Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1615E9FED8E511EF973873BE762E951A.roa
File: 1615E9FED8E511EF973873BE762E951A.roa (raw, json)
Hash identifier: efGupg79IVKEGWeFkJ585yFdl2mGy8Xv+cBq32daA1I=
Subject key identifier: 51:8D:A0:E8:EA:69:6C:0E:EE:91:F5:0C:95:A2:5E:AD:40:5E:8D:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01400A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1615E9FED8E511EF973873BE762E951A.roa
Signing time: Wed 22 Jan 2025 17:19:50 +0000
ROA not before: Wed 22 Jan 2025 17:19:46 +0000
ROA not after: Sat 15 Mar 2025 17:19:46 +0000
asID: 138915
IP address blocks: 154.206.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81930 (0x1400a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 17:19:46 2025 GMT
Not After : Mar 15 17:19:46 2025 GMT
Subject: CN=679128b6-d844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1d:8e:03:25:74:00:c9:c2:47:93:0f:ea:0a:
85:8f:a4:92:ee:6e:65:57:cf:26:30:19:07:db:a8:
21:26:ff:09:5e:e6:55:98:e8:99:89:b5:ca:88:2d:
8d:9b:0c:01:ac:fa:41:a8:83:3b:65:44:8d:27:be:
b3:85:5a:bd:94:57:9e:86:cb:5e:e0:f1:21:41:8e:
e9:72:e5:fb:fe:77:18:4d:c8:79:87:29:a4:d6:14:
3a:95:1c:5b:77:8a:5a:7b:ab:9d:da:e4:17:4e:34:
5d:74:6e:dd:39:99:03:59:dc:a7:0e:23:93:a7:8c:
ef:9a:23:86:92:72:82:b3:ce:59:89:84:2a:0c:73:
54:0c:cb:e8:86:7d:cf:27:62:88:42:37:39:52:26:
18:b4:32:3a:c4:c4:fb:ee:a2:45:1e:c7:13:95:f9:
b5:0a:d2:eb:f4:9a:eb:12:25:56:ca:e2:df:a6:5b:
96:ce:11:d7:6a:a0:3f:c1:1a:e8:e7:e7:79:1f:dd:
dc:9a:78:b9:ce:ce:6f:94:fd:5f:7f:f6:29:92:f9:
30:46:39:37:be:77:42:24:32:fc:2a:1c:d0:e1:75:
8a:e2:ba:c8:d3:e0:63:0a:8f:51:91:23:8a:a6:85:
69:39:be:f5:60:c8:e6:48:4d:70:29:9b:2f:21:8a:
25:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8D:A0:E8:EA:69:6C:0E:EE:91:F5:0C:95:A2:5E:AD:40:5E:8D:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1615E9FED8E511EF973873BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.65.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:18:03:ab:0f:34:e9:c3:fb:99:6f:7d:03:de:94:9e:dc:94:
8b:88:cc:bf:bf:56:61:4f:84:27:63:97:d4:f1:25:ce:06:19:
3b:b2:22:36:08:58:63:f5:49:71:15:6b:d1:d3:b0:9d:e6:ac:
fb:dd:44:3d:62:e2:a5:86:ea:a2:7c:97:75:cc:bb:9a:46:70:
74:f6:7a:e1:55:52:b2:b4:b9:41:d7:9c:94:5c:e5:7a:ca:1f:
c6:e5:77:d8:e1:0f:7f:4e:ed:bb:28:90:1e:f4:56:34:ab:88:
81:f8:f2:81:a7:9e:9e:64:7a:53:9b:29:be:a2:0c:9c:c6:4d:
15:4c:2c:4e:68:b0:ea:4d:91:f0:eb:5f:9b:f6:ea:44:19:48:
6e:03:d1:7d:6a:13:8c:36:3f:fb:af:a3:f3:a2:39:db:33:33:
4b:cd:cd:2c:5d:f1:2f:c7:f6:d5:62:0f:e9:ed:29:b4:41:d5:
2d:09:4d:ec:c7:0b:76:99:4a:33:fe:b4:b5:07:d4:03:0e:55:
d0:11:c4:ca:e3:64:37:39:b5:0b:66:e7:12:89:2e:d3:a6:9b:
4d:00:25:6d:f3:06:7c:8b:31:3d:97:e1:4c:c1:55:24:5d:51:
20:d7:59:13:36:38:cd:fe:86:f4:c8:c6:bf:b7:89:01:01:db:
3a:1a:89:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:10:49 2025 by rpki-client