Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F25A838C36211EFBD5EB18B762E951A.roa
File: 1F25A838C36211EFBD5EB18B762E951A.roa (raw, json)
Hash identifier: eLhKgB0ireSZX6zFwf8Tmal7a+UEBGoHtNffHl4QOm8=
Subject key identifier: CE:D8:56:F2:56:CC:AD:E1:84:6B:AC:BB:A8:B6:1C:89:24:28:20:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01266A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F25A838C36211EFBD5EB18B762E951A.roa
Signing time: Thu 26 Dec 2024 08:19:27 +0000
ROA not before: Thu 26 Dec 2024 08:19:23 +0000
ROA not after: Tue 04 Mar 2025 08:19:23 +0000
asID: 63139
IP address blocks: 154.94.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75370 (0x1266a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 08:19:23 2024 GMT
Not After : Mar 4 08:19:23 2025 GMT
Subject: CN=676d118f-e7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c8:a0:1e:d5:1f:e9:43:36:48:e9:e8:4e:7c:
c2:24:80:35:ef:57:aa:b2:ad:4f:cb:5e:8d:bf:8a:
14:4e:ae:c6:d0:e0:6d:8e:10:12:c8:bb:d3:c1:42:
5e:ed:e4:c5:eb:63:03:1c:b6:0b:cb:da:9a:ea:ea:
a3:84:d2:df:91:e2:9a:25:fd:4f:75:db:30:e8:03:
a9:ab:bf:db:b1:f7:9a:9e:ab:23:9d:de:11:fd:7e:
c1:84:88:21:0a:87:b3:c7:4f:e4:4c:84:80:97:cd:
a7:df:b7:54:15:22:7a:d1:ce:0d:d3:26:e9:9a:2d:
7e:a9:2f:8f:e8:c3:03:71:01:0d:29:b6:17:72:5b:
a3:e0:d5:97:66:24:b4:11:38:23:f3:57:9f:d8:26:
69:53:11:7d:7d:b5:90:7e:fd:a9:80:ad:47:75:bb:
2c:b2:1a:94:86:d3:ad:fb:6b:dc:16:e9:12:1f:15:
b3:08:ae:ac:bd:94:3e:e0:d7:5b:a5:af:75:88:dc:
4b:7b:bb:e5:31:3e:13:be:ed:18:d3:23:83:63:76:
d6:90:bf:41:0d:2c:d8:61:ed:03:cb:70:ec:8e:20:
95:a6:1c:2e:6b:ef:27:24:0c:e0:2d:38:a6:ef:2a:
c8:40:02:cc:b6:8f:90:77:37:45:c3:1e:c0:cc:d5:
71:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D8:56:F2:56:CC:AD:E1:84:6B:AC:BB:A8:B6:1C:89:24:28:20:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F25A838C36211EFBD5EB18B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.72.0/21
Signature Algorithm: sha256WithRSAEncryption
88:59:1d:1d:7e:a4:b8:69:88:bb:fe:47:63:10:ef:23:dd:5c:
9d:7b:cb:92:ca:2f:62:6c:24:b8:2d:14:2d:1c:3b:69:40:10:
79:1a:35:9b:8b:46:07:c1:da:56:4e:f9:86:1b:69:3b:38:9e:
14:7f:4c:50:54:3d:12:63:41:56:a4:20:d8:f8:44:94:c1:d6:
94:64:28:8c:c5:05:d0:12:05:6d:8f:04:25:63:be:94:df:ed:
a5:5f:ec:6d:11:d0:fe:a0:36:ed:00:15:e7:67:2c:ba:21:41:
4c:b1:72:b4:08:37:4e:f4:ee:09:78:27:9a:ab:74:d3:94:da:
91:d7:67:f6:a3:a0:0a:55:32:c1:80:87:bb:d1:75:a5:47:74:
f3:8d:a4:c4:7f:b2:ff:76:e1:4e:b9:04:b2:db:f5:e7:33:23:
8b:89:7f:0e:b6:0e:3a:47:bc:18:4c:75:68:68:7a:3b:41:6f:
f4:94:b0:4e:4d:ca:d5:64:88:d3:84:8a:11:e4:73:a3:e4:14:
35:98:8e:8c:71:ca:76:a6:2c:cf:c1:33:88:13:54:c7:54:49:
4c:6d:89:82:d5:ab:4d:8d:f1:da:46:08:d3:49:57:23:ea:84:
94:0a:78:cb:2d:ea:79:c1:7c:be:26:a1:37:ae:fd:05:14:61:
ca:14:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:24:16 2025 by rpki-client