Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ED15444DA2A11EF9CEE9751762E951A.roa
File: 0ED15444DA2A11EF9CEE9751762E951A.roa (raw, json)
Hash identifier: skkTuxV+mHIbzMrABFqOUlJuLO26BYY8NMOWkeeFUg8=
Subject key identifier: 03:49:98:2F:DE:7E:44:52:0D:79:C9:D4:4B:1C:4B:76:A9:79:D7:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014446
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ED15444DA2A11EF9CEE9751762E951A.roa
Signing time: Fri 24 Jan 2025 08:06:04 +0000
ROA not before: Fri 24 Jan 2025 08:06:01 +0000
ROA not after: Wed 05 Mar 2025 08:06:01 +0000
asID: 202656
IP address blocks: 154.222.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83014 (0x14446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:06:01 2025 GMT
Not After : Mar 5 08:06:01 2025 GMT
Subject: CN=679349ec-b9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:15:7a:11:75:38:ac:45:19:30:71:77:31:a7:
29:90:64:9a:25:b2:59:41:b8:2d:4e:e0:e4:60:5d:
19:f1:7d:e3:8d:2d:d0:02:da:20:d3:cb:96:2c:68:
2c:c2:01:64:15:d7:84:53:25:3d:20:73:fd:db:48:
f6:97:24:f1:35:4f:24:e7:3f:83:5b:a2:bc:4f:a0:
08:b7:d8:81:0d:bb:ff:5e:c3:57:2f:61:12:de:ee:
0f:c8:f0:c8:b9:34:90:db:bb:5e:0a:bd:e9:ba:d4:
d0:44:fa:04:dc:05:bb:a4:46:84:e4:d4:18:f4:f8:
e8:c8:a5:59:be:82:42:11:51:8e:03:40:f9:da:15:
e6:86:92:1b:7a:27:fc:17:02:3e:9e:ab:53:1c:91:
16:9d:bc:81:41:c3:56:97:ff:fe:eb:cd:ff:aa:b2:
a5:9e:f6:ca:5c:4d:2b:44:45:27:a2:d2:f8:6e:c2:
eb:a8:6a:0b:e1:86:6b:7c:32:ea:3f:c1:4f:72:d9:
59:c0:4e:ce:d1:96:66:25:ff:10:18:9b:0e:9c:b7:
f4:cc:57:92:5e:6d:80:3b:a3:aa:1d:23:ca:51:6d:
34:a8:28:70:17:46:eb:b5:74:34:cf:01:00:09:44:
84:f8:9e:95:8b:43:5e:fb:02:21:5b:9b:02:d8:f4:
93:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:49:98:2F:DE:7E:44:52:0D:79:C9:D4:4B:1C:4B:76:A9:79:D7:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ED15444DA2A11EF9CEE9751762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.47.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:99:0b:35:8f:30:de:25:f9:1b:8e:7d:37:fc:97:80:b2:0b:
fb:db:b2:05:7d:ae:90:0b:a9:05:ea:e4:90:d2:06:18:e8:02:
2b:d0:ea:ac:bd:a1:e0:18:07:c4:f5:68:e0:c3:bf:de:6b:d5:
4b:75:2b:d3:2e:78:f9:c1:40:5b:ff:14:75:6a:d9:71:8d:c1:
d4:10:95:c0:68:99:7e:66:4d:98:a1:a2:84:06:c7:2a:8a:83:
92:e9:f2:68:18:7d:1b:1c:7f:fa:88:1f:72:a5:0d:82:46:2c:
09:c6:3a:00:e9:24:74:af:de:db:07:f7:c7:89:fa:ba:09:45:
ee:9d:ae:ce:ba:65:c9:a4:03:6a:b1:0b:67:25:53:30:6d:4d:
1b:97:b2:7f:ec:1d:c3:eb:49:9f:e7:e6:4a:02:9e:37:46:dc:
57:6f:59:1e:b8:04:29:33:45:43:71:9d:a1:0f:5f:71:d7:80:
4b:5a:fe:c4:3c:d8:85:23:b3:6f:e3:cc:ba:9a:55:3f:30:cb:
75:74:39:94:39:2c:9e:b7:30:11:e2:a8:94:93:2e:ec:cc:a1:
74:7d:a6:e7:ee:75:b7:d1:93:14:ac:ca:91:52:ea:a4:63:86:
62:90:45:dc:26:f9:ae:d9:80:92:3f:fb:0c:84:f0:ce:56:07:
a2:82:8f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:55:06 2025 by rpki-client