Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1119D22CDBF011EFAFD5C64C762E951A.roa
File: 1119D22CDBF011EFAFD5C64C762E951A.roa (raw, json)
Hash identifier: eErExiUAACJEdZY9/tyltnGuQjPQK/GWzYCyQiHebLc=
Subject key identifier: 1C:25:C7:A4:D9:64:5E:3B:B0:4F:63:86:A0:BB:9E:85:0B:EE:34:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014ABE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1119D22CDBF011EFAFD5C64C762E951A.roa
Signing time: Sun 26 Jan 2025 14:16:00 +0000
ROA not before: Sun 26 Jan 2025 14:15:55 +0000
ROA not after: Fri 21 Mar 2025 14:15:55 +0000
asID: 138915
IP address blocks: 154.93.42.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84670 (0x14abe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 14:15:55 2025 GMT
Not After : Mar 21 14:15:55 2025 GMT
Subject: CN=679643a0-43fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:87:69:1f:3e:1c:d7:a1:3c:12:71:e6:13:9e:
4e:fe:68:44:58:4f:00:34:c3:17:7a:4b:4c:47:02:
b4:2e:fa:d4:7c:86:ca:9a:e3:fa:21:7d:a9:7a:33:
60:e9:6d:35:d4:6b:e4:75:e5:31:76:0b:77:58:1d:
40:f0:ce:09:70:de:f2:9b:0e:27:5a:56:27:e1:b2:
7d:fd:4a:15:4e:ac:52:d9:e8:1c:3f:8f:0a:cf:70:
45:76:9b:05:3a:47:06:94:57:3b:46:2c:c9:5e:77:
7f:1e:fc:d2:ec:24:b6:4b:3e:d6:4d:56:25:5b:af:
44:c4:0d:bd:43:62:eb:8b:14:5e:05:72:cc:fc:ba:
0a:65:fe:a8:07:69:76:0e:22:a4:5f:10:9a:66:d3:
77:50:d4:bf:99:02:00:cd:fa:db:b8:04:87:35:b2:
77:84:73:38:08:93:9e:d8:85:f3:37:bb:6d:e8:51:
b8:61:de:a5:67:0d:0e:63:5c:7b:0b:07:0b:fa:6e:
89:33:90:ae:be:fc:c3:19:5f:4e:8d:c3:48:42:f3:
dc:c7:f9:e7:23:3e:b3:28:7a:7d:87:d0:12:00:e5:
89:7b:aa:28:bb:91:bb:28:59:08:b8:1c:c5:61:23:
02:41:ce:fa:0a:14:8e:c4:3d:e9:51:e9:cf:00:1e:
6b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:25:C7:A4:D9:64:5E:3B:B0:4F:63:86:A0:BB:9E:85:0B:EE:34:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1119D22CDBF011EFAFD5C64C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.42.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:9e:f9:0d:2f:2c:30:84:0f:38:31:f1:f3:34:a0:53:dd:85:
23:25:28:37:5a:5b:30:4e:b0:ce:6b:0b:9c:75:8a:13:60:e5:
1c:16:f8:6b:77:f7:1f:af:8e:2c:22:31:01:c8:da:b6:8c:70:
89:d7:2c:5b:6e:67:12:fe:32:da:df:51:5b:85:50:29:79:17:
78:9a:22:9e:94:cc:3d:68:cf:3d:ff:ef:bd:b3:9f:04:cf:8b:
bb:4f:19:ec:88:b2:9f:78:f5:fc:e0:80:91:25:3c:ca:43:2e:
a9:af:47:00:72:e4:10:e8:2c:c2:60:4c:03:37:e7:21:b9:4c:
ec:b8:ea:c6:9d:53:78:3b:10:ab:b0:e0:02:04:58:19:e9:66:
ba:54:62:b4:7c:90:bd:5d:74:b4:6a:8a:b9:89:b4:a3:6d:86:
4a:ed:41:ff:0e:0c:b5:46:4a:49:0e:48:28:f9:bd:08:7e:84:
54:7f:a0:e7:e8:ac:be:0c:61:b6:83:67:1e:66:04:17:7d:ad:
dd:67:75:a2:0a:a1:bf:d2:97:9e:fd:c5:ec:9b:35:a6:a3:d2:
71:9f:00:0b:27:f5:5c:a4:ce:56:33:08:fc:d9:9a:28:a8:be:
20:19:9d:0a:85:d3:ee:a7:df:dc:c1:d4:f7:2b:8a:4d:36:c6:
c9:d0:ea:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:47:52 2025 by rpki-client