Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E31119ECF47911EF983F275B762E951A.roa
File: E31119ECF47911EF983F275B762E951A.roa (raw, json)
Hash identifier: xMrB6GCpqr/PrpkpPt2Es54WFFzdG3vEmP7DeqUgrmE=
Subject key identifier: 54:BC:B3:B2:C1:F0:43:0D:48:9D:94:8F:D7:24:E1:33:AD:E3:72:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E31119ECF47911EF983F275B762E951A.roa
Signing time: Wed 26 Feb 2025 19:43:01 +0000
ROA not before: Wed 26 Feb 2025 19:42:57 +0000
ROA not after: Sat 19 Feb 2028 19:42:57 +0000
asID: 17561
IP address blocks: 154.94.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91580 (0x165bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:42:57 2025 GMT
Not After : Feb 19 19:42:57 2028 GMT
Subject: CN=67bf6ec5-dd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:b7:ed:a8:65:56:18:e5:2c:d9:92:89:f5:
85:c8:e9:88:6f:fb:5d:6d:3c:6f:c4:cd:e5:77:7b:
27:a0:6f:24:11:52:c5:eb:b0:97:49:b0:be:dd:a7:
5a:30:d6:3e:92:a3:9c:13:b5:42:7c:57:6e:49:16:
95:7b:f4:04:55:6a:c1:b3:04:c5:a6:51:ee:11:b1:
82:63:df:be:da:0b:e1:c8:c2:1e:a3:5b:03:62:ec:
1f:cf:0c:a2:7b:cb:ad:74:a0:26:3c:9f:c2:85:8c:
c9:a2:fb:38:bd:ef:03:5d:55:f7:af:e7:e0:fd:1c:
7a:04:52:62:ee:d9:22:3a:f8:49:36:d2:43:db:5f:
50:5c:01:88:80:a1:d1:96:cf:63:38:bb:3f:eb:e0:
1d:8d:ba:c2:b3:76:07:7c:0c:8b:84:f9:20:90:15:
39:10:49:66:2f:89:1c:16:87:71:0c:ec:ad:85:f3:
96:4c:ee:13:ad:06:bb:e2:d4:aa:d3:ed:06:59:22:
02:ea:7d:0b:2a:71:d5:1a:a9:71:78:10:58:22:8b:
3f:a8:d5:5b:8a:f3:36:72:71:da:d9:fc:ff:2b:6b:
7a:aa:ed:e3:d3:a5:d9:8d:5b:76:36:2c:09:d5:a6:
bc:2e:e6:e0:00:2f:6c:b4:08:af:ef:db:22:7d:95:
d3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BC:B3:B2:C1:F0:43:0D:48:9D:94:8F:D7:24:E1:33:AD:E3:72:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E31119ECF47911EF983F275B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.11.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:21:70:ed:88:38:e0:31:05:8b:a4:b0:5f:43:22:0a:e6:8c:
ee:0d:6b:c5:60:5d:2d:c4:ac:8a:ff:eb:cb:a6:2a:af:b5:e9:
ab:61:3d:c2:34:1b:59:9e:3d:00:78:79:84:6f:87:6e:0e:10:
ec:22:6e:59:4b:bd:da:f5:e1:bf:e8:d9:77:35:14:5b:ce:cd:
2a:78:29:89:54:55:45:6a:2d:43:1d:51:43:e3:f3:5d:d2:43:
02:25:ab:af:cb:5e:85:5e:01:ed:96:e4:97:58:62:ce:c2:d7:
d4:52:5a:5b:35:6f:98:6d:25:5c:bc:8b:2b:3d:66:5e:b7:c6:
2c:cd:e5:f2:4d:25:5b:1f:9d:27:d6:0e:fb:1f:5b:31:1c:3b:
2d:f2:58:fe:75:7f:fe:10:b9:70:93:8b:62:bd:ac:d0:00:34:
1c:1f:dc:f8:e2:56:e5:3a:9f:59:d5:3c:88:43:2a:4d:06:d3:
f7:4e:52:68:5e:60:1c:97:9d:3c:68:26:ea:29:42:d6:db:75:
c5:11:f9:09:fb:74:e5:7f:8c:d9:55:18:c1:a0:c3:41:7b:6a:
20:ed:80:9e:71:57:f1:d3:1d:cc:47:a2:40:b6:ee:8e:f9:6b:
f1:fc:41:8b:64:26:2e:33:34:9f:91:43:83:56:bc:5a:bb:12:
4c:f6:fa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:49 2025 by rpki-client