Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/162FDF8ABEB911EFA5B3918A762E951A.roa
File: 162FDF8ABEB911EFA5B3918A762E951A.roa (raw, json)
Hash identifier: G0gDc6irOfdMTBIVUowXJYXsCTK2kzujdgFRY2L2zOo=
Subject key identifier: C0:6E:62:B4:A1:85:C5:6F:DC:2B:8C:38:95:BE:7F:B3:F8:9B:C4:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CE0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/162FDF8ABEB911EFA5B3918A762E951A.roa
Signing time: Fri 20 Dec 2024 09:59:22 +0000
ROA not before: Fri 20 Dec 2024 09:59:19 +0000
ROA not after: Sun 02 Feb 2025 09:59:19 +0000
asID: 202656
IP address blocks: 154.222.200.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72928 (0x11ce0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 09:59:19 2024 GMT
Not After : Feb 2 09:59:19 2025 GMT
Subject: CN=67653ffa-7a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8c:ae:c4:9c:b2:a4:be:d9:a8:68:f8:5d:d3:
7f:df:55:54:4a:ea:d2:2c:ba:fc:30:ba:0e:72:5b:
0b:e2:af:1f:39:d6:5b:81:21:02:99:82:f0:5c:7e:
23:b4:d3:81:dd:1d:63:59:33:18:bb:0c:5c:ae:bd:
5a:96:f2:97:1e:11:19:fc:fa:2e:f4:41:a6:5d:cc:
80:33:d3:13:cb:3d:9e:33:b9:2b:5b:16:41:9c:78:
80:0a:d4:0f:e0:e2:4d:12:63:8b:3c:54:8e:53:73:
6e:a5:0c:34:20:15:c3:3a:ef:ed:b1:e1:b6:ff:de:
30:ae:3f:50:3b:7e:42:ec:51:a6:fc:5a:e4:13:f9:
b6:c9:b0:98:70:c4:b6:93:e9:f3:7d:98:b7:6d:03:
5c:b7:4e:f4:d4:0e:9f:aa:14:56:4f:1d:b7:4b:44:
ad:a7:72:02:8e:a9:6a:95:ac:df:9b:6c:5e:40:66:
ff:bd:8e:1f:c2:a5:ce:8d:d9:18:7c:14:e6:0c:27:
e2:4a:11:10:d1:6b:6c:a2:ea:ed:c1:82:18:64:ec:
19:4c:62:bf:7a:04:2e:07:b3:bf:d2:5d:49:b4:99:
0c:df:39:56:89:67:11:6a:db:1a:eb:5b:68:33:68:
48:0a:d7:8a:db:05:12:4c:43:6b:1a:91:6c:9a:ce:
c2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6E:62:B4:A1:85:C5:6F:DC:2B:8C:38:95:BE:7F:B3:F8:9B:C4:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/162FDF8ABEB911EFA5B3918A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.200.0/23
Signature Algorithm: sha256WithRSAEncryption
10:d3:1c:fb:04:b1:df:d5:f2:01:4d:95:83:fc:20:57:73:19:
7f:21:6a:b9:ee:16:b9:ca:bc:2f:1b:f1:36:8a:34:c8:af:c2:
cc:a8:fc:b5:4e:17:9e:41:08:94:85:e9:a7:da:9c:91:ec:fc:
76:87:cd:b5:3c:2a:61:8e:24:6d:a8:1e:d0:14:a8:9a:ae:fd:
cd:f4:58:41:3e:87:08:6e:19:28:35:a3:d4:e6:ee:2b:f5:d6:
7b:8f:97:05:67:50:d7:0e:e2:b1:0c:44:71:15:0c:6b:2e:48:
4d:aa:ff:f9:52:39:ac:96:e3:06:75:a7:6e:fe:46:ce:68:55:
d7:8a:3c:c7:dc:9d:64:ad:e4:c5:f8:1b:42:82:88:bc:5c:66:
f5:56:fc:d1:39:55:cd:31:2d:98:9a:fd:18:cd:da:4b:9c:16:
64:e0:a2:4c:4a:15:b1:d5:7a:1f:ed:9f:35:c0:8e:2a:c5:09:
2f:87:c3:cd:da:8e:8a:c3:03:ed:f8:e5:9b:00:34:1f:73:5d:
cf:d5:96:35:da:a8:50:55:39:00:1f:97:1b:1a:62:34:db:79:
6a:60:11:9f:65:72:27:65:f3:3f:37:50:a5:c2:5d:a3:93:5d:
94:61:db:3e:55:5e:35:21:1e:e0:f8:0a:1a:fb:b7:2b:85:f9:
dd:a0:e0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:33:06 2025 by rpki-client