Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06411AC2B21011EFAD81DE65762E951A.roa
File: 06411AC2B21011EFAD81DE65762E951A.roa (raw, json)
Hash identifier: 36krZ6JQ7e/3dfXWyhfg2snjefIwyNIbTM0dR/lotsw=
Subject key identifier: 47:6F:FD:77:F1:6A:84:FE:61:FA:CA:2B:E9:94:18:8C:B4:90:70:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06411AC2B21011EFAD81DE65762E951A.roa
Signing time: Wed 04 Dec 2024 07:18:56 +0000
ROA not before: Wed 04 Dec 2024 07:18:53 +0000
ROA not after: Sat 01 Feb 2025 07:18:53 +0000
asID: 150008
IP address blocks: 154.210.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71590 (0x117a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 07:18:53 2024 GMT
Not After : Feb 1 07:18:53 2025 GMT
Subject: CN=67500260-7d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:6e:08:cf:1b:f9:47:d4:62:38:9b:b8:cf:
a3:02:e1:1a:97:e6:5a:b9:13:60:14:3e:9a:89:67:
61:d1:9d:28:60:9b:76:5a:e1:57:44:92:9a:d9:58:
a1:bb:27:3c:76:56:2e:8a:79:3b:5c:01:b8:45:02:
46:04:e0:18:c7:a5:12:8b:ea:98:9c:1e:e2:a4:79:
5e:16:2a:c2:96:71:49:53:68:d1:54:9d:6b:0b:a2:
0c:8b:be:a1:41:ac:6e:73:ac:76:43:c8:b6:ee:d8:
a5:a3:2c:d6:d8:cc:10:24:df:4d:03:92:6b:6f:97:
b9:df:7e:48:c9:3e:37:0e:ac:9e:94:2b:ce:19:10:
17:c1:bd:63:b8:5d:6e:74:12:9a:21:1a:b9:a4:e9:
b0:77:c8:5d:5b:a1:f3:25:9d:52:c3:a8:56:51:27:
ae:43:9d:44:f3:e2:d7:f1:a0:e7:ee:59:68:df:02:
3d:d0:f0:e5:1f:26:b2:4e:82:06:a6:34:bd:5e:71:
47:cb:a2:4e:b6:d2:9b:f7:32:6b:5b:bb:c4:aa:37:
40:66:e6:05:63:bd:05:7f:eb:1b:e0:c9:d8:8b:48:
0a:df:d9:45:28:7e:b4:d1:c6:c2:a6:d4:fc:bf:02:
f6:01:04:10:18:cd:da:c7:ef:aa:21:b3:94:59:97:
c3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6F:FD:77:F1:6A:84:FE:61:FA:CA:2B:E9:94:18:8C:B4:90:70:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06411AC2B21011EFAD81DE65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:13:5d:eb:3f:36:ff:d1:60:24:e2:8b:84:06:9c:32:8d:0d:
4c:ea:88:97:b1:a2:38:b8:19:84:7e:41:4e:5c:c2:52:cc:b3:
ff:c0:1f:96:17:97:a0:3f:a7:e1:18:4d:9a:c8:1d:2e:29:ec:
ee:57:28:c9:59:b7:8b:5e:6e:5e:e7:36:ab:b5:1f:c7:35:38:
38:b7:f9:08:1c:24:99:0b:c6:69:dc:a7:c2:58:26:93:28:8c:
75:21:72:e0:4c:45:55:2e:16:aa:40:c4:7b:d4:e2:de:a5:f1:
8e:4b:7d:97:01:93:28:19:63:ca:6c:c9:65:ec:62:36:ce:31:
dd:26:43:47:7e:3b:f7:2d:d6:81:0a:5e:3c:35:31:09:d3:85:
4e:b0:9e:65:87:61:ce:e3:0f:54:0f:93:6f:42:c4:ce:68:d9:
86:da:2d:d2:35:83:40:bb:24:67:24:45:1d:fe:60:db:fc:b6:
fa:16:dc:10:31:6c:c8:d5:d6:ad:12:6e:ec:d5:4a:7c:21:d8:
4d:97:28:0c:c7:c0:3f:18:a7:72:43:8e:e7:fa:36:fb:cb:1b:
c0:5f:33:cb:dc:be:0f:06:4a:6a:70:63:e8:67:57:77:45:08:
86:8c:6b:a9:86:e3:8b:d2:49:22:3d:9d:03:e9:5a:e3:17:d7:
d8:36:00:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:44:22 2025 by rpki-client