Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C703E5EC36211EF85F8148E762E951A.roa
File: 7C703E5EC36211EF85F8148E762E951A.roa (raw, json)
Hash identifier: 3cU8hd52bVMa3zGqMqUifbYtNl/ispWBmZjlXi62gU8=
Subject key identifier: 5F:CB:15:44:1A:08:3B:35:C7:19:DE:97:6D:7D:DD:B6:CE:8A:60:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012672
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C703E5EC36211EF85F8148E762E951A.roa
Signing time: Thu 26 Dec 2024 08:22:03 +0000
ROA not before: Thu 26 Dec 2024 08:22:00 +0000
ROA not after: Tue 04 Mar 2025 08:22:00 +0000
asID: 138915
IP address blocks: 154.93.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75378 (0x12672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 08:22:00 2024 GMT
Not After : Mar 4 08:22:00 2025 GMT
Subject: CN=676d122b-9254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7a:42:d6:b9:cf:05:61:bb:38:25:d1:3e:76:
35:7d:08:99:08:ef:b9:4a:61:99:1c:ca:3b:06:9a:
1c:b9:6e:3a:db:a0:3c:5a:c0:dd:49:61:82:7c:86:
b2:5a:0d:27:7e:97:6a:12:43:b4:b2:30:61:ea:f2:
23:8b:1f:a0:d7:cb:25:f3:38:ea:1f:9d:ee:11:a9:
0b:e2:13:90:48:9c:70:18:38:6c:4f:4a:0d:39:01:
57:a3:84:53:a3:21:be:23:5b:b7:4d:07:54:59:b4:
ba:6f:1f:df:24:da:30:74:95:a6:7d:aa:53:40:0f:
a5:d3:c5:0b:db:9f:41:c3:06:ef:73:13:c2:8f:e3:
17:18:ec:61:61:6c:af:a0:af:73:b5:dd:68:03:f2:
8d:6e:d4:4b:c6:54:2a:7a:9e:d0:b9:3b:44:e4:ed:
2b:c0:c7:f8:f2:f1:0b:a0:5d:1d:d1:a6:31:ac:a4:
be:1c:98:02:52:c3:ec:fe:01:f6:76:20:26:cf:8b:
cb:25:79:12:1d:bd:1d:56:26:ca:96:09:94:d3:f8:
9d:1b:81:11:b7:41:55:10:8a:89:5b:ae:4e:da:40:
3e:c9:9c:00:8e:d6:87:03:ae:c7:1a:39:d5:e7:99:
47:f3:5b:82:41:a6:5c:d9:ad:dd:c8:e2:23:92:f6:
00:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CB:15:44:1A:08:3B:35:C7:19:DE:97:6D:7D:DD:B6:CE:8A:60:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C703E5EC36211EF85F8148E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.116.0/22
Signature Algorithm: sha256WithRSAEncryption
84:0e:81:64:b3:3f:87:86:6d:8d:5d:f4:c3:1b:51:65:42:0d:
21:a8:da:da:4c:17:f2:aa:93:2e:1c:78:dd:09:5f:97:8e:77:
13:bc:bc:b5:07:5e:d1:49:08:17:d1:d4:22:cb:24:bf:12:78:
72:f8:eb:47:ce:99:5c:46:3f:9c:ec:60:e6:0d:12:e0:84:e7:
ab:bb:9f:35:ab:e1:ad:ef:a1:2f:b6:d5:81:a4:8c:e1:ad:ff:
91:0c:bb:10:1c:48:18:5a:c3:f5:1d:78:5e:a8:25:2d:57:c1:
7a:ce:9e:6a:61:72:91:f6:d2:a8:db:9f:38:e9:b0:98:76:df:
3a:0d:f7:24:db:dd:3e:1b:06:a3:12:d3:f2:05:4d:8b:4e:1d:
3c:0b:e1:f0:cf:a6:1e:7e:00:6b:14:59:a9:a9:a5:90:7a:bd:
85:b1:0d:36:7d:35:8b:5c:d0:e9:99:dc:d8:99:30:42:7c:18:
f3:9a:e1:73:4c:fc:77:79:19:9a:e2:bf:dd:67:16:78:98:a5:
da:bd:a6:81:53:57:cc:30:11:b7:90:91:15:bd:06:8e:1e:73:
88:b9:7c:31:45:18:d5:2e:9c:52:d8:d1:fd:53:61:70:1a:bd:
88:66:7e:08:b3:ba:54:e2:83:9f:0c:7d:46:c1:b9:a0:be:c1:
54:5e:8d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:41:20 2025 by rpki-client