Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BFE6C0AD98811EF990CEC8F762E951A.roa
File: 4BFE6C0AD98811EF990CEC8F762E951A.roa (raw, json)
Hash identifier: zCDOnUvI/E63+XV4VslKcVdLG9ydQfyBksfqvGCeHJQ=
Subject key identifier: 61:55:B3:D0:54:85:DE:F5:EB:75:AF:BE:96:17:9B:D4:D4:A1:5B:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014239
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BFE6C0AD98811EF990CEC8F762E951A.roa
Signing time: Thu 23 Jan 2025 12:48:08 +0000
ROA not before: Thu 23 Jan 2025 12:48:05 +0000
ROA not after: Thu 13 Mar 2025 12:48:05 +0000
asID: 138915
IP address blocks: 154.203.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82489 (0x14239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:48:05 2025 GMT
Not After : Mar 13 12:48:05 2025 GMT
Subject: CN=67923a88-d2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:20:65:08:ee:1f:fd:36:60:5f:42:b0:15:
39:90:6a:80:56:52:af:72:6f:43:8c:1c:ca:6d:4c:
c1:7e:ed:3e:87:6d:75:9d:3b:bb:13:74:a3:81:eb:
ea:19:0e:d1:c1:9e:28:8f:65:a9:c6:87:43:19:cf:
75:5a:57:fc:38:24:e0:e8:4d:62:97:ad:46:c2:df:
eb:8f:74:22:f9:51:80:7d:fd:dc:cd:05:b7:01:bf:
4a:29:89:e8:36:b1:98:65:04:cc:3c:5a:7d:8c:63:
fa:bd:1d:1d:20:87:96:ef:74:db:1f:b8:5e:39:2f:
98:ce:74:5f:45:34:6c:0f:23:e7:f6:60:f6:5a:63:
07:ae:f4:a6:31:98:5f:22:be:f2:57:67:5d:60:cd:
d3:a9:ae:09:8e:82:38:8e:11:86:9e:67:4d:11:b4:
10:c4:e0:ba:45:47:34:eb:dd:e0:1f:0f:86:67:06:
72:25:a6:fe:eb:16:17:2c:4c:eb:04:02:9a:0b:d7:
69:04:f8:67:e1:cf:0f:ec:72:19:50:0d:a0:5e:bd:
de:74:30:06:a7:93:e7:a8:c2:ab:ea:77:ee:85:43:
48:ac:eb:31:72:4e:bc:c8:49:30:91:50:ab:bd:80:
19:e2:c4:e8:22:6e:55:c7:2d:b1:1b:0d:89:41:69:
41:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:55:B3:D0:54:85:DE:F5:EB:75:AF:BE:96:17:9B:D4:D4:A1:5B:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BFE6C0AD98811EF990CEC8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.139.0/24
Signature Algorithm: sha256WithRSAEncryption
81:a5:34:5d:f4:74:d2:e4:76:af:f6:af:0f:bc:a6:20:1c:36:
8b:10:58:3b:44:10:a3:d1:f7:1d:e7:ff:26:d8:15:fd:c8:c3:
a7:41:a9:f6:dc:e7:73:5d:8d:8b:d3:13:22:90:ea:ac:2b:16:
e3:8b:35:a9:2f:43:58:74:61:58:a6:b9:77:24:ee:d7:db:58:
aa:27:d0:a3:23:14:ee:93:bb:3c:7a:f1:be:d6:77:43:1e:8e:
1d:0b:fd:9e:04:af:94:fe:2f:98:aa:cc:20:51:b3:13:60:3a:
9e:9e:05:60:45:69:11:38:d2:d4:59:79:dd:2b:0f:ed:f4:1d:
a1:9b:84:65:c5:76:0a:fd:5a:45:e0:a6:79:ea:f6:5c:4a:9f:
dc:c0:7e:d9:39:8d:bb:bd:4b:45:b6:5b:03:dd:c4:8f:6a:2e:
e7:d2:46:2e:d9:35:bf:25:31:d0:2e:86:d6:94:55:2b:71:84:
62:48:46:0c:68:b5:bb:de:31:28:ca:4c:73:6d:c1:8c:a1:48:
8c:25:11:24:a4:63:15:fa:4e:2e:59:80:ad:39:6f:26:76:2e:
52:39:38:71:f1:69:07:41:b8:85:68:15:46:2d:d7:7e:62:0f:
ca:2c:e7:8e:1f:47:f9:34:58:c8:82:8a:d7:88:a6:e8:47:a4:
80:27:18:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:32:31 2025 by rpki-client