Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9954A3ADA7011EFA8E86FB2762E951A.roa
File: F9954A3ADA7011EFA8E86FB2762E951A.roa (raw, json)
Hash identifier: AjV4tZIHpd2KLhIFR4fLcWikWtCRRPAaZE+axokbdgo=
Subject key identifier: 48:49:2B:E3:E0:06:72:09:D0:38:5B:D7:C1:47:CB:49:CA:A6:0C:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9954A3ADA7011EFA8E86FB2762E951A.roa
Signing time: Fri 24 Jan 2025 16:33:43 +0000
ROA not before: Fri 24 Jan 2025 16:33:39 +0000
ROA not after: Mon 03 Mar 2025 16:33:39 +0000
asID: 203020
IP address blocks: 154.223.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84194 (0x148e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 16:33:39 2025 GMT
Not After : Mar 3 16:33:39 2025 GMT
Subject: CN=6793c0e7-b8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:a1:19:0f:ae:75:a5:81:2f:60:40:e0:71:
3a:32:8e:63:3e:79:28:de:76:f2:44:61:ce:ab:17:
7a:75:8a:ed:87:46:b2:f9:73:10:1c:2a:bb:f8:31:
0d:a1:2c:56:a9:a5:65:68:eb:30:5e:f7:2c:29:a7:
bc:21:fa:74:4c:aa:f3:98:68:cc:96:17:d1:19:b1:
70:fb:e8:60:48:4b:58:7a:52:cf:37:0c:5c:17:88:
82:98:4e:09:51:08:18:da:e4:81:df:01:45:8a:d6:
d2:40:42:44:5e:ae:e1:c1:89:54:8f:ff:78:13:ee:
04:6e:aa:cc:43:9b:55:5e:45:94:aa:a4:f9:2b:cb:
ca:52:c7:62:e5:71:f3:47:bc:9d:20:1d:a0:b6:7a:
4c:5a:1b:58:a0:35:0f:cb:58:87:96:24:d4:62:52:
45:68:9d:c7:41:48:e6:dd:81:80:e9:8d:c3:c1:80:
09:54:03:7e:f3:d2:5a:de:26:0c:0b:8a:e4:84:ed:
d4:06:75:c4:f8:fa:31:16:b0:ab:78:5b:04:b4:81:
df:1f:25:ad:19:99:fe:48:d0:ad:ea:b8:8a:01:23:
0e:21:03:8a:25:31:5d:27:b3:16:cb:bd:17:74:e8:
71:db:6a:80:e8:3f:f1:4f:b1:58:3d:e2:df:fc:1d:
43:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:49:2B:E3:E0:06:72:09:D0:38:5B:D7:C1:47:CB:49:CA:A6:0C:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9954A3ADA7011EFA8E86FB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.144.0/20
Signature Algorithm: sha256WithRSAEncryption
59:29:89:bc:e0:25:82:a9:48:bf:87:1a:24:7c:28:e0:1c:37:
05:6a:8b:f9:89:33:ed:83:ef:54:06:6a:1f:b4:eb:af:e1:77:
79:46:82:fe:31:a2:2b:9f:99:96:ab:88:8e:42:48:1a:3d:64:
85:f0:a4:d5:d8:60:05:d0:7a:67:79:15:8a:4b:36:af:db:33:
a2:e5:81:12:7f:ba:1c:5f:b9:a3:21:b1:61:e8:5b:2e:28:2d:
fc:13:bc:e0:7e:9f:0a:b4:42:46:8c:5f:4f:f7:ef:79:c8:46:
1e:49:ed:1a:c7:70:73:04:db:6a:00:d2:f0:ed:a2:4e:8f:82:
45:21:b4:81:0a:09:fc:75:b6:36:f8:4b:79:f6:15:b8:e1:83:
91:b4:d4:10:79:f4:72:47:2a:88:16:f9:d1:15:d6:99:22:bb:
1d:e4:66:d8:70:9c:80:49:a4:9f:d2:21:9a:92:21:c3:30:20:
b4:bc:b4:aa:2d:4d:a4:d7:31:74:fd:9c:62:33:4a:e2:5b:93:
7d:80:00:83:c1:13:15:78:13:32:88:04:bd:89:d2:4d:58:b1:
a3:74:ec:e5:7e:e6:78:67:6d:6b:83:90:29:f8:b2:9f:6e:e0:
42:e8:ea:a5:84:42:d0:5b:14:6f:02:fb:ae:1c:a0:a2:5e:af:
88:f0:68:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:47:00 2025 by rpki-client