Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A815BF34CCD111EFB6E71485762E951A.roa
File: A815BF34CCD111EFB6E71485762E951A.roa (raw, json)
Hash identifier: +bXDfA2E4FTOuPBkB8unZTZ9hioUtG2oL9NB1jyNMMM=
Subject key identifier: 07:02:1C:E3:CD:8F:8C:04:BA:BF:1D:4B:BE:F3:8C:8B:D1:4A:D5:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013675
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A815BF34CCD111EFB6E71485762E951A.roa
Signing time: Tue 07 Jan 2025 08:30:31 +0000
ROA not before: Tue 07 Jan 2025 08:30:28 +0000
ROA not after: Tue 04 Feb 2025 08:30:28 +0000
asID: 39600
IP address blocks: 154.94.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79477 (0x13675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 08:30:28 2025 GMT
Not After : Feb 4 08:30:28 2025 GMT
Subject: CN=677ce627-36b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dd:2d:44:6c:4f:69:f3:0a:86:ac:d9:17:4d:
ed:a8:92:de:01:7e:de:6c:60:86:fe:c4:44:63:af:
57:69:3b:a1:d5:fd:d1:e9:d0:97:6f:7c:6e:d2:87:
5e:f3:b3:42:1b:2d:b0:f3:f3:06:cf:d9:c2:76:ef:
06:ab:ef:12:9d:f9:8e:ed:78:ca:db:fd:a4:17:78:
01:7f:4f:a9:be:33:cb:48:20:67:cc:14:81:99:12:
b4:bf:aa:b7:e7:7c:0a:af:1e:8f:cb:9d:99:26:76:
d2:d6:87:7e:5a:b3:d6:11:03:c5:7c:8b:ea:0c:cb:
cf:27:43:6c:c6:48:03:f6:4c:e8:fe:e3:66:af:d6:
7d:18:84:7d:71:9d:cb:df:75:65:ad:5f:90:c9:de:
99:a7:09:93:c4:59:bd:eb:34:7a:c3:5d:50:09:03:
eb:0e:69:cf:61:d7:64:61:bb:cb:0d:55:45:16:bc:
f3:ee:ea:77:b4:c4:b4:9d:61:f5:a8:e7:f9:3f:fa:
2a:6f:f6:6f:e8:f9:36:8b:70:55:da:c0:c6:83:83:
bb:15:67:df:5d:85:c4:b1:b8:dd:dc:e2:98:69:6b:
f2:a6:27:c8:d3:b4:ed:38:49:c4:db:19:05:cc:f1:
3e:07:a2:17:c6:7d:6f:f7:dc:87:0a:23:d1:04:8f:
d9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:02:1C:E3:CD:8F:8C:04:BA:BF:1D:4B:BE:F3:8C:8B:D1:4A:D5:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A815BF34CCD111EFB6E71485762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.24.0/21
Signature Algorithm: sha256WithRSAEncryption
cc:72:d3:77:0d:99:c3:1c:b5:63:f5:dd:df:9e:fe:2e:32:53:
a2:41:87:8a:fd:4f:37:08:7f:0a:f3:af:6c:30:21:66:c5:94:
91:51:f9:48:d1:be:16:1a:9d:af:1e:84:da:ab:57:4f:08:7f:
1d:0e:4d:c3:0b:4d:7b:51:5d:a0:98:fc:45:22:43:ba:ac:71:
40:b0:43:af:06:cf:5e:ce:f6:c1:57:44:e7:f5:81:03:5b:23:
c4:53:3c:30:26:21:8e:8f:61:da:62:a1:b8:5d:f8:ad:78:5d:
73:a4:82:fc:63:72:5f:59:e6:fb:c0:98:cb:a8:4e:cc:98:35:
72:f7:b0:55:22:93:99:c3:eb:51:3b:92:1c:a6:c9:00:78:28:
68:fa:b8:d8:d4:5c:ce:d7:aa:ff:a5:5e:6c:eb:3d:ed:e1:50:
9e:48:54:18:52:99:64:9c:ec:35:42:1a:44:2f:61:3f:e2:6a:
5b:75:0c:0b:56:f9:bd:68:65:84:fa:cc:39:bc:fc:b0:51:9f:
9f:32:8f:bf:7e:f5:09:41:0b:b6:51:98:a5:1b:29:f5:4a:1b:
24:ae:fc:36:43:4d:f5:16:70:9f:2b:ca:61:e6:17:61:76:52:
6c:80:e7:eb:39:38:e9:10:6b:7e:c7:81:f4:c8:f0:b9:66:bc:
2b:7d:48:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:08:23 2025 by rpki-client