Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4B8B39CC93911EFB96254A8762E951A.roa
File: E4B8B39CC93911EFB96254A8762E951A.roa (raw, json)
Hash identifier: Goz4dOoXN1N48EMWQD1XEwe7Pwq1K++ufX04x98HrnE=
Subject key identifier: CD:86:61:DB:6E:BA:EB:89:64:97:09:0A:11:3C:97:4F:5D:92:04:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0133F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4B8B39CC93911EFB96254A8762E951A.roa
Signing time: Thu 02 Jan 2025 18:46:36 +0000
ROA not before: Thu 02 Jan 2025 18:46:32 +0000
ROA not after: Mon 13 Dec 2027 18:46:32 +0000
asID: 17561
IP address blocks: 154.223.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78833 (0x133f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 18:46:32 2025 GMT
Not After : Dec 13 18:46:32 2027 GMT
Subject: CN=6776df0c-1f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:14:40:77:66:74:df:dd:f1:86:15:a5:de:
c5:17:6b:6d:b3:14:51:15:42:dd:e3:e9:e2:e7:b4:
36:d1:d4:d8:c8:5d:2c:6b:cc:8c:ad:5d:5c:22:7c:
b9:56:d6:d6:fb:00:bb:dc:b6:5c:1b:21:aa:62:0d:
7d:34:c1:69:c0:6e:7c:36:80:5b:e0:0a:0a:9b:b3:
1f:89:8b:88:69:94:a8:e6:ce:10:68:0c:db:24:f1:
42:a6:49:17:b5:63:59:b3:4f:c7:b3:76:7c:f1:8e:
ea:2a:03:ca:49:46:f0:dd:70:34:e5:6b:35:ce:d8:
b7:07:c9:cf:f1:27:7f:8d:60:e6:24:72:e3:8e:9f:
39:c6:41:f6:00:87:7f:c3:7a:2f:2b:aa:bb:90:5b:
c9:61:5f:fc:4e:83:25:4d:c9:64:f1:e6:fb:cd:da:
b7:26:cf:72:c0:02:b6:ae:7a:e5:51:da:d9:42:78:
45:45:49:c4:7e:0c:07:09:76:b7:10:06:69:ee:7c:
3b:26:b5:b8:39:46:70:2b:95:16:b4:e0:d5:30:ac:
be:e5:4a:65:e5:65:13:43:fe:ee:1c:16:77:ec:68:
09:40:e0:5d:0c:93:93:12:ab:68:70:35:88:ba:3d:
9b:10:6c:d8:1e:6a:18:9f:fc:d4:61:73:78:2b:45:
d6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:86:61:DB:6E:BA:EB:89:64:97:09:0A:11:3C:97:4F:5D:92:04:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4B8B39CC93911EFB96254A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.167.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d3:62:cb:e0:27:f2:dc:80:37:5f:24:b3:21:b4:80:ce:70:
9b:56:c0:82:1e:ca:44:73:7b:1c:a2:27:1b:09:77:d4:b9:cd:
75:53:0c:bc:cf:62:d6:53:99:9f:69:5b:a3:58:68:5b:c5:b7:
58:b7:18:f6:63:d4:23:dd:be:21:f7:23:b7:75:fb:5f:5b:68:
70:ed:f9:5d:37:59:95:cb:95:e4:97:f6:5d:74:dd:03:24:e9:
84:41:0a:60:5e:d8:57:54:fc:39:c7:aa:d6:dc:51:e4:4e:d5:
07:30:9f:52:84:91:2d:cc:48:69:4e:27:20:79:08:e5:3a:8a:
bb:32:c2:0f:f7:4e:d2:9d:99:aa:fc:c5:c4:60:1b:a7:da:21:
4f:7f:ce:30:25:5e:cd:d7:8e:c1:5b:67:19:d8:d7:b7:4b:9a:
d0:60:b2:a1:71:85:ef:7d:35:c6:38:16:bc:81:7c:44:e4:d4:
b9:8c:e5:9a:8c:69:66:f9:23:16:3f:ad:05:4d:48:94:61:05:
fa:83:72:ab:18:aa:27:2f:ad:51:74:e8:90:2c:6a:e8:fd:18:
bc:3a:a7:1c:d9:14:a6:64:a6:4b:a7:37:30:93:2d:7f:66:f2:
08:33:f7:20:3a:8b:53:db:83:13:4b:c6:b1:5b:1f:3e:ad:26:
d7:7e:81:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:36:20 2025 by rpki-client