Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD1E097AD8CF11EFA44CBBB3762E951A.roa
File: DD1E097AD8CF11EFA44CBBB3762E951A.roa (raw, json)
Hash identifier: UYcEvRXbEE9LXk+gFc4Bn79rjZmBlbihzoOPOd9laj4=
Subject key identifier: DC:16:94:0F:E4:D7:4B:AB:FC:0E:39:CA:CD:87:5F:B4:FF:29:DF:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FB2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD1E097AD8CF11EFA44CBBB3762E951A.roa
Signing time: Wed 22 Jan 2025 14:47:55 +0000
ROA not before: Wed 22 Jan 2025 14:47:52 +0000
ROA not after: Tue 01 Apr 2025 14:47:52 +0000
asID: 138915
IP address blocks: 154.93.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81842 (0x13fb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 14:47:52 2025 GMT
Not After : Apr 1 14:47:52 2025 GMT
Subject: CN=6791051b-69d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c3:d9:d3:d4:da:92:d5:f8:ad:6f:9e:ba:4f:
52:f6:0d:8f:cd:ff:0b:75:dd:fd:f0:25:43:e6:9e:
ab:a5:ca:65:fc:fb:11:e3:31:f9:74:3a:73:6d:dc:
66:8f:24:27:6b:8b:b9:9e:1c:fa:9a:41:04:8e:3b:
d5:0b:94:6a:ce:0d:c1:e5:89:06:df:17:eb:33:56:
67:f5:a5:38:25:9d:09:67:52:31:30:0a:db:ab:ea:
26:da:f7:52:d0:06:89:37:a7:fa:b1:59:88:e9:d0:
1a:c9:cc:d1:42:af:cb:6a:8a:4b:16:a8:1c:eb:9d:
5b:f0:9d:b7:b0:3d:6b:30:2b:74:73:e7:c0:2f:6f:
07:e4:7f:f9:6a:30:99:f2:56:8d:71:55:3d:81:af:
99:c9:82:f7:34:1d:5d:e8:24:96:32:54:67:36:17:
47:c9:4d:05:96:7b:96:a2:40:62:d5:29:4c:1e:51:
b2:75:11:ed:1c:4f:91:63:3e:83:db:85:c1:1b:3d:
93:c3:64:1f:83:4a:01:a9:29:ed:10:7e:e5:45:34:
4a:d6:fb:5e:c8:d6:5d:42:b6:f6:a3:49:a6:49:f3:
70:56:70:14:d3:8a:db:bb:ab:0f:bd:39:24:af:f0:
a0:e7:f1:d0:b7:6c:ce:f8:fa:fd:4d:c3:15:e2:bc:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:16:94:0F:E4:D7:4B:AB:FC:0E:39:CA:CD:87:5F:B4:FF:29:DF:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD1E097AD8CF11EFA44CBBB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.72.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:c6:10:e7:f8:52:2b:03:19:a6:06:5d:11:52:56:ce:09:cc:
2d:f4:c1:bc:52:7a:28:ae:d2:ec:6c:b5:6b:9a:b0:fc:c6:61:
83:d3:0d:3b:88:ca:d4:f9:68:5d:f8:85:41:77:d5:20:0c:b3:
32:4b:55:25:87:a8:de:81:20:3b:66:b9:12:a9:11:35:c5:5f:
21:dd:ac:a3:e7:f4:38:7b:b6:2c:bb:e4:0a:38:f4:14:02:86:
73:05:5c:e6:87:4a:1a:2b:79:1e:59:43:06:41:dd:22:07:4a:
ed:99:af:d7:2f:38:f3:73:e7:b1:11:38:a9:e0:7c:27:17:d3:
35:9e:c5:ea:e3:02:0b:cc:96:cf:54:97:fb:a1:e0:a8:7b:cc:
fc:e6:e2:13:b4:de:84:e8:a2:a8:a3:bd:63:db:4d:da:9e:43:
69:04:7f:46:68:32:8e:03:a5:01:79:24:fe:c2:cb:6d:0f:3a:
71:5d:be:4b:59:bf:88:d2:85:a5:e0:31:97:78:14:22:b1:54:
ca:8e:14:00:a7:03:b0:5c:3e:0b:07:80:54:29:f1:83:04:48:
5b:a7:52:8f:7b:ec:d8:79:47:7f:4f:dc:a8:2f:86:99:cb:57:
00:01:60:d4:f5:c4:77:ee:5e:8b:97:ed:b8:8b:c5:8b:a5:e9:
27:c6:d1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:04:32 2025 by rpki-client