Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0189947AD95A11EF8C156558762E951A.roa
File: 0189947AD95A11EF8C156558762E951A.roa (raw, json)
Hash identifier: 85LpLX+i19inOH+XWHfZBc+VgtwBaxBiM5rD5Z3yfoI=
Subject key identifier: 46:22:F5:B5:05:AA:75:43:49:2F:68:6B:8F:60:D7:54:2D:3C:E4:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014031
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0189947AD95A11EF8C156558762E951A.roa
Signing time: Thu 23 Jan 2025 07:16:47 +0000
ROA not before: Thu 23 Jan 2025 07:16:43 +0000
ROA not after: Sat 08 Feb 2025 07:16:43 +0000
asID: 18229
IP address blocks: 154.210.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81969 (0x14031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 07:16:43 2025 GMT
Not After : Feb 8 07:16:43 2025 GMT
Subject: CN=6791ecdf-14d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c6:2d:d0:da:29:82:90:63:e8:2f:10:f4:1a:
de:25:f6:28:c7:c7:9a:19:05:a5:53:57:93:e3:ec:
0b:aa:ad:83:a3:6a:bf:70:87:94:25:02:29:66:c9:
9a:41:92:3c:87:1a:ab:18:61:cb:cd:1a:b0:49:e2:
68:43:b1:fa:6f:ad:73:98:d3:c6:b5:3e:d6:7e:1b:
a2:44:33:e5:12:f5:1f:45:77:01:8d:68:1f:08:fa:
ed:18:89:b5:9a:6e:94:a9:30:15:55:78:2f:53:7d:
e8:57:12:9b:e2:9b:70:95:eb:a2:61:b2:3d:cc:00:
47:1b:d9:83:36:7e:7b:d2:68:b1:52:2d:d2:dd:b0:
9b:20:82:71:d8:86:dd:33:b9:5e:37:6c:22:cf:ee:
1b:e8:cb:0d:2c:53:15:88:73:e1:84:43:5b:6f:d9:
6d:ca:9f:17:96:9f:42:b0:13:dd:3b:cc:bd:e7:fd:
ec:ca:90:3c:e2:a5:37:08:09:c7:f2:80:5e:32:2e:
a1:8d:79:af:b7:58:15:64:59:5d:60:9b:6c:7f:c2:
47:d9:69:db:d1:e2:4d:d2:9b:bb:a9:70:43:3c:36:
6c:21:c2:b3:c7:29:c3:c3:0c:ad:bc:4c:21:31:53:
73:07:9f:30:df:84:d7:43:7a:1a:ed:c9:5c:58:cd:
62:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:22:F5:B5:05:AA:75:43:49:2F:68:6B:8F:60:D7:54:2D:3C:E4:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0189947AD95A11EF8C156558762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.154.0/24
Signature Algorithm: sha256WithRSAEncryption
12:0b:af:bd:4d:21:20:2e:72:90:45:6e:16:13:38:f1:1b:32:
e0:1b:7a:1f:31:10:68:14:d3:5a:50:22:c2:ac:2b:10:fa:bb:
9e:70:ff:87:35:80:a0:08:e2:4f:7f:8b:76:2c:a3:f5:28:e9:
de:33:6f:15:a4:2f:db:34:12:d5:24:68:9f:6a:c6:9c:e2:86:
ac:d3:95:3d:75:cd:01:a1:cb:85:ab:23:e4:96:af:94:b0:a3:
5c:f5:45:8b:b2:8d:6d:0a:dc:84:76:41:28:f7:89:da:ab:5e:
f9:3c:21:51:54:cb:31:87:e2:88:f4:7d:00:0e:32:89:b6:60:
37:63:3e:cf:a4:a4:2f:07:16:33:67:c6:26:9d:bf:65:fe:91:
2f:82:d0:0a:e2:31:ec:01:2b:3c:22:9d:5f:e0:d1:2b:22:c1:
63:7b:db:40:e2:59:8a:19:4d:78:38:65:bb:9b:4c:d3:1d:7b:
a0:57:0f:8a:ba:21:a1:32:56:86:76:2f:fb:e6:ff:80:75:6b:
a1:df:8e:f1:96:66:86:06:85:b1:03:54:2b:45:4f:4a:32:71:
c6:94:b5:62:02:4c:72:a0:0f:3b:f2:0f:2b:56:86:48:4e:25:
3a:1e:40:c4:06:16:e1:f2:5a:7a:4f:47:cf:5d:ea:cd:de:84:
28:b2:de:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:48 2025 by rpki-client