Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4714944D8C911EFB12EFB8B762E951A.roa
File: F4714944D8C911EFB12EFB8B762E951A.roa (raw, json)
Hash identifier: /RanP4gCfoN4Kq/iXnY83um5MuY2Bpk4iM8LULXGu9M=
Subject key identifier: 48:CC:66:2C:36:43:A9:AA:0F:E8:35:CC:BE:55:50:5C:9C:B0:A4:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4714944D8C911EFB12EFB8B762E951A.roa
Signing time: Wed 22 Jan 2025 14:05:37 +0000
ROA not before: Wed 22 Jan 2025 14:05:33 +0000
ROA not after: Tue 01 Apr 2025 14:05:33 +0000
asID: 63139
IP address blocks: 154.93.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81814 (0x13f96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 14:05:33 2025 GMT
Not After : Apr 1 14:05:33 2025 GMT
Subject: CN=6790fb31-5fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:0e:27:52:01:3d:6c:3a:54:6b:1a:b8:10:
b1:0f:26:5c:f9:1d:74:4f:ff:26:99:04:ed:0e:5c:
72:05:da:49:c0:37:3e:8a:b8:d8:76:a6:60:d8:b2:
fa:ed:5a:13:1d:40:1b:07:f8:e4:38:40:3c:e3:6c:
54:f4:58:76:9a:21:5e:42:7a:cc:c3:a7:b2:89:39:
b5:2c:f4:23:bb:b1:c5:83:ea:6f:7b:ca:32:73:1e:
ab:e0:82:d4:5a:32:90:8b:72:f8:f3:6a:4f:0b:01:
f6:b8:43:b5:60:4a:f8:a7:3a:e0:f0:73:bc:f0:26:
08:fc:6b:0e:2b:4c:79:fe:b9:b3:5e:ce:0e:70:b2:
e5:ce:40:a9:f5:25:34:e0:25:c9:68:22:35:71:b4:
db:34:f4:53:be:34:c8:27:73:1c:e9:fb:1f:34:46:
9a:7a:fc:b7:51:11:2f:3c:2f:8c:06:b0:af:78:93:
be:85:98:20:b3:b6:ca:d2:5b:aa:52:2b:05:16:f4:
80:cb:5e:d8:d5:4b:e2:b6:0a:1c:a5:45:80:bd:1c:
b3:45:d3:de:92:df:a1:2c:9b:4c:04:e8:1a:d1:e4:
9a:44:9a:69:c5:ca:f5:6a:63:d8:f7:b3:ba:4a:75:
21:32:dd:ba:27:21:3e:96:bf:20:ab:73:a2:46:f4:
a5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CC:66:2C:36:43:A9:AA:0F:E8:35:CC:BE:55:50:5C:9C:B0:A4:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4714944D8C911EFB12EFB8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.75.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ae:65:51:ed:9a:05:53:7b:29:9c:fb:f3:4a:ed:5e:ec:15:
8f:63:8c:04:99:ec:bb:95:b9:d1:bf:60:cd:13:95:d5:c2:ba:
07:6e:d6:a0:f2:8c:15:5e:49:3d:2b:49:ba:8c:e6:dc:7e:3e:
11:90:63:e8:30:41:6e:fb:4b:81:a9:4d:7a:3d:d9:c1:9d:b4:
35:ee:3a:95:43:36:e7:90:41:a6:11:9c:b9:eb:4e:a7:a7:f3:
6a:29:48:40:74:68:4e:99:fa:4f:88:18:ec:e3:37:ab:8f:36:
2f:8b:ab:fa:f8:1a:5b:1b:4c:4e:21:ed:2d:42:ea:bb:b9:95:
dc:6f:ab:16:77:cf:ef:43:1f:51:cc:9d:db:30:cb:08:a8:f8:
1a:62:0d:93:75:34:dd:d5:4f:34:46:2c:20:c7:fc:53:fc:b4:
39:1c:07:c2:a3:51:25:c3:7e:ec:a5:86:51:8b:10:53:92:cd:
bf:eb:3a:6b:d5:95:30:92:f3:cb:bb:02:ad:e0:64:2e:ae:b0:
82:71:3f:72:da:5d:2d:b2:04:fd:76:93:24:3c:75:6f:cb:d9:
ba:5e:a8:c8:36:e9:1b:fd:3d:9e:4b:55:0f:2b:ca:22:03:6e:
76:a6:f1:8b:dd:32:79:81:6b:76:d3:e7:10:db:85:27:b0:7e:
67:f9:30:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:06:47 2025 by rpki-client