Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8902C9CCDB2011EF873B1657762E951A.roa
File: 8902C9CCDB2011EF873B1657762E951A.roa (raw, json)
Hash identifier: G/YVsvwtcjYnCocPUzPHCTPvZ206XfkhCqgTiisgSHQ=
Subject key identifier: 89:E8:B8:15:14:6E:34:01:4C:B0:D6:C1:75:91:8D:F3:B7:74:D6:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014988
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8902C9CCDB2011EF873B1657762E951A.roa
Signing time: Sat 25 Jan 2025 13:30:26 +0000
ROA not before: Sat 25 Jan 2025 13:30:21 +0000
ROA not after: Tue 04 Feb 2025 13:30:21 +0000
asID: 395793
IP address blocks: 154.193.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84360 (0x14988)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:30:21 2025 GMT
Not After : Feb 4 13:30:21 2025 GMT
Subject: CN=6794e772-4360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6f:a7:c3:4a:ab:20:84:ae:d3:02:67:c8:41:
f7:97:73:2b:96:22:27:11:72:cd:da:60:bb:73:99:
17:c1:f5:0b:91:8c:bb:dd:7d:7f:1a:e1:cd:2f:08:
41:40:da:76:01:bc:c4:65:88:54:b2:1c:fb:0a:57:
52:25:fc:d1:c0:61:51:82:66:e6:dc:29:27:10:b6:
8f:d7:65:d4:d1:f3:61:a5:84:e1:98:1b:3a:1b:eb:
12:be:fb:58:55:0a:1e:21:88:a8:d2:9e:f1:29:42:
c6:a0:b2:6b:57:30:2d:9b:43:3e:8e:af:df:3f:80:
5e:bf:91:55:a6:49:8f:6f:2a:68:d4:a8:87:9e:81:
cf:60:ee:6a:00:26:c6:ed:ae:7f:6e:4c:43:d4:63:
b9:43:02:08:2c:b1:b9:f8:c3:e9:c8:14:7b:cd:7a:
42:01:6c:af:a7:d6:4a:72:16:62:cf:91:fc:2d:a6:
fe:74:b6:8b:59:75:81:16:47:2d:43:97:f8:c4:73:
5e:16:77:7f:f6:ec:51:9a:7a:81:56:91:96:d9:84:
5e:83:d6:21:03:eb:66:f6:8d:52:8a:c6:a2:92:fd:
f7:c8:cb:a3:a9:b7:7c:b9:0e:25:57:c4:80:ec:9a:
08:cd:d3:2d:a7:1d:7d:e5:ea:e0:1d:e6:ff:38:9e:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E8:B8:15:14:6E:34:01:4C:B0:D6:C1:75:91:8D:F3:B7:74:D6:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8902C9CCDB2011EF873B1657762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.105.0/24
Signature Algorithm: sha256WithRSAEncryption
37:72:fe:b9:23:8e:42:1f:39:91:62:dd:bb:20:73:00:4d:7c:
63:cc:4e:0e:38:40:2b:55:f7:a5:60:ad:36:61:fb:13:48:e7:
d4:50:de:02:ac:e9:8c:da:60:7c:c9:53:f0:87:86:03:99:8f:
98:66:39:af:b8:32:f8:64:1d:c6:8a:37:ea:ce:95:ac:17:7d:
cd:25:d4:99:36:2a:ea:f7:7a:b6:80:20:02:18:49:3c:67:7a:
d1:a1:88:48:fe:29:c7:e2:4e:5b:6d:e6:8b:17:e6:40:30:2c:
73:00:42:ac:85:19:28:7b:a9:e3:29:f2:0a:17:bc:f8:05:7a:
f6:6a:c5:f5:59:3c:b5:f8:9a:2b:5a:5f:6f:90:23:a0:5e:bc:
b8:c0:67:7b:6d:5a:a3:5d:67:3c:be:09:79:43:5b:ba:45:a6:
54:f3:b5:e3:a7:7e:44:38:4d:89:70:64:6f:57:44:3d:ff:b6:
e8:7e:00:1b:64:d8:46:d7:79:0c:56:9e:85:a4:9c:ec:e5:8d:
49:ce:d9:20:25:48:b8:a1:2e:0b:02:38:03:d7:2e:10:c4:1c:
da:f8:76:af:cb:c2:e7:e8:95:4b:be:cd:56:c0:67:d2:64:86:
93:4a:db:f7:7d:a3:33:02:ef:51:00:98:82:35:80:f3:8f:a4:
6e:25:c6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:11:55 2025 by rpki-client