Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB34D1CEDBF411EF81ED616C762E951A.roa
File: EB34D1CEDBF411EF81ED616C762E951A.roa (raw, json)
Hash identifier: rfMHvb5QqdiLKGmfUsFNDcvU0ZjRSGkfdHuY/llRVRs=
Subject key identifier: 74:D2:2C:0A:BD:EB:44:17:3D:90:86:D0:9F:94:F7:79:61:36:6E:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014ADC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB34D1CEDBF411EF81ED616C762E951A.roa
Signing time: Sun 26 Jan 2025 14:50:44 +0000
ROA not before: Sun 26 Jan 2025 14:50:40 +0000
ROA not after: Fri 21 Mar 2025 14:50:40 +0000
asID: 138915
IP address blocks: 154.93.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84700 (0x14adc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 14:50:40 2025 GMT
Not After : Mar 21 14:50:40 2025 GMT
Subject: CN=67964bc4-788c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:75:f4:4c:a8:91:cc:45:22:9d:e8:65:2d:
59:80:ed:81:bf:f3:2d:9d:fb:e3:20:e5:b2:ff:71:
59:fa:f6:bb:e2:ef:ff:d0:30:a3:45:7f:c7:74:ba:
68:54:69:d1:2f:1b:0b:0c:62:a2:b9:7e:f6:91:1b:
c9:c4:cd:d5:45:2d:f4:86:2d:14:58:72:c0:1f:8b:
29:55:e5:84:e3:bb:92:a3:03:62:11:4b:cf:76:8f:
e6:8f:46:3c:5d:f6:2e:7c:05:e0:10:2b:46:06:d6:
06:16:0d:7e:fe:7d:30:4b:f9:2d:1c:7b:93:6f:d5:
f3:d1:2d:3b:3f:4a:5b:50:1c:73:2d:5b:ca:9f:1e:
3d:9f:db:c2:78:1e:8e:e3:40:fe:13:49:81:8b:e3:
5d:60:77:8d:7c:d3:5f:04:ef:89:93:70:37:d1:16:
a6:b9:85:a3:f7:4a:ed:6c:bb:5d:f0:51:93:5a:24:
de:f6:2b:cf:8d:b5:f5:79:8a:b8:4b:86:50:be:67:
d2:d6:49:f2:0c:52:32:c1:22:63:d1:15:13:cf:05:
87:bc:25:05:23:1e:e5:36:dc:00:76:03:72:70:a9:
92:5a:53:90:ab:8e:f3:22:07:32:0f:80:b8:ff:2c:
eb:4e:51:bd:35:7c:ab:68:b7:8a:f7:c8:d3:af:32:
63:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D2:2C:0A:BD:EB:44:17:3D:90:86:D0:9F:94:F7:79:61:36:6E:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB34D1CEDBF411EF81ED616C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.63.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:94:7d:cb:a2:6b:47:c0:22:b6:5e:e5:e6:3d:70:9b:9b:88:
13:65:2f:82:7f:5c:e7:99:0f:8a:07:79:2d:a4:3a:7b:66:fd:
f5:3b:29:52:ce:bb:92:1e:20:db:ab:37:e5:8e:2a:91:99:b9:
8e:8b:66:e2:66:ed:de:1f:7e:58:fa:05:4e:6f:d7:67:2f:47:
61:8e:5e:8d:26:d5:2f:16:66:31:5b:c5:e2:94:b3:d7:53:9d:
a1:7b:fc:b3:e7:1d:4c:8d:25:3d:05:32:c3:23:f9:b5:82:1d:
d8:99:cb:7a:70:dc:5b:aa:e0:5e:9d:b7:ef:7f:4c:e2:02:9d:
f4:21:5f:44:0d:9d:6e:6c:3c:7d:75:4f:b3:ba:f0:a9:b6:96:
c6:07:72:4c:56:01:20:8f:9e:ed:9d:79:49:22:ce:d6:a2:82:
1d:7a:66:c6:c4:c7:d3:ef:20:56:62:19:c4:0d:60:d6:6c:e5:
13:1e:67:43:51:79:1b:0a:d1:ae:b3:84:2e:68:f2:7c:1e:7a:
53:10:4e:50:9b:38:ad:a3:c6:40:14:fd:23:9e:e6:94:6e:ab:
f1:e1:83:1c:07:d3:47:d4:01:56:18:7a:6e:02:4d:c1:f2:67:
86:ef:38:73:98:8f:64:55:76:8a:f6:97:a3:ff:5b:83:8d:f6:
0e:64:ae:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:05:29 2025 by rpki-client