Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1661E74B21C11EFA0F472BA762E951A.roa
File: A1661E74B21C11EFA0F472BA762E951A.roa (raw, json)
Hash identifier: Xw9DvwX1Pa+omoJaxxL4WMzCOUGeH+qruSQfNlSKgPE=
Subject key identifier: 10:10:94:22:D2:E2:53:9F:7A:10:66:29:1D:F2:B4:3B:55:C0:6D:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1661E74B21C11EFA0F472BA762E951A.roa
Signing time: Wed 04 Dec 2024 08:49:11 +0000
ROA not before: Wed 04 Dec 2024 08:49:07 +0000
ROA not after: Sat 01 Feb 2025 08:49:07 +0000
asID: 138915
IP address blocks: 154.93.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71672 (0x117f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 08:49:07 2024 GMT
Not After : Feb 1 08:49:07 2025 GMT
Subject: CN=67501787-a4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:47:e1:ca:0c:42:5c:c7:51:cb:fd:5f:76:0e:
78:35:83:91:5a:97:78:ff:81:9a:f8:21:e3:48:f7:
3b:05:2b:43:ea:8e:b7:f1:30:01:3e:7b:f1:9e:3e:
7d:e7:44:33:13:54:36:35:02:26:44:4b:eb:80:e9:
bc:fe:19:fe:9b:ae:87:98:8b:0c:ca:bb:cd:a0:dc:
d4:7d:3b:40:dc:48:c5:92:23:18:2f:e1:20:78:12:
10:c5:f0:5c:63:f4:58:e3:4c:35:c6:cc:ca:21:f2:
86:c4:40:4d:5c:e9:c2:37:9e:69:2c:15:b3:37:b3:
e5:3f:38:d1:c6:6a:7e:a0:fa:d1:2c:c3:33:af:ce:
6a:07:96:5b:ac:7f:7d:e5:66:0f:93:25:71:7c:9e:
f2:0f:c2:cc:3c:28:39:86:9a:58:dc:27:cf:49:05:
6d:95:0f:f2:aa:7e:ad:92:5a:d8:14:11:64:ff:cc:
d2:24:ff:70:59:5d:18:bd:8b:a8:4b:35:1c:62:8a:
d5:ed:2b:17:c3:ba:40:e3:f4:c7:55:ca:1a:92:47:
fa:c4:4a:45:a1:12:4c:79:d4:b9:ae:af:fd:56:88:
53:66:24:4d:67:2e:48:d2:0b:7f:8e:84:75:fe:05:
f5:43:74:7a:e3:a6:76:5d:bf:06:fe:32:d9:57:e1:
0f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:10:94:22:D2:E2:53:9F:7A:10:66:29:1D:F2:B4:3B:55:C0:6D:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1661E74B21C11EFA0F472BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.72.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:f4:9e:df:23:a2:ac:62:92:9d:93:f7:9d:78:7b:5e:cc:39:
44:c0:ab:70:2b:c8:9b:69:42:4b:af:74:33:2c:e9:d3:c2:a6:
f4:aa:33:29:78:6c:2f:b7:6f:4e:52:ab:81:54:a2:0f:b1:0c:
18:c6:83:5c:4f:60:13:11:31:b4:96:77:79:b3:1d:cc:4f:5d:
7a:e4:8f:b8:ae:46:87:f8:62:43:c9:4b:9d:0b:34:21:c8:23:
9d:1b:56:23:d1:37:88:ec:b4:7a:e0:77:05:4c:f4:de:cd:76:
7d:94:9f:e4:6f:57:41:7c:ee:fd:dd:6d:50:7f:5e:ea:00:4d:
40:12:ce:ba:a7:eb:f6:80:d4:fa:e6:e2:ef:66:61:8b:52:bc:
23:5e:be:dd:b6:f3:27:5d:72:63:53:24:ff:d0:66:91:b7:19:
00:f5:a3:99:f1:5e:6b:55:86:da:49:b5:57:f6:e1:a7:51:70:
ac:6b:23:4b:ff:68:9c:e2:8d:82:05:8b:52:53:67:62:e2:fe:
77:4c:b3:98:7c:67:b3:fa:c4:dc:93:ea:39:09:a9:14:c5:c0:
f5:c0:0a:5e:7a:36:db:29:15:fa:68:29:4c:e7:c9:2a:b9:a7:
81:dc:be:18:0e:b3:da:a3:43:bb:fe:e0:cd:7e:4a:08:a5:e5:
34:87:12:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:54:36 2025 by rpki-client