Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/115D4B7ADA5F11EFB1B5ABB8762E951A.roa
File: 115D4B7ADA5F11EFB1B5ABB8762E951A.roa (raw, json)
Hash identifier: Xq+NVQJC/PC9jmexbY6PBR6lXG+6pUSWM97wVH/Lqfg=
Subject key identifier: 09:F6:0B:59:9F:13:DC:CC:06:9C:33:39:6C:A4:01:45:45:E0:92:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014820
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/115D4B7ADA5F11EFB1B5ABB8762E951A.roa
Signing time: Fri 24 Jan 2025 14:25:32 +0000
ROA not before: Fri 24 Jan 2025 14:25:28 +0000
ROA not after: Sat 01 Mar 2025 14:25:28 +0000
asID: 44559
IP address blocks: 154.81.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84000 (0x14820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:25:28 2025 GMT
Not After : Mar 1 14:25:28 2025 GMT
Subject: CN=6793a2dc-0ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f7:91:36:b0:bb:d2:a4:4c:a3:65:b1:22:e4:
40:ec:90:21:e5:9e:35:41:6e:25:bc:f9:ca:d2:16:
ab:fb:fd:e7:61:1a:87:02:9c:f0:7c:0a:67:fa:41:
54:de:4c:02:9b:0a:98:1f:6f:17:c9:3b:64:be:44:
53:89:65:9a:b0:75:55:3d:fb:9d:72:3c:29:bd:51:
50:a7:d9:b0:b9:6e:7a:05:ad:b8:cd:c6:e4:0c:d9:
cc:2e:67:9c:e7:fd:5e:8d:68:4c:ef:1c:cd:93:5e:
4f:a5:f5:f0:74:2e:cc:70:0b:56:60:48:a6:cf:e1:
51:ee:db:7f:94:f3:01:c4:e6:02:b4:5e:ff:ce:82:
5e:98:c2:a1:3d:fd:71:c2:4e:85:58:b4:1f:d9:da:
20:0e:cc:df:c9:ef:ff:87:79:0b:87:8b:49:f2:ce:
d0:f4:1d:89:95:63:9b:5c:86:3d:f7:cc:3f:58:be:
e1:0e:f0:25:a7:b1:bc:16:fe:6a:c0:15:a7:29:78:
bf:79:85:7e:56:24:d6:28:2a:64:93:a9:f5:5e:e3:
c3:dc:de:66:67:f1:7e:d7:bf:37:f6:87:81:01:89:
0e:5a:b0:13:99:b6:9c:03:50:4b:b3:3e:d9:31:c3:
d8:9d:83:c3:43:18:51:cb:b5:30:12:f7:69:2d:9b:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F6:0B:59:9F:13:DC:CC:06:9C:33:39:6C:A4:01:45:45:E0:92:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/115D4B7ADA5F11EFB1B5ABB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.47.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:70:30:d4:e5:cd:a6:69:2c:8c:9a:18:cd:b7:6a:ca:e0:97:
93:2b:3e:2b:96:12:97:9f:8b:a1:e8:95:14:06:27:b0:6a:48:
54:09:a4:6f:f9:ed:6f:ed:58:4e:c4:b7:02:8a:26:d2:d9:fb:
7e:c7:83:45:da:f3:f8:41:97:2b:8e:87:2c:66:f6:0d:9b:24:
25:e2:f6:3a:15:53:39:c6:eb:1b:57:ce:aa:3e:b8:27:ae:f3:
b6:5e:fa:d0:ce:31:18:8e:2c:3f:dd:74:97:45:ed:4a:42:35:
51:49:fb:43:1b:a2:be:6b:d6:43:8c:74:86:0d:72:ae:17:9e:
58:b2:94:ca:a7:df:c0:d8:80:f0:ca:7d:aa:65:5c:c6:92:55:
4d:c0:32:31:c2:d5:61:be:94:6a:8a:20:14:68:05:2e:0d:43:
9d:5b:9d:96:dc:2d:c7:a8:59:e7:be:ab:c4:ae:dd:2e:b8:50:
7b:92:ba:c4:95:b6:bf:ce:53:5e:8f:d6:b4:c9:c4:51:ce:7e:
e7:cc:22:57:d4:3c:d4:a8:4c:ad:68:a7:91:39:99:99:b3:d8:
d9:11:43:f9:81:e2:ec:43:9e:00:c6:1a:ad:76:29:ca:ac:12:
3c:1d:3a:7f:12:2b:d3:36:bf:c1:81:a1:26:b0:5d:12:3f:e8:
60:5a:79:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:53:32 2025 by rpki-client