Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C733826D8A311EF983D088B762E951A.roa
File: 5C733826D8A311EF983D088B762E951A.roa (raw, json)
Hash identifier: mxMnKiO26IMz1z6SpdmE28vHRHaJ5S0cL0uqdPC2bbM=
Subject key identifier: 10:65:FF:5F:AD:33:84:33:62:2D:34:F8:06:8E:DA:BE:DC:06:C5:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C733826D8A311EF983D088B762E951A.roa
Signing time: Wed 22 Jan 2025 09:29:21 +0000
ROA not before: Wed 22 Jan 2025 09:29:17 +0000
ROA not after: Tue 04 Feb 2025 09:29:17 +0000
asID: 197547
IP address blocks: 154.201.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81540 (0x13e84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 09:29:17 2025 GMT
Not After : Feb 4 09:29:17 2025 GMT
Subject: CN=6790ba71-9132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:92:23:3d:e4:4d:51:a4:4e:5a:90:d8:77:c4:
be:f5:12:3b:5c:b6:8c:2a:9d:01:aa:90:3c:d2:29:
86:17:8e:98:16:3a:fc:84:ad:63:89:fa:bf:ab:32:
ea:26:52:39:3b:b9:46:f9:7f:e2:7d:0f:d2:c4:61:
7a:4f:fb:e1:56:6d:cd:8a:91:fc:14:86:b4:d8:50:
bc:63:bb:55:34:19:04:0a:01:09:bc:4b:e8:24:42:
b1:d6:8f:a1:54:4c:bb:dd:15:4a:32:88:e6:62:ec:
76:5d:a6:ea:22:52:9b:b4:03:18:11:b3:09:27:30:
53:2a:81:ce:00:5a:4f:c7:46:7c:5b:85:2d:d1:dd:
3c:73:7c:8b:4c:21:b4:cf:2c:e6:41:f0:17:03:9d:
46:b1:33:3d:d0:74:70:cc:37:ad:f9:cf:40:90:32:
93:b2:e6:4f:10:08:5e:18:04:dd:6f:a2:61:4a:e8:
91:cc:8c:bc:b5:19:ad:f1:e8:d7:e5:b1:80:c6:ab:
cd:85:7c:fb:c3:d9:09:a6:ac:02:d3:55:72:a3:0e:
10:c8:60:63:f8:a6:63:95:b0:e2:84:2d:1b:43:0d:
fc:d7:ef:bb:a4:38:99:95:d5:48:b5:dd:73:48:2c:
f1:23:31:2e:94:b3:43:0a:79:c6:15:e4:25:6e:ff:
c1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:65:FF:5F:AD:33:84:33:62:2D:34:F8:06:8E:DA:BE:DC:06:C5:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C733826D8A311EF983D088B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.93.0/24
Signature Algorithm: sha256WithRSAEncryption
17:b2:e8:1d:c5:64:cc:b3:1c:93:c8:48:a3:ad:24:c8:31:fe:
72:ab:b0:aa:f7:6c:75:90:b4:0e:7d:5f:f1:1b:21:f8:42:d5:
0e:30:01:9a:5b:f6:b7:f3:69:10:22:54:05:84:7e:36:f6:ab:
16:37:70:39:0c:f3:bc:c6:33:01:e6:6c:5c:09:02:a5:c2:bd:
27:a5:33:49:ae:c5:49:6c:fe:c8:46:47:6d:5a:46:ae:55:0c:
86:8d:25:84:cc:ea:80:54:a8:15:90:34:b6:fd:bc:85:ea:a0:
b4:1f:d3:e2:08:49:d4:76:0b:27:84:b1:2d:36:70:f1:4c:bc:
b4:55:09:8f:d9:15:5d:0a:49:cb:be:80:f1:fb:2e:8e:7a:d4:
1f:58:a4:1e:f8:6b:6c:95:fa:81:21:53:1e:27:57:d4:0a:f0:
66:51:a9:ba:82:ef:3d:66:48:5e:1f:54:74:ca:c3:f9:48:3e:
7f:57:03:0d:3c:9e:54:f8:ba:fa:71:bb:c2:84:34:f9:f2:a3:
4e:7c:dc:d2:c7:0f:2b:ff:81:ec:29:e6:c7:41:06:f1:5f:54:
0c:21:e9:e2:6b:51:45:5f:ab:8e:58:1b:03:b5:28:72:11:a1:
6c:db:ae:34:8b:8b:af:af:7a:22:9b:0f:86:b7:07:6a:c3:31:
0b:23:ce:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:49:34 2025 by rpki-client