Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85F46662DD6B11EF8C849554762E951A.roa
File: 85F46662DD6B11EF8C849554762E951A.roa (raw, json)
Hash identifier: 3W3M2OvVeXK7XnyQ08ytlmqgmDNS118szYDdRSxKNnk=
Subject key identifier: BD:80:14:E2:A9:87:4C:E2:ED:D3:CD:C9:C2:C5:9C:3D:CD:09:38:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85F46662DD6B11EF8C849554762E951A.roa
Signing time: Tue 28 Jan 2025 11:32:15 +0000
ROA not before: Tue 28 Jan 2025 11:32:11 +0000
ROA not after: Wed 12 Feb 2025 11:32:11 +0000
asID: 21859
IP address blocks: 154.94.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85218 (0x14ce2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 11:32:11 2025 GMT
Not After : Feb 12 11:32:11 2025 GMT
Subject: CN=6798c03f-99ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:e1:ca:8f:bf:72:67:2d:30:f0:eb:a9:aa:
1b:71:69:ba:e5:af:ba:92:fc:de:db:b5:d4:0e:54:
de:e2:1b:6a:48:8c:cf:53:40:c1:2e:00:f6:d6:c3:
67:a7:57:56:a1:a6:b7:10:76:97:0e:bc:a7:10:4e:
9a:a0:07:01:dc:a7:d9:4d:17:fe:58:80:4b:79:0a:
87:bf:bc:de:51:ad:1f:eb:38:5a:c2:d7:2c:8a:8c:
04:cd:4e:ff:4a:67:01:81:db:17:41:5e:eb:08:79:
38:80:00:ec:b4:2a:77:33:1e:85:94:7c:71:d7:97:
85:eb:71:ff:08:2b:5f:df:aa:20:e7:65:4b:a7:1c:
68:d1:46:fe:91:5c:83:8c:dd:ef:9e:d7:ca:d5:0f:
a7:f2:84:db:fe:fa:e9:c1:6b:31:5d:d8:2b:23:ce:
2d:e9:28:e4:b8:af:fa:4f:55:98:0b:b0:28:00:47:
56:69:92:c8:2f:bd:e8:2f:8c:53:d1:61:58:a4:ff:
4a:66:d8:a2:e9:c0:8c:94:4d:c6:a9:23:6f:ce:b8:
4e:dd:8c:e1:23:47:e1:ce:36:d9:c9:91:db:a9:0e:
df:e5:25:86:6a:39:9f:b9:29:39:8c:f0:23:60:1f:
e5:75:e8:cf:26:53:1d:d1:76:4a:fa:0d:68:f6:92:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:80:14:E2:A9:87:4C:E2:ED:D3:CD:C9:C2:C5:9C:3D:CD:09:38:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85F46662DD6B11EF8C849554762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.49.0/24
Signature Algorithm: sha256WithRSAEncryption
94:1f:33:72:61:97:a2:cf:9b:ea:12:3f:65:8c:d7:54:1a:39:
da:df:2b:0c:df:15:56:c8:2f:77:61:ae:72:04:f9:d0:5e:93:
b6:64:85:67:63:19:62:44:c5:ea:67:2a:2e:ac:2d:52:d5:d5:
de:a1:92:10:b8:ca:78:6e:68:a7:bd:71:c0:15:eb:fa:82:a5:
56:9f:5b:25:27:df:92:de:56:a2:f1:21:70:5d:41:6d:c3:8e:
6e:0e:9d:cf:3b:b4:19:10:31:72:1a:9f:6e:08:6a:50:80:72:
23:f7:30:7b:f7:60:2d:68:d4:01:40:58:be:c9:a8:9a:93:8b:
4f:07:01:7e:4a:f5:1b:41:58:86:68:bc:5f:13:c2:b6:54:60:
c4:5c:25:29:74:dd:73:1f:d6:93:0b:b3:c4:59:ef:97:73:bb:
35:9e:e2:09:54:2c:39:b4:31:f9:86:87:62:25:b3:de:84:23:
50:02:89:16:56:b2:55:b2:a5:08:c0:2c:89:5c:16:e8:21:f3:
5f:16:65:d5:e2:28:6c:13:fb:ab:15:dc:d7:33:61:ab:7e:5c:
e2:84:a6:d1:31:7d:41:b2:ed:e4:5f:3b:1b:76:84:94:31:63:
84:f0:77:2a:38:67:55:68:f9:0d:04:0d:50:f3:2c:44:e0:59:
45:37:82:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:45:41 2025 by rpki-client