Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF0FDDB8E06A11EF9AE0F28E762E951A.roa
File: FF0FDDB8E06A11EF9AE0F28E762E951A.roa (raw, json)
Hash identifier: vsoVYvTGJIxLJQjUjUE1f8Cv56eRwtsK35oMYgYek/g=
Subject key identifier: 05:4E:3A:B0:30:DA:F1:B8:AB:48:7B:CD:89:38:CC:24:51:FC:53:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF0FDDB8E06A11EF9AE0F28E762E951A.roa
Signing time: Sat 01 Feb 2025 07:06:02 +0000
ROA not before: Sat 01 Feb 2025 07:05:58 +0000
ROA not after: Thu 01 May 2025 07:05:58 +0000
asID: 328608
IP address blocks: 154.88.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85640 (0x14e88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 1 07:05:58 2025 GMT
Not After : May 1 07:05:58 2025 GMT
Subject: CN=679dc7da-eeaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8d:79:12:c0:21:2e:ff:7e:ef:51:e2:43:58:
e6:b7:27:4f:d0:06:eb:39:4e:9a:e9:39:8d:38:f8:
8c:c3:d4:11:a0:c3:4a:02:be:4e:f6:86:fd:e9:ee:
f5:91:a9:09:a6:b3:b8:ec:fa:4e:86:36:bc:28:ee:
4b:e4:ab:a3:be:00:05:db:b9:59:13:e6:23:c6:32:
7e:4b:84:ff:36:cb:df:85:79:6d:74:22:76:52:60:
1a:3d:3b:fd:c3:4f:20:e2:a1:5d:1d:c4:a3:ba:f5:
7f:bc:d4:aa:7a:92:f8:7f:9b:3c:c3:0a:99:2c:d0:
17:45:3c:f6:d2:ca:35:9f:ba:60:2d:d6:c8:23:17:
42:68:1b:62:a1:37:3a:26:f9:80:df:ab:d4:89:46:
55:97:9f:7a:32:88:a2:75:65:57:0a:73:79:df:98:
9d:57:93:2a:4c:ce:c9:35:d4:4c:18:30:b8:ed:5c:
d7:30:04:df:83:cc:90:29:c1:e0:e9:87:43:d4:03:
2a:14:19:e9:5d:92:55:92:28:ee:6f:9b:e5:b6:53:
3f:22:a5:8a:af:05:b9:51:63:34:63:98:fa:15:d6:
07:94:3b:3f:db:1b:99:b5:94:92:28:68:71:71:fe:
83:64:e6:1f:cd:a7:1a:f8:90:cc:0e:51:8c:d6:4b:
40:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4E:3A:B0:30:DA:F1:B8:AB:48:7B:CD:89:38:CC:24:51:FC:53:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF0FDDB8E06A11EF9AE0F28E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.36.0/22
Signature Algorithm: sha256WithRSAEncryption
94:2e:6b:8c:e2:06:a9:3a:70:b3:1b:28:69:ca:df:b5:46:09:
31:3d:d2:ac:bf:39:a1:4b:eb:ae:61:7d:fc:bb:8d:2a:bb:c1:
3b:f7:01:57:c4:89:23:68:78:87:9b:59:5a:72:4f:e4:ab:88:
4d:73:78:54:02:f0:9e:40:6a:d6:35:4c:f1:f3:6b:04:59:2a:
e8:7b:d8:95:39:a1:90:6d:f1:a7:4d:8c:21:56:91:17:94:0e:
7d:cb:d3:db:79:8b:2c:7c:9a:5b:e3:ae:d6:67:86:4d:db:7f:
e2:b2:fb:42:d0:8d:c8:08:54:9d:61:4d:50:c5:49:07:f5:86:
5c:ba:46:15:53:f7:7c:87:95:c3:7a:f0:fc:49:6b:fa:a3:52:
f9:fe:80:6d:a9:0b:6e:75:cb:4e:1b:a0:16:15:6b:d6:76:8f:
0d:58:a8:19:f4:f6:52:00:96:46:75:d5:51:ff:d3:c0:4f:19:
c0:be:9f:02:a9:12:54:3d:69:4f:a4:b3:c1:39:38:b4:a0:04:
71:60:9b:31:c2:fa:f2:02:de:34:31:9c:bc:dd:aa:dc:3b:2a:
8c:87:75:58:75:4f:79:26:14:79:ed:40:41:1b:c6:5a:42:ac:
4e:ba:76:9c:40:a9:e0:d1:0c:6d:73:29:ad:17:83:b5:94:60:
c3:e0:bc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:45:29 2025 by rpki-client