Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/747D9BA4CF2111EF998C6C4B762E951A.roa
File: 747D9BA4CF2111EF998C6C4B762E951A.roa (raw, json)
Hash identifier: a8kRGZASV5i/tLKMjMLreoSKIXYIuxJdumrTSPTyb+w=
Subject key identifier: 84:92:0F:CE:9F:4F:EB:C3:AA:21:1F:B8:20:9A:00:C3:9B:BA:9E:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013999
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/747D9BA4CF2111EF998C6C4B762E951A.roa
Signing time: Fri 10 Jan 2025 07:06:47 +0000
ROA not before: Fri 10 Jan 2025 07:06:43 +0000
ROA not after: Fri 14 Feb 2025 07:06:43 +0000
asID: 203020
IP address blocks: 154.203.48.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80281 (0x13999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 07:06:43 2025 GMT
Not After : Feb 14 07:06:43 2025 GMT
Subject: CN=6780c707-c8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:4d:7e:61:11:8f:d9:2c:da:0a:bc:d8:b1:
84:45:06:95:20:a5:e1:0d:c4:58:e5:62:cd:e8:77:
e5:7e:23:54:21:b2:9e:84:cf:39:6a:74:f7:7b:31:
47:53:f0:8d:2f:de:bc:1a:c4:33:5e:f3:24:59:37:
23:c6:91:ad:27:e1:eb:b7:47:7d:3c:ea:59:a4:b9:
51:5b:6d:54:d6:fc:df:8a:6b:f7:7a:54:57:82:69:
40:b5:9a:8a:3e:d8:ce:3d:32:74:a6:b8:64:4d:7f:
75:ea:c6:5a:8d:3e:c8:50:43:7f:f6:14:d7:0d:88:
ae:73:56:9d:6a:11:c8:e7:cf:76:78:ae:9e:35:f6:
16:ac:5c:58:7f:7e:76:b1:da:06:0d:a8:55:03:25:
4a:39:79:fd:16:ec:07:dd:01:f1:72:4b:da:b8:0f:
51:69:ca:49:9a:7e:82:54:ff:d4:98:eb:76:71:85:
83:db:ff:b9:de:1a:6b:a3:8b:91:91:37:b5:89:a5:
d6:4b:e3:75:70:1c:89:18:59:74:84:ee:c2:6c:a9:
81:73:64:13:41:a1:86:a0:df:b2:ba:ad:1b:8c:57:
7b:7b:17:56:9c:9f:f9:a4:75:53:58:7e:3e:dd:03:
cb:91:27:ab:77:0b:3a:ec:a1:5e:14:23:a4:5b:07:
09:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:92:0F:CE:9F:4F:EB:C3:AA:21:1F:B8:20:9A:00:C3:9B:BA:9E:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/747D9BA4CF2111EF998C6C4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.48.0/23
Signature Algorithm: sha256WithRSAEncryption
af:91:d1:e6:4b:f4:45:89:42:9f:49:e7:49:55:24:0f:3d:57:
f9:3b:fb:e0:3d:4c:aa:2f:11:1c:df:bb:1c:78:82:bf:e6:64:
2e:62:5a:e2:da:e9:7f:06:28:16:55:d1:d1:02:dd:04:99:69:
d9:14:50:e3:05:3b:27:16:a4:ae:fc:68:cc:9d:ba:3f:0b:a7:
b7:be:1c:aa:f9:9a:61:aa:39:ba:b0:e5:85:bc:19:d2:62:a5:
37:f7:e2:99:99:e7:92:25:7c:82:c2:8a:ea:55:db:e0:58:e6:
e6:b9:a7:5a:d3:10:70:01:d9:26:f9:f8:cc:c9:34:de:8d:b2:
8b:da:1e:da:2d:89:8a:3b:5c:27:ac:ee:0e:76:5d:08:39:59:
cc:7b:23:ae:03:40:cb:90:2d:09:2b:61:d5:34:d0:d0:af:f1:
e5:f6:9b:80:49:01:71:f8:da:6d:f6:d8:e4:83:3c:a6:88:29:
8b:76:07:bf:01:e4:7c:29:67:d9:94:5b:26:e3:fc:73:be:5d:
6d:e3:76:d5:58:21:69:cb:56:9a:8c:b0:85:33:53:9d:5b:c8:
70:c3:5b:20:16:27:e6:e8:19:a7:c9:39:41:c5:e2:1e:14:fd:
8c:4a:66:15:0b:44:d9:f4:e4:84:71:d4:ba:42:3b:1b:40:d4:
7f:72:76:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:11:15 2025 by rpki-client