Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/653EE58CB3D111EF83B8BD6F762E951A.roa
File: 653EE58CB3D111EF83B8BD6F762E951A.roa (raw, json)
Hash identifier: k57OdINWVeSdjj7lKfbCQ5sRcIRIBGRF4HDwurZb2Co=
Subject key identifier: 94:C0:3D:21:73:0D:DC:85:87:A4:E4:49:47:70:B6:41:D8:4B:22:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0118E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/653EE58CB3D111EF83B8BD6F762E951A.roa
Signing time: Fri 06 Dec 2024 12:55:40 +0000
ROA not before: Fri 06 Dec 2024 12:55:36 +0000
ROA not after: Mon 10 Mar 2025 12:55:36 +0000
asID: 398993
IP address blocks: 154.92.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71904 (0x118e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 6 12:55:36 2024 GMT
Not After : Mar 10 12:55:36 2025 GMT
Subject: CN=6752f44c-2e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:f0:31:e9:44:7e:65:a0:0e:cb:c0:10:34:
47:a0:57:e0:87:a8:f3:c8:14:ab:b4:cd:a6:2a:d9:
d7:39:3f:6a:a8:1a:e3:ec:25:78:f7:31:2f:30:b8:
56:60:e4:69:b1:33:53:f2:d5:eb:37:f3:56:c1:ea:
2e:97:d4:2a:5b:28:95:a0:b4:2a:86:c6:c5:6a:43:
72:71:39:9d:d8:df:a5:d7:bb:1c:67:a0:f5:c6:09:
00:ba:84:b1:15:11:59:7c:4b:29:9e:f6:a1:30:53:
26:63:84:54:11:42:ab:42:7a:c6:21:f2:d0:83:79:
f2:cd:e3:5a:ea:6b:dc:cc:e0:1d:9e:b2:b4:ad:1e:
a3:04:f0:39:6b:58:48:68:1d:dd:71:98:97:8d:6f:
70:3d:3c:fb:e1:34:15:e2:67:7f:3c:24:e9:1c:4a:
49:91:79:6f:89:88:ad:b8:1c:04:e7:34:a9:b3:6f:
ba:2b:59:23:8d:cb:c9:b5:45:00:f0:7d:ee:f0:61:
4b:8c:c0:2f:7c:04:75:11:5d:65:ad:bb:97:de:46:
1a:ca:09:4e:47:28:ac:03:4b:31:6d:b9:1b:0f:d3:
bf:6b:8b:a9:64:76:07:6c:ba:03:0b:cf:b5:f7:c8:
dc:f5:9b:e3:0c:c8:63:13:65:a1:f4:ad:7d:32:19:
ef:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C0:3D:21:73:0D:DC:85:87:A4:E4:49:47:70:B6:41:D8:4B:22:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/653EE58CB3D111EF83B8BD6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.176.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:24:cf:7b:65:98:4b:cc:0f:94:ab:13:09:fc:09:a6:01:7c:
3c:a0:8d:d6:be:10:ad:0f:a2:26:be:3e:99:ec:fb:c4:ab:7c:
0b:f1:d9:90:63:24:9c:ee:2c:96:75:a3:ae:45:6d:32:8e:b5:
e9:ff:a5:95:41:0f:f0:b4:2d:5e:18:79:7c:b3:b7:88:db:71:
da:24:b3:ce:2a:86:38:c6:c7:1b:93:bb:9f:f8:43:c0:39:d1:
46:25:5a:b6:91:e4:65:b5:a9:2b:c9:e9:ee:0a:b9:a3:f5:62:
4e:c3:cb:d0:88:80:5e:3c:c5:cf:04:8b:ab:f9:d6:d7:12:34:
10:62:ae:4d:69:7c:89:cf:bb:88:17:d2:b0:3b:fc:a9:27:68:
fa:c5:e6:80:42:b0:2d:f0:26:cc:01:e2:2a:9a:82:3c:13:82:
86:ff:d2:e9:64:82:6d:b7:33:89:96:a6:8e:12:85:e6:f5:5a:
27:0d:eb:f5:64:38:85:95:0b:34:cb:49:f0:a4:95:93:2c:c7:
31:ce:b8:47:5b:6d:87:a0:06:89:16:27:7c:4c:79:23:0d:8d:
c8:c1:5e:c0:a3:0b:58:93:66:b8:30:61:fd:74:52:64:17:07:
2b:8b:eb:6e:72:0d:05:fc:62:86:00:ea:51:27:14:04:83:69:
ba:fc:c0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:17:19 2025 by rpki-client