Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8167CEAF80E11EF9250505B762E951A.roa
File: F8167CEAF80E11EF9250505B762E951A.roa (raw, json)
Hash identifier: yuIrrgooqvRz20cCoEuhBO1KAvUIJG26qkZB7joWx9I=
Subject key identifier: 51:6C:20:8B:EE:E6:DF:81:47:7C:E8:B3:AF:16:7B:E0:BC:05:F1:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8167CEAF80E11EF9250505B762E951A.roa
Signing time: Mon 03 Mar 2025 09:07:45 +0000
ROA not before: Mon 03 Mar 2025 09:07:41 +0000
ROA not after: Wed 30 Apr 2025 09:07:41 +0000
asID: 63139
IP address blocks: 154.94.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94120 (0x16fa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 09:07:41 2025 GMT
Not After : Apr 30 09:07:41 2025 GMT
Subject: CN=67c57161-488b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:cc:cd:e5:74:f9:9e:d4:54:75:d9:b4:fa:
24:ee:d1:e0:1e:0f:4a:4a:c9:48:e9:b3:c7:2a:21:
74:1b:c5:45:a3:26:cb:ab:21:6d:ea:af:3a:4d:05:
a7:98:0f:9c:9c:80:af:0a:fe:e0:58:5a:0f:6b:5f:
28:38:17:fc:db:07:d1:ec:b4:41:01:73:1a:e7:d9:
e9:72:cb:a9:04:c4:1d:e9:5c:8c:5a:56:90:78:65:
d5:92:7e:84:e8:dd:c6:6d:ab:1f:38:1e:60:7a:c5:
7c:d5:c5:50:c1:ff:52:27:24:e8:5b:91:56:4a:91:
7a:84:c2:b3:53:7d:1c:bf:fb:35:9b:74:7e:f9:97:
11:52:5b:3d:83:27:6c:9a:90:61:07:ea:01:ac:a7:
a5:a9:d5:a7:f8:a3:96:67:b9:f3:71:a9:db:79:be:
58:26:f7:29:38:ac:86:b0:28:92:f4:18:42:ee:f9:
d2:f8:07:41:10:b4:be:3e:91:11:e8:19:7f:9a:d4:
c1:56:5a:0b:72:de:c1:c5:4a:cc:ea:08:08:0d:15:
d7:4b:8e:6b:e6:25:bf:7f:15:e6:30:df:cc:9f:ff:
13:c7:3d:6c:49:95:6b:57:5c:db:90:9b:f4:4d:ba:
c1:8a:5f:2b:04:d6:7e:fd:ee:aa:df:cf:19:a5:86:
fb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6C:20:8B:EE:E6:DF:81:47:7C:E8:B3:AF:16:7B:E0:BC:05:F1:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8167CEAF80E11EF9250505B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.102.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c2:c9:27:87:bd:2b:4e:17:d3:ba:c2:6f:9d:65:0b:2a:93:
89:2a:6f:89:04:69:d9:52:62:5a:2e:06:6a:9f:68:ba:57:0e:
c0:0e:0b:7b:4d:46:0e:10:3d:64:07:b0:44:1b:db:67:35:0d:
dd:25:49:5f:9f:6f:1a:14:70:f0:cf:4a:8e:6d:ac:77:99:a6:
7e:f6:ec:ff:5a:96:f9:d8:86:ad:30:18:36:5f:00:9a:b2:61:
24:bf:d2:11:9c:06:51:e2:75:16:6e:4c:07:4e:b2:00:94:32:
54:4e:9f:4b:66:eb:d8:37:b4:a6:21:98:be:bb:2f:c4:1f:2f:
0b:4f:d7:3b:fc:67:c2:27:7a:0b:f7:44:6b:22:84:41:db:db:
5f:f4:61:32:95:ef:47:f3:19:24:0d:a5:0b:06:81:ac:f7:f5:
fd:b2:53:6d:07:9a:07:c7:4c:cb:5a:bd:e0:a4:03:69:ec:eb:
eb:b5:23:be:41:cd:69:6a:bd:28:74:6b:6b:1c:4d:fd:21:f4:
ba:a2:e5:cf:c3:75:6e:d0:2a:3b:e4:aa:44:2d:6f:b3:af:7e:
65:bf:f8:6f:bd:6c:b3:08:51:73:24:eb:64:4f:b4:c7:57:3b:
68:6b:4e:82:01:68:db:6f:27:40:36:9f:4b:60:df:3f:75:a3:
3f:7d:9d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:50:06 2025 by rpki-client