Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06531E20DA5111EFBFA0155A762E951A.roa
File: 06531E20DA5111EFBFA0155A762E951A.roa (raw, json)
Hash identifier: TpTUZTHLZrJuys/q5ebH/dT+AAvHMyk5XE3utfNbrz0=
Subject key identifier: F4:91:A9:1E:C1:22:4A:C5:A8:60:37:48:6C:25:E9:D8:CB:81:EE:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06531E20DA5111EFBFA0155A762E951A.roa
Signing time: Fri 24 Jan 2025 12:45:01 +0000
ROA not before: Fri 24 Jan 2025 12:44:57 +0000
ROA not after: Sat 01 Mar 2025 12:44:57 +0000
asID: 44559
IP address blocks: 154.205.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83709 (0x146fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:44:57 2025 GMT
Not After : Mar 1 12:44:57 2025 GMT
Subject: CN=67938b4c-71a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:f4:14:da:86:65:35:c0:f0:d7:a2:6d:ee:
80:0f:bb:ce:c4:1b:79:92:6e:d4:b3:92:cc:92:2a:
30:b5:7f:b9:af:f5:1e:77:e6:e3:e9:19:cc:15:20:
ba:a0:9b:fd:f0:95:ac:df:5b:0f:97:da:e2:6b:15:
e1:a0:57:93:8a:55:03:70:f4:1a:70:ba:4b:e8:30:
45:b9:49:c5:cf:5e:ce:8e:81:1b:cf:1b:de:76:fd:
13:4f:a0:2c:3a:19:53:28:b7:af:23:5b:69:39:3a:
85:ee:27:23:73:a4:bd:8a:af:79:9c:7d:28:ad:7b:
a7:13:3c:c2:6b:59:52:15:b0:c6:4f:9a:6f:65:73:
18:a3:e1:4d:6b:0f:f7:35:4a:b2:90:57:77:0b:f6:
78:1b:de:1a:35:19:0a:c4:55:5d:cf:9e:08:a3:3d:
e4:8e:c7:89:e5:ff:ef:90:8c:86:0d:7c:d0:94:15:
af:71:9e:a2:64:d5:4a:d8:06:61:ae:6b:31:30:24:
cd:20:ea:af:8e:62:c0:f6:57:19:55:3d:62:f4:40:
de:43:6f:0b:34:f6:56:c9:4a:35:21:33:11:9e:5d:
16:dc:9a:25:4f:bb:4e:f1:31:9b:4f:f4:28:6c:a1:
2c:5d:97:a1:97:d3:af:7b:84:44:4a:68:ef:d0:02:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:91:A9:1E:C1:22:4A:C5:A8:60:37:48:6C:25:E9:D8:CB:81:EE:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/06531E20DA5111EFBFA0155A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.238.0/24
Signature Algorithm: sha256WithRSAEncryption
77:fc:59:c1:8c:3e:2b:fe:c8:3f:c1:43:c7:58:a3:ec:3d:d8:
9c:45:c8:9e:d8:f6:e1:28:4e:10:09:4b:7a:09:0e:8a:d8:00:
e8:f5:b0:5b:9b:08:b4:c3:86:0b:a3:5e:c9:ed:56:00:c7:8f:
ec:3a:c9:fb:b5:e1:c8:68:77:2a:92:dd:5a:2c:d9:4c:4b:42:
1b:93:71:e0:b3:4b:43:11:bc:27:04:1a:f8:0c:b8:1d:1d:a1:
7f:94:bd:96:16:93:87:c4:3a:51:b1:c0:83:9e:8e:87:f0:ab:
32:c3:2e:9f:cb:07:f3:bc:d2:62:45:9f:9b:4d:3d:09:cd:ad:
94:4b:07:3e:1d:02:19:00:e2:01:6d:3b:e2:0d:4e:db:5b:a8:
fc:8e:8e:83:e4:ad:54:e2:90:2d:d6:82:61:75:34:0f:cf:3a:
2c:2b:d4:22:12:45:e0:0b:aa:36:1c:4e:10:d0:3d:47:7b:dc:
e6:0a:51:3a:80:75:36:0f:ed:5b:a8:7b:ab:5a:c1:a1:28:1b:
da:5f:99:a3:c5:5d:b2:70:29:0d:62:77:22:77:ac:bd:d1:aa:
73:64:a6:75:a4:32:52:ea:71:81:29:0b:84:78:90:91:85:6b:
fd:4c:90:bd:b5:d1:f4:3d:46:19:01:67:c5:b9:56:64:f8:8b:
83:b4:b8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:23:53 2025 by rpki-client