Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB85688ADD6E11EF868EF067762E951A.roa
File: DB85688ADD6E11EF868EF067762E951A.roa (raw, json)
Hash identifier: kBoPYLFsolQ4roAWElu4gohWI9OlimEWv7BAarIK+kk=
Subject key identifier: 65:62:E4:FE:EC:4A:79:EC:0F:E5:0D:AF:1A:EB:85:63:D2:FE:45:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB85688ADD6E11EF868EF067762E951A.roa
Signing time: Tue 28 Jan 2025 11:56:07 +0000
ROA not before: Tue 28 Jan 2025 11:56:03 +0000
ROA not after: Wed 12 Feb 2025 11:56:03 +0000
asID: 5065
IP address blocks: 154.94.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85238 (0x14cf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 11:56:03 2025 GMT
Not After : Feb 12 11:56:03 2025 GMT
Subject: CN=6798c5d7-d045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:c9:fb:00:c5:11:8c:c0:f7:88:78:51:27:
83:a5:19:4d:95:af:2a:e3:47:05:3a:4f:c1:3d:69:
94:f0:cf:46:c5:21:ef:5c:ef:6f:6b:0b:e2:b8:93:
36:a6:95:27:10:25:3e:cf:5e:b7:4f:b8:c2:1c:86:
90:c4:82:ca:aa:92:6b:f6:a6:2e:af:81:14:38:9e:
7e:c8:ea:bd:82:31:a5:ad:2d:bc:e0:0a:88:8e:5b:
08:3d:9d:ac:fb:53:76:55:4f:1d:99:5b:b9:ae:e4:
af:25:d5:56:36:83:7f:7e:fd:b1:13:31:9f:77:41:
a8:c2:c8:40:86:f5:e2:69:27:38:3b:f7:7d:89:67:
96:6b:f9:7a:03:37:57:b6:87:33:31:6b:72:9e:dd:
7f:67:a4:03:bf:24:8b:7e:e1:c8:18:ff:59:7b:31:
1b:c7:94:c5:40:70:e4:e5:2f:2d:b1:75:82:85:3e:
55:15:2e:f3:3f:13:5c:b2:62:e3:14:ef:e9:81:9a:
a6:57:4d:8d:0c:a5:bc:1d:8b:d5:58:56:b5:65:b3:
0f:15:93:10:2d:73:a2:64:31:97:83:51:17:9c:f2:
28:0d:72:1e:7f:47:8a:31:b0:50:ce:9a:d2:b5:cf:
2f:20:f4:ab:82:de:de:de:2c:e2:06:32:b4:19:90:
45:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:62:E4:FE:EC:4A:79:EC:0F:E5:0D:AF:1A:EB:85:63:D2:FE:45:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB85688ADD6E11EF868EF067762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.47.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:fe:bd:28:f1:d3:e4:b5:18:31:48:d1:c2:c2:fc:ba:1c:76:
1f:3b:7c:f8:1a:7b:ad:7b:d4:7d:dd:81:28:53:a9:ed:2b:92:
46:34:93:3c:ea:e7:c9:a6:f5:f5:9e:71:a8:af:5d:fa:17:b8:
d4:43:6a:d2:70:39:34:9f:66:59:ae:14:6e:41:ac:ee:f5:2b:
09:2f:84:39:d6:9e:c5:5c:ed:44:9f:5d:1c:e6:71:a4:e5:e5:
ff:99:01:69:ee:66:b5:a8:be:e5:18:c5:36:30:ea:75:bf:41:
a6:8e:a0:33:ed:7b:b7:a5:2a:cd:f6:50:cb:40:63:0d:d9:fd:
dc:30:24:6d:2c:c4:a7:df:11:97:d2:b0:c2:e3:00:00:8b:8c:
6e:57:58:14:49:93:e5:e8:63:8e:88:71:c6:2b:8e:d3:7a:11:
76:70:48:61:e3:0f:39:ca:b2:fd:68:de:96:4c:45:cd:b3:d6:
35:fa:6b:c2:5c:67:29:9f:ed:db:88:91:42:73:23:36:55:5c:
9c:46:c8:7b:1c:f8:7b:2f:3e:83:1d:32:3c:3a:5e:08:00:af:
31:20:4b:f6:4e:6f:00:21:da:ca:95:f0:44:ae:a5:e2:15:07:
6c:e5:9a:8b:5e:49:25:c7:00:df:b5:ea:cd:50:2c:32:d2:31:
65:6a:21:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:15 2025 by rpki-client