Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8515F144CF3211EF85B98EB5762E951A.roa
File: 8515F144CF3211EF85B98EB5762E951A.roa (raw, json)
Hash identifier: +Qpm9k/peFYAeBEzGej4g2aWyspnAZVE6ED+kMgHgXk=
Subject key identifier: 91:4B:44:EB:13:E2:C2:F1:AC:54:6B:B8:E6:B7:6C:DE:0B:30:50:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8515F144CF3211EF85B98EB5762E951A.roa
Signing time: Fri 10 Jan 2025 09:08:56 +0000
ROA not before: Fri 10 Jan 2025 09:08:52 +0000
ROA not after: Fri 07 Feb 2025 09:08:52 +0000
asID: 212238
IP address blocks: 154.94.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80339 (0x139d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 09:08:52 2025 GMT
Not After : Feb 7 09:08:52 2025 GMT
Subject: CN=6780e3a8-7e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0b:b0:bb:1b:90:95:fb:24:0c:aa:06:ca:59:
d7:15:14:4e:98:e3:ca:cd:3f:13:1c:7e:40:87:e2:
26:46:42:27:1e:5d:fd:80:33:d2:43:a5:b2:6a:46:
c2:dd:59:0c:55:96:74:4c:a3:1c:d9:c0:bb:16:bc:
c1:6d:53:fa:18:31:96:bd:77:6d:a7:c6:bc:15:6e:
68:9f:03:c2:34:d3:36:79:5f:78:c0:99:b3:19:25:
95:bf:2b:91:97:4a:5a:79:14:17:0b:c4:e5:60:b1:
91:89:83:b8:08:ce:89:44:c9:dc:3b:8a:1e:ef:19:
32:c8:31:b7:b7:e9:12:1b:af:3a:7c:54:a3:79:3c:
59:10:fe:04:dd:68:ff:99:5a:06:d1:73:f6:4a:81:
fc:d6:34:3f:97:63:aa:64:8e:51:ce:be:87:50:2a:
6d:ae:37:d9:76:4e:eb:b9:9a:53:25:ad:df:d4:f9:
90:1c:91:69:b8:e5:4c:f8:7a:ed:66:f9:d7:83:c7:
45:29:33:a0:3b:21:4c:b7:89:ba:6b:ff:63:a7:b3:
7e:6e:3f:65:ca:b6:b7:62:80:c6:49:07:22:15:c3:
b7:0b:3d:17:fc:b6:f8:a3:f6:a0:32:f8:5f:7f:be:
8d:a7:79:63:fe:a9:f0:8d:25:6a:e6:43:ad:94:7b:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4B:44:EB:13:E2:C2:F1:AC:54:6B:B8:E6:B7:6C:DE:0B:30:50:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8515F144CF3211EF85B98EB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.39.0/24
Signature Algorithm: sha256WithRSAEncryption
00:59:3b:f3:70:4a:8b:a3:cf:5b:0d:0a:0f:1e:f5:87:e7:df:
02:79:72:00:71:93:aa:b9:0b:24:c4:08:26:d2:00:87:3a:37:
5a:9b:89:a8:39:ac:1b:42:e6:0f:21:ff:2d:13:84:5b:e8:d9:
5a:e1:75:36:fb:94:80:4d:78:bf:ed:6a:02:31:bc:38:e9:ad:
7b:04:bb:6a:dc:1d:c1:28:41:76:e9:e7:18:09:28:fb:c9:4d:
01:3b:01:f3:38:23:f2:db:23:39:33:d5:d6:e9:96:f2:11:8a:
3b:1e:c0:d5:00:67:b7:ca:df:a8:9b:63:1a:ef:9b:93:94:4d:
1a:ec:cb:4c:a6:e6:c7:36:7c:ec:bf:9f:40:48:f6:4a:f5:85:
1e:77:6c:09:7d:ad:ef:b6:68:42:40:05:aa:1a:be:01:f9:1e:
19:2a:ed:6a:7b:da:62:87:d2:12:3f:29:cb:82:26:e6:05:f0:
c5:bf:21:35:f3:b9:07:85:7d:03:a3:93:a6:dc:16:b2:27:66:
ac:54:0f:2d:a2:7f:a3:50:1f:25:74:28:56:40:4b:28:2d:cc:
e2:52:34:de:0c:15:43:6a:a6:bc:29:94:1e:05:4e:33:4c:ff:
10:87:13:be:60:bd:0b:23:24:41:43:ab:14:2d:66:60:04:e8:
ef:6d:e5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:35:28 2025 by rpki-client