Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03488C28DA2511EFA3C161AF762E951A.roa
File: 03488C28DA2511EFA3C161AF762E951A.roa (raw, json)
Hash identifier: NNClmp6XUhrE2d4qRar20SnsDL71k4t57YM51qMBCpE=
Subject key identifier: 00:A5:EC:0D:FC:6B:EC:EA:E7:F1:3E:07:5C:5D:84:E3:68:80:CF:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014418
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03488C28DA2511EFA3C161AF762E951A.roa
Signing time: Fri 24 Jan 2025 07:29:58 +0000
ROA not before: Fri 24 Jan 2025 07:29:54 +0000
ROA not after: Wed 05 Mar 2025 07:29:54 +0000
asID: 48031
IP address blocks: 154.222.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82968 (0x14418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 07:29:54 2025 GMT
Not After : Mar 5 07:29:54 2025 GMT
Subject: CN=67934175-71be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:f5:9d:bb:b4:1a:1b:7d:39:4a:db:c2:7d:
d2:bc:88:a2:10:7f:20:c5:89:ec:dc:b1:19:bc:2a:
f0:da:1c:d7:c5:c7:8d:2e:4f:2b:c9:e3:d7:b0:96:
01:6f:1a:c9:99:0c:5f:f1:20:30:24:c4:28:43:90:
58:f2:a8:8b:21:5c:dc:fc:ff:05:5f:c7:a8:96:b0:
85:b9:e9:1c:b4:cd:48:00:a5:89:57:ad:b7:b9:29:
47:9f:73:23:90:51:d4:ce:6a:ab:03:8d:ff:2f:7b:
55:09:90:ff:18:66:d2:50:39:4d:92:4f:31:32:7a:
8f:d9:dd:2c:da:af:23:22:3c:25:a9:9b:ba:09:7b:
3d:67:86:d9:f2:62:e6:1c:5f:23:12:8b:0e:23:1c:
ee:e9:b1:f0:b8:a3:40:b7:43:5c:f2:c8:6c:0e:a1:
9e:98:ca:ec:c4:60:8a:66:1a:b2:38:ab:84:fd:a5:
a8:88:5e:a7:fa:8d:0d:98:44:b2:34:f0:54:7d:c9:
a4:19:aa:a2:77:c1:a2:3e:83:cf:a9:19:5c:46:a5:
ef:bf:89:69:f4:cc:8c:48:48:f8:ed:71:a2:6c:d7:
9e:62:29:70:38:38:32:8c:f6:5f:fd:fd:7b:55:96:
60:07:4e:26:b0:65:0a:d6:f5:91:8b:90:ce:88:52:
67:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A5:EC:0D:FC:6B:EC:EA:E7:F1:3E:07:5C:5D:84:E3:68:80:CF:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03488C28DA2511EFA3C161AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.217.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:70:79:10:0c:80:a8:0b:90:ce:c1:08:50:6d:cb:9b:d3:f8:
c3:97:2f:2f:35:2f:07:8b:fb:3c:5d:84:fc:87:27:32:bd:26:
56:25:ce:d2:9c:7b:3b:bb:09:fc:00:77:51:10:a7:e3:28:46:
09:68:ee:73:d5:a9:8e:da:d4:0a:75:9a:83:db:12:aa:3f:92:
59:8a:3b:d3:39:91:f7:98:3d:66:78:7c:99:a0:ba:b8:e4:69:
5a:f8:86:12:e0:7c:fb:3c:4a:17:4a:f7:03:34:4a:70:fc:46:
ed:a1:26:e5:47:f5:b8:39:c8:67:34:45:27:ab:ad:39:7b:3a:
21:80:59:ca:3c:17:75:14:de:7e:78:7e:93:cc:3b:51:27:70:
c7:af:55:ee:4d:d4:7f:4e:ce:b3:47:0f:ab:4d:ed:57:1e:f6:
00:43:f1:61:b9:c8:c5:30:dc:21:67:59:2d:0e:ac:e3:4b:3d:
d3:31:88:e2:13:f8:b8:46:3c:c0:c8:68:82:ea:bb:9f:40:dd:
94:be:6c:a5:7d:66:4d:68:a1:31:0e:d1:d7:b2:93:09:da:ba:
7c:2f:29:77:de:f5:ac:02:05:c1:dd:10:e3:c0:35:b8:05:bf:
7e:61:17:1a:91:41:9d:be:06:89:f1:53:b1:c8:4d:68:ce:bb:
db:6c:81:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:46:47 2025 by rpki-client