30:5e:0b:71:36:42:e9:76:73:b0:6f:83:13:ad:
3d:15:ab:2a:80:62:11:e4:7b:be:fb:fa:ca:0c:9e:
a7:17:a1:b7:1f:25:66:d7:e6:26:88:47:73:86:19:
7f:9f:60:c8:32:5d:2e:5a:cc:2d:1f:44:46:21:d9:
17:9e:94:ca:bc:05:2d:bd:53:68:6a:4d:13:f0:19:
04:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:43:60:CD:85:17:31:C4:83:71:F8:74:DB:F1:07:AB:FC:5E:52:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D75E7DD4F2CF11EF8221E56D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.161.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:4e:9d:19:e2:65:41:e3:ba:c0:7c:1a:a3:8d:73:87:4e:55:
5b:ce:49:6d:0e:2c:36:c9:95:c5:fa:f8:7f:c9:bd:c6:53:4c:
75:53:28:4a:96:ad:aa:2d:ee:f3:ab:20:d8:b1:ca:20:8c:e3:
10:54:8f:1a:d7:e4:c7:10:d0:84:15:1e:33:fe:50:16:46:63:
ee:a7:57:c3:1e:cd:c1:a8:a9:8f:0a:18:8c:36:9b:3a:a6:0c:
4a:5f:00:46:f8:12:08:67:35:8d:c2:57:2c:0d:63:ee:aa:93:
55:12:20:68:5b:ce:68:f4:28:41:eb:dd:f3:ae:08:a0:79:2b:
8b:73:ba:54:e9:31:38:c5:33:36:13:35:c7:c6:f7:d0:66:bf:
2b:b3:77:9d:f3:f8:79:c6:08:1b:47:de:39:04:35:2d:bf:1e:
8e:01:9d:23:9e:fb:bd:3e:2e:a7:c7:8c:c8:d8:8b:66:f0:08:
9e:ac:34:eb:63:02:7b:64:c4:23:00:a2:12:7a:55:59:e3:ba:
05:43:16:70:67:45:7d:f4:1d:fd:93:e5:9f:44:0b:ab:a5:66:
c7:ea:87:62:df:f6:35:d4:7f:7a:89:aa:0f:d6:3a:cc:fb:f8:
8f:7c:69:1d:77:52:59:35:04:b4:93:dd:69:ae:a4:e6:7b:2e:
26:a3:09:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:06:40 2025 by rpki-client