Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B0A68E8C6CE11EFAB059445762E951A.roa
File: 9B0A68E8C6CE11EFAB059445762E951A.roa (raw, json)
Hash identifier: X5jDJmRmy3HuIgYiQLA3wEL/rLPF0K4A3Zhf0Bw6LSE=
Subject key identifier: 90:0B:2A:D4:BA:E0:8D:5B:16:66:F6:FF:2D:D4:51:BB:8B:68:80:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0130EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B0A68E8C6CE11EFAB059445762E951A.roa
Signing time: Mon 30 Dec 2024 16:53:34 +0000
ROA not before: Mon 30 Dec 2024 16:53:30 +0000
ROA not after: Sun 02 Feb 2025 16:53:30 +0000
asID: 54600
IP address blocks: 154.202.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78062 (0x130ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 30 16:53:30 2024 GMT
Not After : Feb 2 16:53:30 2025 GMT
Subject: CN=6772d00e-f638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:9d:75:4d:ef:66:70:36:a9:ff:39:ca:a4:
e4:a5:b4:31:66:07:3f:51:1f:6a:93:79:ab:67:a4:
23:6c:fa:a0:ca:23:4a:e5:be:70:e8:2e:33:3e:be:
92:88:fd:bb:c4:12:48:c4:bc:d4:bb:3a:c1:69:65:
9b:d2:50:07:a5:fa:63:19:5d:77:8d:f1:77:92:79:
9e:5c:40:e4:c2:76:38:4c:8f:e5:45:68:a3:6e:cc:
52:a5:b0:43:d7:6c:71:e5:44:8c:10:d1:71:b5:ab:
ec:a9:ce:ea:fb:2e:0a:e2:7b:c8:b2:a1:c8:6b:4c:
d5:8d:15:80:98:69:4b:4a:59:b4:4a:de:8c:81:43:
9f:32:17:69:0e:28:47:bd:80:e3:89:ea:63:4c:0d:
e2:a3:e9:4d:c5:ac:a9:2c:a5:92:ce:9c:45:96:1d:
2d:4e:ea:20:db:e8:c4:32:89:c2:87:4a:54:1c:62:
52:33:3f:96:f8:e7:15:89:32:81:33:da:84:18:36:
3e:5a:8a:e5:4a:1c:5e:26:6b:36:e3:47:f2:7e:70:
86:76:1a:96:83:2a:6e:26:45:7e:ef:1b:63:b6:2c:
ff:d8:5b:dc:9c:d8:ff:3a:d2:3c:4d:ab:31:08:c4:
41:2e:21:0d:1f:6d:21:bc:9d:e6:30:0c:e2:1c:d7:
34:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0B:2A:D4:BA:E0:8D:5B:16:66:F6:FF:2D:D4:51:BB:8B:68:80:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B0A68E8C6CE11EFAB059445762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.240.0/20
Signature Algorithm: sha256WithRSAEncryption
64:8e:8a:f7:97:fb:d4:6d:f1:9a:20:89:29:9c:31:cb:6f:b5:
72:7e:e1:1f:cb:25:82:d4:49:73:3b:02:0e:e6:85:2b:13:54:
d3:66:17:0f:63:08:b4:e7:12:82:aa:a4:09:05:d1:22:91:02:
d7:97:4d:ae:24:a3:0e:99:ca:2c:7f:39:36:9f:2b:1d:6c:99:
82:63:6f:2c:29:16:f6:ac:72:d3:c4:4b:89:5b:05:6d:78:d4:
c1:6f:91:de:85:b1:15:22:cd:ea:89:f9:10:bc:7e:5c:9b:d4:
e3:64:f7:e8:a7:76:49:de:64:e7:6b:1b:ad:98:70:48:96:87:
f4:9d:a9:7f:22:25:0f:33:f8:aa:a3:f7:ca:ee:81:d0:7b:fc:
37:3b:45:80:1d:71:99:74:72:a7:8e:96:f5:c3:24:8f:7d:04:
1e:b1:8b:58:09:e1:5c:41:aa:9b:f5:07:4f:9b:60:de:96:20:
8a:81:4b:f1:7d:8b:95:5b:3e:a0:29:74:f7:2b:2b:4d:6f:d0:
d2:0c:a1:4c:d2:de:1c:cd:62:e8:4e:b8:1f:c0:a2:38:3c:c7:
28:6a:12:3d:f0:05:72:f8:99:e8:0a:fd:db:42:e0:06:56:19:
78:48:53:a1:6f:29:21:91:47:05:da:fd:32:d5:ae:5b:a2:e7:
9c:f2:48:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:05 2025 by rpki-client