Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D964A032F2BF11EF92CB1E82762E951A.roa
File: D964A032F2BF11EF92CB1E82762E951A.roa (raw, json)
Hash identifier: y4WSfzRSx+fShDZs+8mIZhAyolDEo7RHSD+EKkk5Xyc=
Subject key identifier: D6:50:91:DA:B4:40:D5:59:1F:02:87:10:65:07:2E:51:28:99:25:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015C3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D964A032F2BF11EF92CB1E82762E951A.roa
Signing time: Mon 24 Feb 2025 14:58:47 +0000
ROA not before: Mon 24 Feb 2025 14:58:43 +0000
ROA not after: Sat 29 Mar 2025 14:58:43 +0000
asID: 203020
IP address blocks: 154.223.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89150 (0x15c3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 14:58:43 2025 GMT
Not After : Mar 29 14:58:43 2025 GMT
Subject: CN=67bc8927-63b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:51:cf:f9:b0:4f:b9:b3:4a:15:5f:d3:de:5a:
40:35:34:0c:bf:dc:81:36:fa:a3:78:dd:08:a8:63:
92:6d:bd:65:b8:f0:f0:82:cd:33:11:2f:7d:a6:05:
63:e7:0d:d7:8a:0a:80:c0:13:95:64:5d:fa:64:49:
05:47:13:4e:d1:17:f7:1e:af:99:24:a8:4b:3c:01:
13:0a:fb:d1:7c:07:ed:43:ba:dc:1f:83:49:f9:50:
fd:f5:59:6f:76:d8:96:8a:b6:b6:6b:6c:d5:24:a0:
87:ab:3e:e9:db:bc:ef:6d:3f:7b:9a:42:b4:fa:95:
df:fb:b3:19:24:ff:e0:59:f2:68:38:4a:c2:8d:a5:
1d:3b:a1:95:63:ea:55:76:90:99:3f:db:c8:42:47:
0e:d6:2a:d1:7d:9e:77:fd:36:a6:30:a7:7e:43:08:
c2:4d:5d:f6:48:23:11:d6:f9:d4:f5:b4:2d:e6:1b:
5d:b3:7f:9c:e3:b9:fb:59:38:2e:c1:66:80:42:05:
e2:5c:db:85:60:bc:dd:9f:d9:77:ee:3d:e2:96:77:
e3:96:dc:01:c8:ea:ef:47:87:46:9c:ff:44:04:cb:
53:8b:2d:70:de:3f:eb:6b:23:f8:3d:e4:fb:72:00:
cd:c9:18:c7:5a:d3:97:9f:09:b1:10:76:e1:a3:99:
cc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:50:91:DA:B4:40:D5:59:1F:02:87:10:65:07:2E:51:28:99:25:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D964A032F2BF11EF92CB1E82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.162.0/24
Signature Algorithm: sha256WithRSAEncryption
30:7d:22:12:85:80:03:5f:aa:b8:16:7b:fd:ce:e5:b1:b0:9b:
e0:ad:1a:e8:50:98:86:9a:e1:4f:f4:ac:b8:ea:90:9f:67:6e:
06:58:8b:d6:25:95:61:54:fa:e1:3d:7a:46:72:a3:c0:c0:63:
87:6b:b8:ef:e0:f7:ae:27:3f:9c:bd:17:e4:d6:52:ee:8a:bc:
64:fd:af:14:6b:ab:bf:52:8f:6e:19:65:23:69:7d:62:84:28:
23:fe:49:56:95:96:b2:9d:eb:58:fd:35:65:c7:98:7b:48:63:
41:c1:76:ca:a9:cc:95:14:1d:ca:cd:ce:fb:8f:cb:15:fb:0e:
da:b6:13:0d:ab:9a:aa:c9:89:32:b2:b6:73:fb:82:d4:2b:ac:
48:30:d0:b1:b3:10:3d:20:ac:60:a7:9d:45:9f:30:42:12:6f:
18:5e:b0:35:6b:7b:16:35:d4:ea:90:72:e5:77:48:9e:b7:18:
43:0a:90:30:08:1d:09:9c:3a:c2:30:36:92:6f:47:3a:95:84:
57:02:7b:72:ab:80:f0:69:d1:b9:ca:97:b3:e6:f4:1b:6c:b1:
0a:4d:0e:dd:56:ba:16:40:af:f7:1f:ab:2d:51:82:b6:53:c0:
03:ad:bf:a4:1b:aa:e9:05:0f:ad:f9:a4:19:2f:56:fe:73:42:
0f:43:cf:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:01:46 2025 by rpki-client