Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDBEE190B21B11EFA7B21BB5762E951A.roa
File: DDBEE190B21B11EFA7B21BB5762E951A.roa (raw, json)
Hash identifier: EnMmkTCqU5bDCx8daF0SiOMuP42NZa9/elxtdVNyizc=
Subject key identifier: 96:49:CE:D5:42:9C:8E:F7:A5:0E:01:C3:B5:DE:D6:E7:15:40:91:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDBEE190B21B11EFA7B21BB5762E951A.roa
Signing time: Wed 04 Dec 2024 08:43:43 +0000
ROA not before: Wed 04 Dec 2024 08:43:39 +0000
ROA not after: Sat 01 Feb 2025 08:43:39 +0000
asID: 138915
IP address blocks: 154.93.106.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71662 (0x117ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 08:43:39 2024 GMT
Not After : Feb 1 08:43:39 2025 GMT
Subject: CN=6750163e-2d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:f4:d8:55:fc:6a:62:2a:6a:c2:93:ca:c5:
c2:f9:6a:43:aa:8e:90:8b:7f:a2:a3:43:e6:f6:43:
f7:d8:50:9c:28:91:41:34:7f:cd:01:98:8f:99:09:
28:2c:1b:5b:18:0b:4f:90:aa:3d:43:43:77:8a:33:
3c:a3:65:02:a8:b9:fb:d5:4b:04:7f:27:d5:94:c2:
ab:b0:a6:cb:f3:e3:a6:45:cd:20:06:3c:25:8b:71:
6c:dc:90:80:ec:40:73:cf:8c:c3:4f:36:5a:ea:15:
14:58:e4:bd:fe:96:e3:ba:95:95:cd:1f:4b:2c:8f:
9d:41:e6:7c:eb:d0:f0:38:d0:1d:07:1a:15:72:eb:
44:6c:ee:a2:89:f6:b4:7b:7d:bf:ad:4c:d8:df:2a:
60:ee:ec:14:f3:03:51:0c:7c:fa:2a:60:d0:d5:e0:
f9:66:d3:2a:ae:93:c9:e7:69:38:1e:c2:b5:7e:26:
79:83:17:0e:c8:47:c2:c4:9e:ff:f3:4c:0a:3a:e2:
55:66:35:d6:0a:3b:5b:02:00:db:a1:05:6d:df:0c:
ae:7f:f6:c2:01:8d:56:01:66:6d:8f:e3:9a:04:f5:
bb:90:8c:cc:22:0c:e7:57:2d:72:3b:6b:f9:0e:cc:
2a:35:fb:84:1d:41:70:03:f6:8e:b2:02:e4:7e:cd:
84:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:49:CE:D5:42:9C:8E:F7:A5:0E:01:C3:B5:DE:D6:E7:15:40:91:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDBEE190B21B11EFA7B21BB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.106.0/23
Signature Algorithm: sha256WithRSAEncryption
78:d4:9e:86:fd:01:25:5c:f8:e5:49:7b:fc:77:33:2b:9b:b0:
87:fc:21:29:09:b8:3b:5e:ea:83:b2:ba:84:0e:98:67:1d:ea:
4c:6f:8e:6f:ec:3b:f8:20:79:10:e2:98:32:b9:30:aa:49:7d:
62:11:99:9b:ea:e1:e5:d1:a1:10:17:86:b6:4b:de:dd:22:5a:
6a:8a:35:a2:2e:99:09:45:a6:bf:d5:53:bf:29:67:da:c4:63:
85:22:62:db:e1:57:27:4f:67:9c:2e:cb:bb:88:6c:69:af:39:
fb:2a:1b:67:cb:a2:ff:99:3c:84:05:1d:36:7d:36:38:55:d3:
ef:6e:fc:92:64:bd:3b:db:0e:eb:66:d8:e7:ec:89:1e:0f:f1:
fb:fc:be:29:4b:45:0f:96:8f:8c:4a:0d:3c:b8:e0:74:6d:58:
95:37:64:c2:ae:ed:83:cf:87:b9:f5:a7:b2:b5:6f:b0:4f:28:
ff:3a:56:71:5a:90:e3:df:17:51:c8:d6:86:71:a7:74:81:ed:
45:a5:54:bd:0b:03:5e:62:05:6c:df:ac:6c:6c:15:66:b4:c8:
4e:bc:aa:04:6f:1b:09:e0:0a:b6:be:7f:18:b4:3f:f9:d9:d6:
4e:ea:f1:b1:6f:43:53:b2:ce:9e:98:13:2b:57:17:36:3c:00:
c4:d3:9b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:04:52 2025 by rpki-client