Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1069BB2EDA5D11EF9FCBBBAA762E951A.roa
File: 1069BB2EDA5D11EF9FCBBBAA762E951A.roa (raw, json)
Hash identifier: Ep7/duLuwCcIryoXE2v62uoOA4nrHk02ll43MKtG0ow=
Subject key identifier: C1:DD:A3:E9:54:07:7B:91:02:60:0F:E4:A9:CF:5B:9C:D3:7D:69:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1069BB2EDA5D11EF9FCBBBAA762E951A.roa
Signing time: Fri 24 Jan 2025 14:11:11 +0000
ROA not before: Fri 24 Jan 2025 14:11:08 +0000
ROA not after: Sat 01 Mar 2025 14:11:08 +0000
asID: 44559
IP address blocks: 154.205.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83955 (0x147f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:11:08 2025 GMT
Not After : Mar 1 14:11:08 2025 GMT
Subject: CN=67939f7f-bcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:15:d0:1b:21:1c:7e:b5:4a:0d:d4:9d:9c:
76:8d:ed:20:1f:fe:1b:d2:5d:94:f9:07:c1:57:37:
73:a0:3c:67:9a:15:c5:28:49:ca:27:5d:c7:6d:e6:
a5:6b:ba:8a:73:b1:54:c8:9b:d7:83:5b:b5:61:ee:
91:d1:3f:1d:68:16:d9:1a:2b:0c:cb:f8:ee:bc:b9:
b3:62:ab:23:b0:a0:c8:96:6c:c0:d8:65:a7:cb:f5:
2d:3c:5e:0f:b4:ef:4b:59:7d:d5:37:5f:27:99:23:
a6:77:8f:67:a9:11:39:1b:02:a1:4d:58:e2:c3:2a:
d4:88:45:be:7b:f6:9f:68:c5:c6:bf:b1:71:a3:fb:
e6:03:54:5f:0d:ca:4f:7a:0d:68:f2:a5:12:42:15:
04:4c:bc:1f:58:41:1a:15:f1:0d:1d:06:cd:e3:d1:
58:31:89:4f:ec:34:80:3d:1d:72:f8:06:b7:0a:c5:
a1:a1:15:de:c2:9e:c7:d6:42:56:39:0e:54:04:c4:
4a:93:1d:5c:aa:6b:71:ec:51:4c:0e:02:2e:7f:10:
77:df:cc:1d:fe:9b:c9:ec:d6:aa:e1:b2:dc:fd:a4:
7c:7a:0a:4b:7d:2b:ed:65:4e:de:34:46:20:62:66:
d2:09:a5:3d:47:ca:e2:83:be:5b:f2:22:c6:da:39:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DD:A3:E9:54:07:7B:91:02:60:0F:E4:A9:CF:5B:9C:D3:7D:69:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1069BB2EDA5D11EF9FCBBBAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.224.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:8c:57:23:b1:08:cc:f4:dc:a2:8f:bc:24:5c:a6:8a:be:5a:
44:13:76:7f:25:e2:41:23:02:0e:88:8e:d3:22:53:2f:a4:11:
ef:c2:3b:00:b9:ab:d4:96:7e:3f:41:cb:7e:3d:fb:f7:e5:f9:
97:cf:91:38:bc:da:33:b7:12:53:e3:07:e6:af:b3:7a:b7:72:
3b:0a:33:82:f0:9a:d2:1a:1c:c5:b6:84:a0:85:c6:41:9e:46:
3a:27:21:6c:a8:cf:5b:e2:74:12:99:f7:b4:52:92:c1:d2:c8:
ac:a8:8d:ef:e1:4c:45:92:6c:5d:5f:fe:cd:65:ec:ea:cb:00:
ef:e1:44:4a:9c:aa:02:a0:6e:30:4d:2c:f1:38:09:58:58:2e:
e5:b0:9b:58:f3:c2:01:8d:7b:f7:8d:2d:d6:21:95:0c:77:1f:
5e:26:1d:8d:3f:f8:b4:80:e3:e1:65:3e:c1:33:44:1a:05:04:
34:db:52:bb:cc:84:2f:d5:c1:46:8c:d8:c6:cd:fa:21:bf:48:
b9:a6:6b:db:5f:4a:5e:ed:3c:0f:87:72:ec:97:8b:73:db:f0:
82:35:72:9c:3c:ef:ab:e0:e7:98:dc:30:a2:66:21:bf:65:3c:
90:81:8b:83:3a:f6:dc:ce:6d:99:f6:b0:e8:73:09:30:06:82:
46:4d:59:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:59 2025 by rpki-client