Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F3A1138D95C11EFBA4E3666762E951A.roa
File: 0F3A1138D95C11EFBA4E3666762E951A.roa (raw, json)
Hash identifier: L9jF0BEU0EzLvkFe0qGH/G3tHOlbVQS7s8txvRYeYR0=
Subject key identifier: FC:ED:97:DB:7D:7E:53:89:65:94:5D:75:52:B1:DA:AE:E7:5A:74:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014043
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F3A1138D95C11EFBA4E3666762E951A.roa
Signing time: Thu 23 Jan 2025 07:31:29 +0000
ROA not before: Thu 23 Jan 2025 07:31:25 +0000
ROA not after: Sat 08 Feb 2025 07:31:25 +0000
asID: 18229
IP address blocks: 154.210.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81987 (0x14043)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 07:31:25 2025 GMT
Not After : Feb 8 07:31:25 2025 GMT
Subject: CN=6791f051-a37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:28:59:58:0d:78:cb:f4:92:8d:e6:b3:4a:
0d:1a:e5:0e:5f:de:ec:85:75:3d:12:36:b3:91:c0:
d0:a6:cc:a4:d1:06:25:07:8c:5b:8d:94:19:31:85:
d1:14:a5:20:ed:a9:ea:a0:b8:3a:32:38:9e:38:36:
1e:c4:e9:ff:e6:b6:34:30:5f:d3:37:a7:d9:64:03:
20:87:ac:40:df:8e:98:5f:ed:a7:0c:2a:4e:6f:dc:
ca:e6:df:5d:f8:00:1c:34:a3:01:a2:2c:4e:71:9a:
e8:d2:e6:ec:74:0f:c9:1a:64:38:12:04:71:87:90:
d4:63:6e:dd:07:58:2d:b7:5e:5c:45:bc:88:4e:30:
66:86:07:0a:91:f0:a3:f1:f1:1e:48:3f:c0:ba:40:
00:ce:43:16:8c:d9:1e:8c:65:bd:0a:86:9f:12:49:
c3:85:52:9f:f4:5d:b1:89:1c:8c:56:d7:e4:89:5e:
f8:d5:7f:4c:e9:60:99:21:5b:6c:6a:e4:cc:6f:dd:
64:45:11:30:0b:c7:84:7e:68:95:a0:6c:f5:0d:3c:
8d:0a:a0:c2:e8:a5:26:14:1c:8e:89:21:30:9d:4a:
3b:ef:cc:32:d0:4b:cf:f9:75:0c:04:d6:66:bf:77:
61:b2:ac:7e:07:a1:14:44:cb:78:a6:73:a8:e9:3c:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:ED:97:DB:7D:7E:53:89:65:94:5D:75:52:B1:DA:AE:E7:5A:74:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F3A1138D95C11EFBA4E3666762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.162.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:03:dd:51:b2:7e:07:d7:3e:c9:5f:26:e5:7e:e3:91:39:d4:
1a:ad:1c:43:9e:be:e2:7b:d4:98:54:11:77:60:3c:92:b3:8f:
19:c0:94:71:b0:7e:b5:a9:79:e0:e0:70:f4:2c:ee:d9:c0:89:
05:40:7e:92:c9:2e:4a:33:e7:2b:ae:99:9c:13:d1:73:d9:48:
fa:c5:eb:4a:cf:69:c1:38:76:6a:36:67:80:01:f8:7d:e6:2c:
e9:87:0f:e1:0d:32:8d:e4:34:17:ee:43:ce:7f:03:e6:c9:c8:
72:eb:2b:ff:eb:03:e4:11:f8:00:a7:aa:8c:27:d3:ea:78:c8:
0f:76:b6:e4:c3:53:d6:7f:02:46:7f:7b:c4:97:71:7e:06:d3:
59:38:6a:91:20:e3:01:9d:11:fe:18:3a:97:50:96:94:4b:2d:
89:fd:2a:3d:49:ca:67:87:64:f7:80:fa:b2:b2:62:f8:e6:48:
f0:ba:3d:27:a7:9c:23:d9:ca:8e:bd:d8:99:03:ee:92:ae:67:
3a:b2:35:90:48:c2:fc:80:14:fc:5b:91:d8:1a:64:4a:c7:d8:
c7:1f:d3:cf:e1:82:1f:a0:26:b2:ff:91:6e:d6:d3:52:02:93:
a7:5c:30:82:65:b5:87:75:2e:30:d0:b6:19:7f:22:31:da:85:
b8:87:4a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:45:57 2025 by rpki-client