Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9DE3E5EDB3711EFAD034075762E951A.roa
File: E9DE3E5EDB3711EFAD034075762E951A.roa (raw, json)
Hash identifier: sZh811t48DuIkSKjcP/d7NNGJ9mlH2IoFEQo34WqrBw=
Subject key identifier: 43:A5:C5:F7:23:F3:45:D4:45:6E:6B:75:80:7A:59:6C:70:B8:CF:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9DE3E5EDB3711EFAD034075762E951A.roa
Signing time: Sat 25 Jan 2025 16:17:46 +0000
ROA not before: Sat 25 Jan 2025 16:17:43 +0000
ROA not after: Fri 07 Mar 2025 16:17:43 +0000
asID: 138915
IP address blocks: 154.223.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84522 (0x14a2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 16:17:43 2025 GMT
Not After : Mar 7 16:17:43 2025 GMT
Subject: CN=67950eaa-c3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:56:e8:b0:52:ab:f8:3b:07:5a:f3:cd:3e:4e:
48:5c:3d:d5:51:cd:7a:cb:9d:88:92:c2:0e:66:da:
a5:4b:20:b6:2a:3e:ea:98:f7:10:8d:87:bb:7a:97:
e6:1e:59:49:14:17:d7:5e:57:3b:73:fd:ff:c9:d7:
f7:9d:45:b3:27:3f:c4:15:cc:71:f2:e0:35:28:14:
4d:50:6e:c7:62:51:60:10:01:ce:b5:6b:65:a8:63:
06:ae:79:3b:c8:4d:3e:99:93:98:d6:d0:66:a6:3a:
fc:f1:30:53:19:0d:5f:02:70:5d:69:5b:f5:72:b9:
bf:ae:a0:14:04:9c:4f:fb:ba:52:ee:e6:28:17:b1:
57:69:fd:4e:38:45:6b:01:c5:bf:96:a9:c6:77:a4:
d0:31:68:b2:fe:4b:84:02:c2:28:79:0c:9d:9c:b7:
0e:0d:62:5d:36:57:17:49:c0:c2:f8:6e:69:2a:50:
6f:84:11:45:d9:22:f5:9c:90:44:18:a2:4c:b1:4c:
ea:67:5f:44:da:78:d1:f8:e9:a0:d3:78:b1:1d:14:
c6:ce:e4:be:b1:20:28:fd:33:54:09:7a:32:8c:b7:
1d:5f:52:e3:29:70:ba:55:ca:a5:6c:d1:3c:28:52:
3b:1b:60:12:4b:6f:6a:56:64:5d:cf:64:18:5b:24:
6b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A5:C5:F7:23:F3:45:D4:45:6E:6B:75:80:7A:59:6C:70:B8:CF:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9DE3E5EDB3711EFAD034075762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.74.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:e3:32:36:6b:c0:c9:98:08:15:aa:d3:d4:c2:f8:51:8e:43:
05:30:23:fe:03:17:7f:e9:cd:99:7a:12:bd:a6:60:ab:d4:8d:
05:46:4a:4b:b1:ca:90:44:6f:79:6e:c3:9f:52:bb:3e:7c:1f:
77:0a:8a:60:66:99:31:91:89:ee:7f:8a:ce:31:fc:d7:33:18:
d4:59:b1:15:eb:00:6d:97:94:5e:e8:23:5c:66:44:bd:3f:b4:
3e:9f:49:bd:e5:8c:e5:d3:46:4f:4b:f2:a0:86:c1:e3:a5:bc:
59:e7:b8:97:10:2e:a2:71:8c:18:a1:50:8c:c1:4e:f6:3f:72:
7d:88:d7:00:47:e8:50:19:34:02:bd:ee:f9:e8:b5:82:e5:94:
c2:52:d7:87:6b:8a:c2:64:c1:16:4f:92:7b:f3:cb:55:19:64:
a2:b5:f9:58:bc:b1:eb:bf:16:ad:6c:10:77:a7:0b:59:71:8b:
e3:f8:da:a3:98:ee:e1:14:ad:18:f1:9b:e7:51:07:93:3d:b1:
1f:a1:df:c6:1e:31:38:12:98:b0:39:37:b7:c8:59:79:7a:5f:
4a:dd:61:4e:59:38:e0:7f:c3:f6:ab:48:a7:58:a7:c5:67:4d:
aa:5e:90:f3:04:60:3f:0a:6b:10:a4:39:66:02:7a:de:f5:66:
7e:b0:e7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:57:44 2025 by rpki-client