Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E42D8AA6DD7011EF9F159475762E951A.roa
File: E42D8AA6DD7011EF9F159475762E951A.roa (raw, json)
Hash identifier: zbQTRyrphSd60X4jJY3XgpeF6Ciz+Oad66nsBJznI+w=
Subject key identifier: CD:48:75:03:22:DC:79:2C:FA:DB:ED:17:F3:C6:A7:56:7C:FD:D6:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D02
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E42D8AA6DD7011EF9F159475762E951A.roa
Signing time: Tue 28 Jan 2025 12:10:41 +0000
ROA not before: Tue 28 Jan 2025 12:10:37 +0000
ROA not after: Wed 12 Feb 2025 12:10:37 +0000
asID: 5065
IP address blocks: 154.94.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85250 (0x14d02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 12:10:37 2025 GMT
Not After : Feb 12 12:10:37 2025 GMT
Subject: CN=6798c940-eda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:67:69:7e:1c:71:3a:9c:3a:c9:13:ed:83:
52:42:9d:24:95:27:bb:c4:a3:4f:f5:bb:01:f9:dc:
bb:d6:cf:71:a3:73:cd:4a:d4:18:44:b0:97:3e:ab:
23:a8:64:e2:a4:a0:8c:3e:16:b2:51:bd:83:99:2e:
15:5d:a6:40:3a:0f:a0:18:98:ce:d1:76:a3:e3:6a:
dd:bf:50:f7:9c:16:65:8a:7b:79:4c:06:20:cc:00:
8d:ce:94:11:9c:72:e8:3e:e9:a6:f4:b4:13:03:32:
04:f1:51:a4:2a:f6:5e:92:a3:12:fa:b7:17:bb:9f:
f1:af:78:d0:65:d4:77:82:e7:f9:6c:5f:64:63:7a:
9f:82:16:2f:0a:86:6a:90:cf:9a:e1:22:36:29:e6:
13:23:77:97:f8:c8:af:5a:e4:64:bf:19:83:be:ea:
43:fe:e5:0f:3d:e0:97:4c:b0:37:34:ee:e3:8a:f3:
a3:20:12:81:c6:03:9e:24:ef:4b:f1:94:3e:90:93:
ba:59:49:a6:c7:ae:6f:3f:94:e8:d8:14:61:0e:57:
2b:5d:75:dc:5e:86:c4:da:f4:6e:4e:38:a3:4b:d7:
55:4b:92:05:3c:da:76:6a:f9:ff:ee:9d:ec:d9:86:
fc:dc:a2:7f:59:ee:97:b6:0e:3d:af:67:36:3a:6c:
54:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:48:75:03:22:DC:79:2C:FA:DB:ED:17:F3:C6:A7:56:7C:FD:D6:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E42D8AA6DD7011EF9F159475762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.37.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:b1:36:7c:0a:dd:82:f8:f1:31:13:88:db:6e:50:17:d8:d1:
f6:a1:ff:81:7d:c2:32:0b:cc:82:be:35:77:00:9f:9e:fb:20:
cf:a0:56:fb:b7:ce:cd:cb:2a:9e:ea:75:ae:fe:ed:82:16:5c:
54:9b:e0:02:57:f6:8a:7c:22:b3:eb:e6:6e:36:66:12:16:83:
33:e4:a1:13:96:2f:8a:f0:0c:21:0d:d8:4c:18:ef:8d:7c:aa:
b1:66:e2:5a:ae:fc:9d:8d:bf:26:e9:78:db:1e:82:84:4f:1c:
a7:9d:97:99:a8:06:33:b1:b5:00:a7:34:eb:bb:f0:c5:8f:68:
6b:f3:c4:a7:36:69:3c:22:2e:b1:7a:ee:6d:2f:67:7a:f2:d5:
0f:5b:f5:6f:2b:f3:12:29:bb:b8:51:c3:e8:3b:cd:ec:91:b6:
cd:4d:8e:ef:7f:50:9e:4a:e1:6a:45:d3:d8:55:22:74:f4:9f:
83:9b:b0:93:c2:df:42:b4:3d:ec:89:1d:26:37:00:38:09:55:
11:e3:e4:c3:bb:35:2f:36:84:b9:32:73:40:08:73:a1:83:f0:
07:53:31:ac:cc:c6:e0:e9:9f:af:fd:8c:9f:2b:51:1d:7d:55:
22:64:9f:c9:e7:4e:62:91:de:9c:e3:db:c3:df:38:f4:c7:69:
cc:d2:6d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:23:48 2025 by rpki-client