Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1542CA50D40411EFAF9688BC762E951A.roa
File: 1542CA50D40411EFAF9688BC762E951A.roa (raw, json)
Hash identifier: 5B3HhY63PY+u6Q4CCn6sRsUc8aEZkcZVlwLd/VK0T30=
Subject key identifier: ED:40:A4:4B:75:A7:2A:1F:96:75:1A:4D:E2:88:35:CC:A5:A8:AF:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1542CA50D40411EFAF9688BC762E951A.roa
Signing time: Thu 16 Jan 2025 12:19:07 +0000
ROA not before: Thu 16 Jan 2025 12:19:04 +0000
ROA not after: Sun 16 Mar 2025 12:19:04 +0000
asID: 17561
IP address blocks: 154.206.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80934 (0x13c26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 12:19:04 2025 GMT
Not After : Mar 16 12:19:04 2025 GMT
Subject: CN=6788f93b-4929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dd:c9:13:30:50:7a:7e:b1:bf:14:d5:e5:55:
0a:2e:2f:1a:42:43:48:72:78:44:8e:20:21:eb:5c:
2e:29:af:0a:4e:c6:61:63:52:15:35:18:e3:dc:16:
6f:65:a1:a6:51:c2:cc:35:71:38:4b:a7:8d:69:1e:
81:de:84:d2:b8:8a:f1:10:61:d8:dc:99:89:02:d8:
47:51:48:96:ab:26:16:32:49:bc:73:90:d1:db:4a:
6f:5f:cf:25:8b:93:3c:30:45:2d:91:de:67:99:58:
19:85:a6:da:f7:23:54:bc:bf:74:00:f9:05:d1:63:
ad:04:66:c6:3c:f9:69:08:bf:b9:85:60:39:15:25:
b2:bc:75:a6:7a:f0:21:dc:9a:b0:cb:bc:eb:f6:dc:
46:86:78:c1:50:bf:f1:e7:b5:c6:1a:4c:84:c2:44:
c2:42:33:5d:5e:cd:60:0a:d2:90:d4:20:15:4a:e0:
f2:ea:61:a1:b9:4d:40:b9:de:28:34:bb:d0:40:de:
d5:1b:f5:57:e3:fa:02:9f:a5:54:77:cc:04:18:3d:
74:7f:27:4e:8b:d4:1b:98:1f:9c:46:59:a8:8a:34:
37:af:21:55:86:08:f2:38:8c:b0:df:82:f0:8a:4c:
f1:74:42:30:d7:70:77:71:9b:86:f3:4c:f4:77:c7:
35:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:40:A4:4B:75:A7:2A:1F:96:75:1A:4D:E2:88:35:CC:A5:A8:AF:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1542CA50D40411EFAF9688BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.213.0/24
Signature Algorithm: sha256WithRSAEncryption
79:aa:2d:ad:9b:c2:7e:3c:47:47:01:45:b1:90:40:28:a3:82:
20:92:8c:7b:7f:26:59:32:b8:10:d7:84:96:52:93:30:49:81:
51:07:c7:cc:82:32:8a:b6:e9:53:45:db:4a:8d:f2:c3:09:60:
0c:58:84:2e:2a:57:88:c9:ed:a6:52:93:f8:85:ac:12:04:1e:
84:c3:df:be:c4:37:d7:1a:1a:34:0b:76:49:7a:da:2b:0c:90:
a4:8d:70:16:df:53:8b:4f:a7:6a:65:07:23:b2:db:51:0e:cb:
11:73:3f:e4:d2:a2:d1:6a:fd:29:95:f5:99:24:74:52:ae:43:
b1:99:3b:ff:44:76:b6:6f:b8:99:c6:d6:24:3a:37:b5:55:08:
a8:9f:a1:f2:98:10:63:a7:ec:0a:23:9d:53:67:25:34:c9:24:
3e:cc:92:05:75:ad:0c:33:a7:c7:dc:cd:0c:e8:f5:82:90:3d:
ac:f8:2f:d2:01:f7:30:06:33:a7:2b:73:a8:38:a6:0e:ca:f8:
61:42:20:68:89:c8:75:d4:6d:5d:2f:11:99:2e:34:86:ac:32:
de:e4:f5:38:75:09:a4:f4:11:10:70:27:ec:4e:76:53:46:ee:
29:f3:e2:1d:33:3e:16:a8:e2:e2:86:b3:ed:ac:a4:f8:3a:93:
66:f6:92:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:38 2025 by rpki-client