Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D7BC4DCD98011EFA554065C762E951A.roa
File: 8D7BC4DCD98011EFA554065C762E951A.roa (raw, json)
Hash identifier: 9gfOBWqsDzoTC9Rs3baR7ETfgGf8XT653wpNlhePHB4=
Subject key identifier: B1:CD:E2:60:F4:BB:72:14:16:04:87:FA:41:9C:71:DA:A4:AA:29:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D7BC4DCD98011EFA554065C762E951A.roa
Signing time: Thu 23 Jan 2025 11:52:42 +0000
ROA not before: Thu 23 Jan 2025 11:52:39 +0000
ROA not after: Thu 13 Mar 2025 11:52:39 +0000
asID: 138915
IP address blocks: 154.203.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82382 (0x141ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:52:39 2025 GMT
Not After : Mar 13 11:52:39 2025 GMT
Subject: CN=67922d8a-6923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4f:f5:77:33:f7:a3:53:eb:2c:fd:fd:d3:ee:
69:1e:e9:cf:2c:66:58:6f:b5:99:4d:54:8a:bf:a3:
27:4b:28:6c:70:4b:ba:99:4c:3f:6e:a4:5b:40:18:
19:1c:8f:15:55:71:56:df:17:08:be:7d:c5:da:6a:
9e:af:4f:77:fc:1c:cf:e5:4b:84:d6:39:45:79:a5:
49:be:06:cc:17:7e:d4:68:7c:31:a0:0f:a3:1b:4d:
ef:e1:2c:a2:5a:97:8a:ab:75:de:f9:e4:0a:bc:5f:
a7:4e:5d:75:86:98:b7:69:06:d0:67:5f:d6:fc:cb:
6c:b0:ef:29:5e:79:3a:ec:85:87:48:fe:1f:38:8d:
13:a4:0a:c2:3b:60:9e:a1:33:1b:7c:72:8b:e8:6f:
97:c5:5a:00:07:0b:4c:fc:09:9f:33:99:4c:7c:91:
10:98:16:81:6f:d8:ae:bf:01:66:b7:e6:44:bf:72:
34:4e:b0:7b:bc:77:7e:82:6d:fc:3d:0f:ef:41:9d:
c2:87:ad:9e:93:1c:89:65:41:bf:5d:90:64:7c:06:
77:cd:21:87:63:54:4d:d3:60:ef:b1:b0:60:4c:5b:
3a:5d:13:51:fa:29:2e:47:5f:27:09:a9:8a:8c:db:
95:de:a7:e5:09:fc:da:8f:dd:a0:bf:73:15:60:b9:
51:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CD:E2:60:F4:BB:72:14:16:04:87:FA:41:9C:71:DA:A4:AA:29:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D7BC4DCD98011EFA554065C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.169.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f6:02:c0:64:c3:7c:49:a9:94:55:9b:fc:92:9b:ea:0f:6d:
57:ce:ef:6b:95:c1:4d:32:23:1a:e8:72:c0:15:07:d1:00:59:
87:a2:e9:96:61:d0:ce:dd:a2:2f:59:4b:52:5a:0a:41:0b:df:
f4:ad:b2:07:c5:dd:5c:3f:e6:c6:92:a5:5d:82:d7:a7:da:24:
09:8f:66:cd:d9:26:c9:61:83:30:bb:94:d1:be:0b:e5:d5:0c:
a6:bc:2f:83:3d:ef:c0:e8:f4:bf:61:6b:1e:10:bb:e2:9a:db:
51:f6:65:da:00:23:81:f0:3e:d2:27:e6:6e:ab:86:86:11:29:
3f:47:c9:b4:09:a8:6a:aa:88:79:4d:7f:af:96:69:bb:f4:61:
8a:83:46:b7:eb:08:cf:75:21:c7:e4:74:dc:2b:c0:e3:ec:a4:
e8:9c:37:c7:32:6b:77:84:eb:d9:0f:90:2f:de:76:5c:09:05:
1f:6b:c1:d3:5e:1c:73:30:a1:a7:9f:1b:09:45:81:bc:e6:63:
63:76:4c:5d:d5:7b:7e:a5:9f:44:ad:71:02:08:f0:27:34:5d:
c7:ad:c0:70:09:93:c2:97:92:4b:08:92:d4:76:db:f3:3e:c2:
ad:a8:10:04:7e:a9:d7:71:20:c2:fb:f7:c0:75:d3:e3:4b:67:
ca:28:55:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:45:06 2025 by rpki-client