Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F91EC16AFFE811EF9902EF5F762E951A.roa
File: F91EC16AFFE811EF9902EF5F762E951A.roa (raw, json)
Hash identifier: lQRXc57SJBh/csMw1ebAJyjo0nnYj0b6byAm3v2FmGo=
Subject key identifier: 9D:0A:F2:51:0E:64:E2:B6:C9:BA:CA:79:46:BE:89:2B:70:09:01:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017429
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F91EC16AFFE811EF9902EF5F762E951A.roa
Signing time: Thu 13 Mar 2025 08:55:55 +0000
ROA not before: Thu 13 Mar 2025 08:55:51 +0000
ROA not after: Thu 12 Jun 2025 08:55:51 +0000
asID: 398478
IP address blocks: 154.92.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95273 (0x17429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 13 08:55:51 2025 GMT
Not After : Jun 12 08:55:51 2025 GMT
Subject: CN=67d29d9b-81c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:c6:99:41:30:4a:cc:43:c9:f7:1a:5c:fe:
f9:65:8d:b0:4d:21:e5:bc:52:81:99:99:51:6d:33:
80:d1:27:42:da:26:cc:08:e5:7d:70:35:7a:61:a5:
61:a9:67:5c:5b:7a:10:c0:61:4f:b0:1b:0d:76:ef:
a9:da:6d:05:f7:85:bc:db:cc:04:1c:91:a8:75:e1:
5b:da:f9:46:82:1e:c0:66:fc:b3:c7:4e:fb:0f:ea:
9b:09:0a:aa:26:5d:02:5d:61:13:3f:8f:59:fa:48:
59:dd:c6:38:67:cc:07:e4:a7:a4:b4:7e:84:dc:25:
e7:9b:ce:df:5d:16:84:87:5f:6c:24:99:b0:63:90:
4e:6b:b6:a4:07:35:00:09:7e:91:a9:f8:50:82:cb:
19:b1:5a:0a:25:1f:70:48:49:6d:df:65:7c:2e:17:
db:9a:cf:2b:c6:2d:2f:70:5f:0b:f9:6b:60:fe:8d:
36:51:20:5b:a5:95:04:37:be:8a:bd:c3:ba:67:f6:
8c:5b:cc:57:3c:ed:71:76:a7:31:20:2d:88:bb:30:
eb:96:5e:33:f8:cb:a1:7c:b0:77:cf:2a:e4:fc:c0:
72:77:ec:92:6a:96:d4:7f:a4:ee:32:9a:13:67:c8:
70:f8:8f:4b:93:a0:88:61:15:ec:af:57:09:8d:43:
1f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0A:F2:51:0E:64:E2:B6:C9:BA:CA:79:46:BE:89:2B:70:09:01:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F91EC16AFFE811EF9902EF5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.176.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:c3:12:2c:de:1d:d4:9e:30:0a:9e:f1:e9:a0:d8:db:52:97:
c8:54:18:1f:ee:b3:c9:50:34:5e:7f:78:bd:20:7b:29:b7:49:
ca:d8:7d:8f:2d:e9:30:3b:de:5d:9e:d0:fb:ed:bf:b4:ea:2a:
8a:7c:fa:ad:d8:fc:5d:ec:4e:67:7f:75:2c:9d:54:4f:ed:bd:
e2:26:b6:51:f4:ad:da:30:cb:f6:be:85:f0:b7:7a:a8:ff:49:
70:2e:3f:49:c2:ba:9a:f7:86:cf:6f:69:d8:b8:99:a0:ef:61:
ec:c9:8e:7c:d2:73:88:57:5c:82:b2:60:dc:ff:93:09:68:39:
be:81:50:2d:ad:ea:7a:9e:5a:07:fe:96:fe:8d:2e:20:be:e3:
32:61:b9:f9:66:86:0d:68:39:91:6d:18:b0:60:c3:4e:6d:66:
5f:97:88:b4:c2:82:2e:61:5c:a5:56:a8:b6:74:a2:b1:9b:4e:
c3:9e:e9:00:c0:01:d4:2c:8f:39:8c:49:29:76:6d:ba:f7:79:
39:e5:93:15:0b:2a:c3:1a:5d:29:40:57:00:7e:d3:15:f3:ae:
6d:b8:94:1b:c5:3e:8f:8d:52:56:6f:aa:85:f4:74:42:fa:2e:
6e:03:48:82:7c:ad:b1:62:e9:5c:ea:74:7b:e9:d9:0c:9c:7d:
5a:62:f8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:46:32 2025 by rpki-client