Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16299E14DA2911EF9EA77B4C762E951A.roa
File: 16299E14DA2911EF9EA77B4C762E951A.roa (raw, json)
Hash identifier: gtSsRniCndIGhdhI2/c6y1yVT1i9WUF+K5drf2N47Hs=
Subject key identifier: EF:BB:F1:06:C5:02:F7:AE:6F:36:01:EE:4A:20:23:2F:6A:E1:D0:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01443C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16299E14DA2911EF9EA77B4C762E951A.roa
Signing time: Fri 24 Jan 2025 07:59:07 +0000
ROA not before: Fri 24 Jan 2025 07:59:04 +0000
ROA not after: Thu 13 Mar 2025 07:59:04 +0000
asID: 63139
IP address blocks: 154.203.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83004 (0x1443c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 07:59:04 2025 GMT
Not After : Mar 13 07:59:04 2025 GMT
Subject: CN=6793484b-8985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:78:5d:14:b8:56:83:9e:11:2d:00:c8:c5:
d1:65:4c:38:b0:9e:c3:4d:aa:d0:63:5c:52:92:cb:
f1:a4:c2:5b:d8:33:31:36:f3:fe:14:11:9d:78:5a:
85:79:06:51:dd:8e:11:a1:e5:de:69:b7:71:d4:30:
e2:ba:a2:1e:07:5f:e0:06:e3:f6:6b:47:f9:fc:ff:
c8:0a:d1:36:6e:70:71:7a:a1:63:de:b6:02:62:37:
e3:63:be:ec:9c:5d:fb:50:d3:fe:b2:7a:41:ad:4a:
89:c9:82:52:4a:df:42:80:a0:08:5d:e9:d8:30:2c:
71:42:83:28:67:55:33:ee:1a:49:9e:4d:66:70:00:
66:ac:41:73:ef:05:0d:d4:60:1e:9e:7c:86:dd:ef:
11:83:c3:33:5a:d7:39:fd:cd:3f:c3:a3:8f:9e:b1:
64:4b:99:47:ca:33:3f:88:83:3c:95:14:6e:18:53:
f5:8f:8e:79:38:e7:ae:7c:aa:c5:f4:47:2f:7b:f9:
46:de:97:7e:9a:69:a1:54:aa:76:82:16:9d:69:92:
38:98:aa:68:be:38:a0:bd:79:29:68:91:76:6f:99:
5f:a9:bf:51:2d:36:94:f0:59:38:15:95:97:43:4b:
09:b4:b9:03:b4:6b:69:a2:43:04:fb:8c:ce:00:d9:
06:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BB:F1:06:C5:02:F7:AE:6F:36:01:EE:4A:20:23:2F:6A:E1:D0:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16299E14DA2911EF9EA77B4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.190.0/24
Signature Algorithm: sha256WithRSAEncryption
50:71:0e:78:ad:5e:59:50:83:be:e5:42:87:55:04:39:d0:48:
5d:9c:f9:92:ba:cd:4a:fb:69:ec:4b:a0:52:5b:51:8b:50:78:
55:9d:4e:a3:41:a7:75:87:bc:0e:80:d2:4e:74:45:d1:2d:3e:
b7:19:02:0a:44:cb:d2:b7:3a:69:cc:2a:84:78:97:fd:21:ee:
ac:3b:8b:10:47:3f:de:2f:59:51:b1:e7:ce:cd:e2:fe:b0:92:
2a:9b:0c:64:ba:bf:c0:af:ee:b5:41:a9:50:c5:59:62:71:65:
b4:c4:9e:e2:f1:54:b5:5d:45:9b:d7:09:94:72:06:d3:6d:7a:
a7:29:8b:6c:02:5c:aa:fe:66:dc:af:35:26:d1:b6:6c:1c:27:
76:28:cb:a6:ec:6b:f1:96:5f:bf:68:a2:f7:2b:1c:66:86:07:
2a:7d:94:dc:2d:2d:55:cc:8a:38:e6:59:71:a2:68:bf:9c:f9:
8e:bf:c7:57:fc:17:78:79:20:b7:ec:9f:03:de:e9:ea:e2:1c:
67:79:6a:93:bd:33:af:68:3c:73:06:7e:ee:6c:5f:0a:21:e8:
c1:7b:63:c8:81:b6:55:06:54:fb:78:c0:b8:89:62:b8:71:a5:
24:08:d4:37:0c:d2:fa:47:f8:1a:66:d9:32:6f:86:8a:cc:7a:
dd:f4:f3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:51 2025 by rpki-client