Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/084C1AFACADF11EF8FB20A9C762E951A.roa
File: 084C1AFACADF11EF8FB20A9C762E951A.roa (raw, json)
Hash identifier: YEfcbkWHABUgDzmH+jb5zMpzgT5zdPkS4GO5cRGExDQ=
Subject key identifier: 12:2C:FC:F0:39:B8:8C:DC:FE:06:81:67:B5:F8:BC:F8:13:5A:50:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01355D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/084C1AFACADF11EF8FB20A9C762E951A.roa
Signing time: Sat 04 Jan 2025 21:01:14 +0000
ROA not before: Sun 05 Jan 2025 21:01:10 +0000
ROA not after: Tue 04 Feb 2025 21:01:10 +0000
asID: 203020
IP address blocks: 154.207.140.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79197 (0x1355d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 21:01:10 2025 GMT
Not After : Feb 4 21:01:10 2025 GMT
Subject: CN=6779a19a-569c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:e8:b7:e4:3a:70:91:d3:99:aa:a3:3e:83:
31:56:56:d1:46:50:57:49:9d:82:20:b4:d3:cb:59:
30:7d:1a:4a:cf:d7:ca:ee:c4:0d:6c:85:a2:8a:47:
f5:60:98:b6:f1:24:11:b9:20:87:83:c2:2c:37:84:
b7:d6:42:34:80:f2:0d:93:d2:bf:6b:dc:45:da:4f:
c8:e2:a1:9a:57:90:78:a8:d2:11:e1:ec:01:e1:18:
4d:b5:b6:e2:4d:e0:92:00:50:9f:88:c9:17:a5:ca:
29:10:a7:df:9f:2d:14:ad:79:e7:2c:5b:83:66:3a:
21:94:28:42:7b:61:b8:8f:f5:f4:91:0f:2d:f9:b3:
a4:f6:7d:ad:75:ff:6c:5d:75:15:b5:fb:02:76:f2:
8e:39:97:46:b8:91:0b:10:95:9b:ab:f3:06:f6:a9:
d6:99:68:d9:17:ba:9b:be:19:9f:cb:62:5e:4f:4c:
34:15:f9:75:2e:31:ca:8a:07:f9:cd:c1:3e:c3:88:
b4:33:0e:85:97:8c:fb:3c:83:93:74:3e:90:7f:e2:
99:58:8f:f0:8d:58:e0:f6:48:de:14:8a:fc:eb:78:
0b:44:68:24:3d:91:93:5f:ac:c6:72:f8:12:50:c7:
77:f0:09:ac:1f:89:32:5f:2e:4f:23:66:cb:93:a0:
0a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2C:FC:F0:39:B8:8C:DC:FE:06:81:67:B5:F8:BC:F8:13:5A:50:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/084C1AFACADF11EF8FB20A9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.140.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:26:d5:2c:d2:bc:07:91:c3:e1:bc:75:54:66:50:b1:a7:1e:
9a:d4:d8:ae:62:53:6f:b2:48:d5:7b:4c:6a:c0:1b:df:e6:c4:
82:30:d2:cb:bd:c4:cf:16:ce:13:c9:e5:a0:68:46:ff:a8:ba:
2e:d8:3e:ae:47:62:ca:12:f6:9d:4b:3a:3f:15:ac:45:99:74:
51:c1:0c:0a:94:59:54:cf:d1:9e:5c:ab:5d:8f:fc:0c:16:d6:
7f:b9:95:b8:aa:fb:c2:d0:e5:a1:79:7c:54:9f:11:d1:99:54:
dc:c5:c4:59:2e:cb:1b:04:bf:d9:7e:d2:3e:02:73:3f:8d:60:
c3:b9:a5:63:1f:ab:34:ac:31:48:f1:55:d6:20:0c:d4:44:ec:
c3:8e:3c:f7:79:04:84:6b:b1:d0:05:dc:f2:a9:14:1d:1a:70:
de:a9:ae:64:4e:fa:a3:63:2d:f8:71:7f:d7:8a:96:99:f2:5b:
84:d8:e0:da:e5:5b:f2:4b:4d:0c:b6:2d:68:b8:b5:a7:f8:0b:
73:85:25:92:82:64:7b:b2:3b:36:ae:78:f4:53:fe:9e:59:1c:
d3:61:94:5a:d2:35:9b:17:9f:7e:35:6c:36:5c:af:97:17:3d:
36:61:d7:12:b1:0b:e4:31:4e:81:bd:d7:aa:50:6f:c0:09:d9:
6b:ea:33:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:01:04 2025 by rpki-client