Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5D4A1BCDB2711EFB9881888762E951A.roa
File: B5D4A1BCDB2711EFB9881888762E951A.roa (raw, json)
Hash identifier: gyHucRPpbJjYZfw0iBqRkdoGGFNX+hboxmo6JsM6pic=
Subject key identifier: EA:94:75:9E:E0:12:63:A1:CE:A5:AC:CF:DA:72:00:60:5A:1B:C3:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5D4A1BCDB2711EFB9881888762E951A.roa
Signing time: Sat 25 Jan 2025 14:21:47 +0000
ROA not before: Sat 25 Jan 2025 14:21:44 +0000
ROA not after: Wed 26 Feb 2025 14:21:44 +0000
asID: 8796
IP address blocks: 154.201.92.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84440 (0x149d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 14:21:44 2025 GMT
Not After : Feb 26 14:21:44 2025 GMT
Subject: CN=6794f37b-3a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:03:54:d7:47:a2:0b:3c:03:f1:7c:61:42:d3:
dc:95:be:67:fd:8d:68:ab:41:90:82:ed:a9:26:d6:
08:a8:0c:0e:14:0d:6f:e6:9c:9a:cf:76:d9:1c:a6:
a2:0a:6a:53:7d:ab:4f:14:dd:b3:dd:0d:49:3d:82:
fe:72:bb:20:07:16:06:f0:80:d0:5f:66:54:d5:34:
8d:ef:a2:4b:f2:20:c8:b2:7a:7e:b1:66:ba:b5:e0:
b2:bd:94:c9:00:63:12:e2:59:41:f8:44:75:cb:ef:
98:dd:8a:e8:66:47:43:8a:9b:17:af:3a:b3:6f:83:
71:0c:ce:5e:b8:58:e5:c9:40:04:c3:d0:0e:66:67:
7a:e4:b6:fe:0d:22:ce:b6:48:af:06:44:45:53:79:
a4:f4:99:35:a7:6a:b1:64:3b:b1:e3:d3:a2:3d:65:
08:09:a4:77:12:17:b5:e9:cc:fc:f3:fe:12:72:31:
17:92:d8:24:0f:ce:5f:c5:92:76:42:f5:0e:2e:d9:
c8:c7:67:cb:35:24:a4:26:86:b7:40:e0:0f:78:71:
de:17:8e:6e:bb:b4:cc:97:32:4b:7a:c0:8c:0c:43:
f6:54:4b:f3:3e:f0:a7:bd:00:22:1e:5a:d7:bd:84:
d8:31:61:d0:16:12:08:63:91:d9:ad:03:9f:d0:a6:
af:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:94:75:9E:E0:12:63:A1:CE:A5:AC:CF:DA:72:00:60:5A:1B:C3:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5D4A1BCDB2711EFB9881888762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.92.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:40:f2:fc:a5:30:be:3a:a0:ed:94:e9:30:7e:69:e9:ba:10:
e7:e6:6b:16:24:60:35:b8:35:79:00:4d:a9:3b:2c:9f:f6:2b:
10:99:53:ad:0e:d1:cf:ca:33:ce:e0:5d:b9:18:fc:35:cf:22:
2f:83:cc:2c:9e:9c:bb:95:3a:d3:00:de:83:8f:07:ff:b7:d4:
4e:aa:6a:87:6c:cf:35:f5:77:ba:7c:8f:44:ef:91:93:57:37:
75:53:a0:1c:89:9c:59:5b:db:ff:22:52:44:e1:70:fb:f5:ff:
74:4c:12:ad:e9:f1:e3:9f:1b:bd:5e:ad:04:bd:3f:87:bf:74:
1e:dd:5d:8f:3c:08:bd:2d:c5:e2:18:4c:14:2a:26:cb:2e:44:
65:37:be:c0:7b:23:53:39:5e:2f:bb:e4:f3:32:69:02:bb:7d:
a2:44:d0:fd:ad:40:8d:bb:ea:8b:70:ed:17:d2:9f:5a:51:cb:
c7:8f:d9:4e:fd:26:cf:26:6c:e8:23:81:cd:ee:09:a0:94:1c:
26:7b:bc:ed:01:71:36:0d:da:a7:2b:e2:c9:f4:76:53:f1:b5:
76:04:42:d2:27:5c:3c:2b:16:97:f7:7b:9f:b6:db:b4:d0:bb:
92:f7:48:1d:8a:f6:b8:1e:b7:c9:30:e7:e2:04:26:7d:12:48:
5e:a2:97:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:39:51 2025 by rpki-client