Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F444DFF0DBF111EF813DC559762E951A.roa
File: F444DFF0DBF111EF813DC559762E951A.roa (raw, json)
Hash identifier: 6lnItBVs/Ygn3LGOniyARAmHTSqsZWvN6d0iH43/Le4=
Subject key identifier: FB:12:3D:F1:E3:F6:01:FE:A0:AE:E8:25:1A:07:42:B3:06:62:62:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014ACA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F444DFF0DBF111EF813DC559762E951A.roa
Signing time: Sun 26 Jan 2025 14:29:30 +0000
ROA not before: Sun 26 Jan 2025 14:29:26 +0000
ROA not after: Fri 21 Mar 2025 14:29:26 +0000
asID: 138915
IP address blocks: 154.93.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84682 (0x14aca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 14:29:26 2025 GMT
Not After : Mar 21 14:29:26 2025 GMT
Subject: CN=679646ca-d1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:a5:2c:65:a2:02:9c:ff:c1:29:27:d6:c3:
75:42:64:e1:a6:8f:b0:42:bd:70:83:b1:8d:93:fa:
8b:4c:7d:72:a9:0e:1c:ce:7c:d5:d3:1b:b8:42:10:
1f:30:65:2c:62:f5:e9:2e:75:6e:56:b7:3e:97:95:
b1:5b:fa:be:5e:79:b7:9b:a6:e0:28:ce:c5:2d:8c:
a4:04:d3:12:8c:28:52:b4:2f:37:5b:5a:24:53:e4:
2b:60:ab:fd:7e:d4:85:9a:fc:0a:69:48:73:78:d8:
c8:b1:3b:a6:d4:0b:e8:ee:e1:27:11:e1:1c:f7:65:
77:70:9a:8f:a3:f8:95:e3:4b:6f:c5:74:3a:61:e4:
af:6c:6f:d7:88:75:9a:c9:c3:f3:6c:9b:03:7a:16:
99:46:ef:3e:07:ff:de:39:35:d3:b3:d0:3c:35:1b:
d5:1a:ab:48:f7:8d:97:00:2f:4a:39:a7:b5:ae:7c:
3f:f5:5a:f5:c5:22:fe:19:d5:85:a4:63:ed:96:71:
e2:a3:bf:3c:3f:54:10:33:94:64:ee:7a:e8:55:ec:
01:8d:24:4f:3f:b5:7c:ed:e3:89:0c:a4:8c:56:f8:
a2:06:42:3e:8d:01:cd:c9:e0:c0:be:db:0c:a4:3b:
93:ef:3a:db:68:00:c3:2b:83:a7:89:e3:cf:99:e8:
18:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:12:3D:F1:E3:F6:01:FE:A0:AE:E8:25:1A:07:42:B3:06:62:62:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F444DFF0DBF111EF813DC559762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.49.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:b7:70:44:b5:33:ae:a5:a0:8e:26:d1:6d:10:0a:ac:fd:e2:
fd:66:f0:2a:a5:41:31:f5:14:60:bd:e5:38:cf:17:f4:c7:c1:
5d:82:07:2b:0b:a8:3e:06:5a:54:75:7d:0f:98:c9:e1:b3:a0:
d8:73:62:09:e9:8f:f0:b0:ed:6c:64:7d:ef:7d:39:fe:72:a2:
d3:3e:be:4e:52:b8:43:68:4f:5b:df:75:ac:6c:04:2f:f5:5b:
7e:e8:0c:cc:cf:aa:3c:03:5e:1c:76:97:f5:e5:60:6f:7e:17:
25:a6:4e:89:49:db:96:54:75:8c:e1:cd:11:84:a0:5d:2e:25:
4e:d4:d6:24:22:a1:aa:3c:8e:d3:10:b7:bf:cc:39:bc:d6:a2:
aa:03:99:bf:3a:ba:82:cc:13:c1:81:d1:69:ff:02:cd:10:90:
c2:0a:55:b7:cf:21:f9:da:f8:ac:17:97:4f:25:dc:61:f3:87:
57:e9:3e:1b:42:e3:73:8b:f2:39:7d:28:70:83:81:91:7a:e3:
51:53:86:96:35:82:1e:ab:1c:57:db:e3:6c:53:f1:8c:ef:10:
01:56:b2:e3:2e:50:ce:70:4f:a5:44:c6:db:fe:4b:35:1a:ef:
25:49:da:0c:0b:82:24:7b:bd:b7:9a:ed:0a:87:38:54:3f:f4:
45:cb:17:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:56:39 2025 by rpki-client