Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB49DA84F2E211EFB834B46D762E951A.roa
File: DB49DA84F2E211EFB834B46D762E951A.roa (raw, json)
Hash identifier: nQsaDUrBrPP/cbUpNYUGgCK1EEuuLh1+wRykyJxGs98=
Subject key identifier: ED:17:DF:DC:3C:A1:C6:9F:EA:5E:1A:BC:30:47:14:9D:84:AC:FA:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015CD8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB49DA84F2E211EFB834B46D762E951A.roa
Signing time: Mon 24 Feb 2025 19:09:23 +0000
ROA not before: Mon 24 Feb 2025 19:09:19 +0000
ROA not after: Mon 07 Apr 2025 19:09:19 +0000
asID: 138915
IP address blocks: 154.223.40.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89304 (0x15cd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 19:09:19 2025 GMT
Not After : Apr 7 19:09:19 2025 GMT
Subject: CN=67bcc3e3-c0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:7d:07:ba:e0:3c:13:20:38:45:1e:ac:5f:
9d:a1:f6:1f:58:16:f8:be:49:12:b7:82:0a:6a:8b:
ac:8d:ed:7c:84:03:89:8f:5b:7c:c1:ad:0c:87:df:
db:42:c0:0c:c3:16:46:b5:69:49:2d:99:93:86:b4:
d8:f5:0e:b8:fc:1b:69:a5:1a:34:87:84:94:b7:d3:
a5:05:27:2d:04:4d:c7:7e:45:b1:b0:e5:37:aa:70:
6d:a9:ae:76:df:a8:35:9e:cd:3f:33:95:37:a6:ef:
75:68:b8:60:ec:70:9d:22:17:0e:50:b7:74:9d:70:
d5:56:44:9b:b0:a1:97:5c:9f:98:2a:71:78:4c:8f:
26:81:bc:70:02:a2:d9:8b:21:e6:6e:58:2e:c0:e4:
72:10:54:dd:e7:32:9e:6d:31:11:7d:d4:00:e0:18:
dc:53:3f:d1:78:92:f3:31:e9:17:3f:9d:e1:a1:25:
22:bd:8d:e6:a9:47:c1:a8:6b:15:37:8c:4d:d0:46:
a1:98:0c:42:fb:59:56:77:35:c6:f9:50:f4:1d:7f:
0f:c4:91:e3:d0:94:e7:28:56:23:73:ca:4e:4c:bb:
8c:6c:1e:9a:27:c5:57:0a:37:02:54:d8:69:97:6d:
1c:8a:f8:b8:47:e0:47:c6:c2:b9:fe:f6:98:1b:58:
35:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:17:DF:DC:3C:A1:C6:9F:EA:5E:1A:BC:30:47:14:9D:84:AC:FA:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB49DA84F2E211EFB834B46D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.40.0/23
Signature Algorithm: sha256WithRSAEncryption
14:0d:91:cb:3f:ef:1a:03:e3:69:61:a5:eb:7e:01:a7:a2:74:
8e:6f:8d:7f:1f:f9:42:da:e6:61:2b:fb:90:df:06:6b:1a:d1:
0c:16:76:e4:99:cb:9d:f7:9f:9a:43:9f:c7:cd:04:ec:03:04:
05:dc:12:9c:45:ef:88:03:03:94:fe:34:5d:1b:bc:bb:0b:2f:
f4:20:b5:77:25:25:e6:42:9c:2f:26:31:86:7b:1f:a7:86:04:
de:72:2e:e0:03:7d:3f:b8:84:67:5a:2d:ae:5e:6a:30:68:9c:
ac:0f:42:5e:f4:50:07:1c:30:93:0c:a0:6e:07:72:0a:69:aa:
a6:49:9a:72:56:77:6d:04:57:41:c3:b1:19:97:58:76:f4:7e:
e9:64:4a:dc:31:6f:c0:fa:ec:2c:fc:36:9a:68:92:c7:dd:92:
82:33:64:c0:a3:c3:2a:26:1e:5d:9d:74:99:95:62:84:4a:82:
77:ab:67:66:c6:5d:51:0d:d2:7a:50:9b:7e:9b:9b:dc:ff:60:
86:20:9b:96:37:33:41:90:5f:07:95:19:d9:77:2d:03:95:a5:
a2:96:b4:f6:e7:c1:83:86:13:c9:85:bf:85:22:b8:e7:75:1d:
59:db:78:6b:0c:34:9c:97:ef:12:b8:a5:87:70:17:62:e7:b6:
3f:51:88:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:57 2025 by rpki-client