Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A14D86EDA4711EF9EC8F796762E951A.roa
File: 0A14D86EDA4711EF9EC8F796762E951A.roa (raw, json)
Hash identifier: MDRy65EN+tIWNF2oZDVtGmfkTbTyp9W8eMTHo1+to0s=
Subject key identifier: E3:F5:52:ED:95:30:F8:70:FB:7C:E7:FE:C8:2A:F4:83:38:E5:14:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01461B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A14D86EDA4711EF9EC8F796762E951A.roa
Signing time: Fri 24 Jan 2025 11:33:32 +0000
ROA not before: Fri 24 Jan 2025 11:33:27 +0000
ROA not after: Sat 08 Feb 2025 11:33:27 +0000
asID: 18229
IP address blocks: 154.210.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83483 (0x1461b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:33:27 2025 GMT
Not After : Feb 8 11:33:27 2025 GMT
Subject: CN=67937a8c-17db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:7d:35:e4:b8:36:96:61:e3:2d:a5:5b:67:
77:80:f3:41:5b:d8:fb:6e:56:42:0a:84:6a:1c:15:
7d:b7:6d:10:4c:56:80:2d:c7:8f:51:ca:0f:02:a7:
e6:d6:27:09:25:b9:bb:cd:d6:12:c2:09:a6:3b:8a:
14:6d:d6:9c:36:b1:4c:04:38:b8:ce:c7:ab:14:49:
23:32:19:12:8f:20:34:e1:f9:79:16:01:91:7d:6c:
86:eb:3c:01:06:ff:fb:5f:ed:8a:37:1a:c6:f4:b0:
a5:e0:30:2b:d6:01:4d:85:52:f3:f5:ce:9d:d2:a7:
42:2a:8d:f8:72:6c:1b:e1:8a:40:86:60:b0:3e:cb:
cf:d5:96:f2:93:d4:6e:da:f9:9f:98:64:cf:e6:2e:
86:0c:62:95:b0:f0:e1:3e:ba:7d:b4:55:51:c4:4c:
31:eb:27:6d:25:d7:88:f8:0a:c9:b4:ec:de:07:37:
b9:aa:4c:78:e2:e3:96:7a:bc:5e:93:26:79:cb:86:
b6:99:be:eb:a8:0b:38:7f:74:c3:61:64:63:8d:10:
20:09:23:6c:eb:78:c8:12:d5:de:2a:a9:66:9a:91:
41:ee:96:83:20:aa:8c:29:35:12:3f:57:ac:84:f1:
12:25:11:70:e6:3b:83:66:86:2a:d4:18:d0:72:b7:
9e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F5:52:ED:95:30:F8:70:FB:7C:E7:FE:C8:2A:F4:83:38:E5:14:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A14D86EDA4711EF9EC8F796762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.172.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:14:3e:4b:2f:a8:47:fa:de:f9:0a:39:7a:48:19:77:b9:48:
e2:34:c6:9d:ff:34:74:e9:f6:ed:33:30:5c:5a:19:33:13:d1:
ec:dc:45:01:aa:49:58:70:65:18:cb:03:87:3e:01:0d:ed:b3:
86:7e:ca:ea:15:21:1f:ab:40:00:b1:7a:0e:7e:45:82:bb:99:
d1:ba:cc:6c:ea:4d:b6:0c:07:a2:40:59:9d:5f:ce:ce:67:f4:
83:97:25:db:47:d6:86:7a:78:0b:07:b4:26:e7:22:b5:85:e9:
f0:94:cb:e3:e9:fa:42:05:b4:3e:a9:e3:24:f0:8a:1a:29:f4:
c6:52:fb:35:35:72:19:ff:72:d3:03:25:85:47:7a:dd:76:80:
0f:af:22:84:eb:4d:28:04:a3:42:b8:ff:91:8f:d5:7b:90:49:
e1:f5:fe:69:7f:fe:77:08:e0:70:91:5e:5e:e7:8d:4a:85:51:
3c:32:44:6a:18:3d:36:82:89:7e:50:22:4f:67:19:ee:36:49:
3e:a1:7d:6d:45:93:23:1a:6c:cd:c8:fd:54:9b:cd:63:11:fc:
63:71:c6:3e:c5:b6:01:66:79:6d:ad:dd:47:06:37:28:61:d2:
83:e6:71:e1:e8:91:86:7d:6e:e6:1a:52:38:cc:fc:31:e9:c2:
2e:42:40:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:58 2025 by rpki-client