Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29B90B8AC35F11EFBE60DE79762E951A.roa
File: 29B90B8AC35F11EFBE60DE79762E951A.roa (raw, json)
Hash identifier: ARJ9lm1B123lZevJr3iKy8HaffLxDlUrcq0ZbK3JhwE=
Subject key identifier: E9:3E:1D:A0:44:E0:CF:60:2C:20:16:CB:8F:4A:73:BC:34:B0:73:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01262A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29B90B8AC35F11EFBE60DE79762E951A.roa
Signing time: Thu 26 Dec 2024 07:58:16 +0000
ROA not before: Thu 26 Dec 2024 07:58:12 +0000
ROA not after: Tue 04 Mar 2025 07:58:12 +0000
asID: 138915
IP address blocks: 154.93.108.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75306 (0x1262a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 07:58:12 2024 GMT
Not After : Mar 4 07:58:12 2025 GMT
Subject: CN=676d0c98-6add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:f5:da:7d:6a:f5:17:c7:87:71:0a:6a:fb:
7e:3d:39:0a:22:37:65:ec:7a:71:6e:b4:af:55:4c:
b5:6c:a2:0a:48:b7:91:08:0d:7b:8a:92:6c:02:74:
dd:dd:a6:8c:4d:28:3b:df:e1:d0:1a:63:81:91:1f:
b9:d8:7e:33:a8:16:92:9b:b9:a4:ad:c0:aa:3c:2c:
20:b6:dd:0e:f8:c7:29:75:6e:0d:ba:36:ea:44:78:
f4:e8:83:8f:28:d7:f5:bd:a8:0e:75:94:97:24:53:
09:d9:60:19:66:7f:de:66:ea:c2:05:0e:5b:07:a5:
3e:fa:fc:ad:8b:60:78:47:81:84:fc:2e:3a:03:63:
67:4e:e1:f3:d7:3a:9f:7c:0b:b9:9c:f7:af:75:fe:
30:41:43:0c:11:a2:da:96:fd:a3:b8:e5:3d:d7:ef:
41:7b:fb:01:28:af:00:79:59:bf:5a:3a:3b:5e:f3:
6e:93:f1:ca:13:43:f8:1c:ca:55:74:a3:3d:01:b4:
08:f2:b0:ac:34:f9:e7:1a:e6:5f:f0:68:f4:30:9f:
95:15:dc:19:e0:ab:44:12:8e:69:c7:4a:bf:87:d6:
b9:1a:10:1b:bf:68:a1:36:51:bd:4c:6c:08:8b:2d:
5e:c1:bd:22:c0:b8:9f:f5:ba:ef:dc:ec:6e:3b:55:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3E:1D:A0:44:E0:CF:60:2C:20:16:CB:8F:4A:73:BC:34:B0:73:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29B90B8AC35F11EFBE60DE79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.108.0/23
Signature Algorithm: sha256WithRSAEncryption
31:e3:60:49:0c:15:14:97:1b:5d:12:93:02:f2:60:26:50:2d:
ec:ed:1e:9b:04:74:7b:82:52:3d:ad:16:bb:b1:ba:3d:bc:a9:
7f:06:1c:dc:a9:ea:20:24:2c:d1:71:90:8a:be:f1:bb:2c:b9:
f0:40:7e:16:4e:de:c4:12:e1:99:37:5a:09:f5:17:c9:73:42:
15:2a:a0:06:17:f9:d3:a5:58:6b:65:da:86:38:e5:08:35:5f:
aa:14:b1:2e:a5:85:79:44:e4:0a:f4:17:00:f1:9f:5d:1a:91:
51:99:96:f0:09:c6:b1:fd:be:cb:aa:3a:59:32:47:b0:40:b2:
99:5e:72:6e:d2:3f:3c:38:cb:94:7b:68:27:5a:ac:d4:38:b2:
ac:c8:4b:03:b1:ad:90:33:62:f0:91:50:06:50:3b:74:90:f9:
95:18:cc:58:22:0c:60:9f:f9:9f:4d:72:5a:f7:bc:1c:05:d9:
c7:e3:27:22:ff:5e:b5:dd:11:99:0a:00:cd:e3:f3:67:db:bf:
dd:3d:d2:a3:03:90:b9:b2:fa:e3:1f:c6:f0:63:24:ac:a3:e6:
f4:11:94:57:90:a8:6d:57:7c:07:45:38:19:af:14:bf:ea:ab:
8d:d7:84:7e:09:5f:f5:7e:c7:dd:96:15:61:3e:67:eb:56:fe:
2f:3a:7c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:56:50 2025 by rpki-client