Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E23B3DABEA811EFAE4C209F762E951A.roa
File: 1E23B3DABEA811EFAE4C209F762E951A.roa (raw, json)
Hash identifier: bj6dCnxrRXQlVMmLr7w0lfV7KsEFMk5oQef4R1Z9EbI=
Subject key identifier: 74:05:67:CF:C5:68:B8:DA:8F:76:0F:80:2D:D9:D7:A7:93:03:FB:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E23B3DABEA811EFAE4C209F762E951A.roa
Signing time: Fri 20 Dec 2024 07:57:54 +0000
ROA not before: Fri 20 Dec 2024 07:57:50 +0000
ROA not after: Thu 20 Mar 2025 07:57:50 +0000
asID: 2914
IP address blocks: 154.214.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72812 (0x11c6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 07:57:50 2024 GMT
Not After : Mar 20 07:57:50 2025 GMT
Subject: CN=67652382-7088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:05:c4:8b:c3:f7:1f:ef:d6:f3:f7:69:bd:e7:
f2:4e:72:87:a1:97:0d:90:7b:0f:d5:34:72:63:5a:
64:54:61:71:97:f8:6d:46:d6:98:a1:53:81:01:8e:
9d:c0:48:f4:cf:12:41:d0:7d:6b:fc:86:a5:f4:ce:
b3:7c:b5:fb:b4:28:68:c8:5b:89:f0:4d:6c:67:46:
93:4a:f1:c5:c1:aa:b1:c9:96:de:a0:96:43:76:1c:
ed:a5:c5:04:0b:44:66:05:cb:0e:44:c5:2a:e7:54:
30:bb:4a:56:bb:06:48:67:92:bc:81:77:8d:42:a0:
08:d9:fe:32:91:ea:35:1a:46:88:c1:c7:8c:cd:0f:
e5:e9:e5:1a:7c:0a:d5:ed:50:f6:e2:52:ff:97:00:
9a:4e:f8:d1:08:3c:e0:53:5f:ac:0c:5c:5a:48:7e:
b2:ff:10:14:1a:68:1c:c6:c7:7f:a4:d6:79:74:1f:
07:7a:3a:ac:75:e5:f5:a4:5a:67:2d:19:95:92:f2:
02:5d:3e:61:7a:db:88:f1:f8:07:44:95:d4:70:32:
95:84:e5:f9:42:af:76:78:02:f4:56:5b:db:78:ed:
ef:94:d5:bd:7c:7f:aa:ce:03:7a:5d:bf:99:7f:ca:
99:e1:0c:ba:96:c4:ee:e9:5c:e0:e8:76:a6:b2:4f:
28:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:05:67:CF:C5:68:B8:DA:8F:76:0F:80:2D:D9:D7:A7:93:03:FB:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E23B3DABEA811EFAE4C209F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.252.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:46:6b:3e:8f:69:5f:fc:2b:8c:45:66:00:d6:a0:02:bd:4b:
d3:d3:a2:c4:2d:29:18:1c:c1:b6:57:25:78:9e:db:21:68:34:
29:e0:4c:fa:f9:71:1e:3e:14:91:c6:8e:72:33:6f:0b:6d:76:
92:49:f2:fc:d6:28:a2:6e:b2:62:62:e0:1c:e4:d2:9d:67:70:
f8:3d:5f:69:ff:f0:e7:e0:fa:73:36:62:a0:51:9d:b6:67:cd:
7f:44:19:e8:7f:bb:7b:58:f2:32:3d:91:88:36:8b:28:b1:63:
6d:a3:e6:50:10:15:49:e6:9b:11:51:31:4c:64:91:1b:d0:ef:
ac:df:2c:9e:eb:61:14:51:a8:16:eb:0f:b5:43:4d:1f:02:85:
d8:72:dc:47:23:eb:20:48:9e:ab:bb:1c:32:f6:7f:4f:39:b0:
ba:96:e3:62:1d:01:5c:df:41:6f:02:1a:c1:50:4a:76:b5:2f:
65:97:4f:21:ee:c4:29:36:d0:82:a1:95:f7:b3:1d:ab:8f:44:
95:1f:d9:1f:21:c7:8e:9d:14:ae:b7:c9:d0:f6:7a:e9:70:8e:
88:06:52:4b:c8:aa:2c:2c:96:82:cb:ff:ef:e5:6a:1f:c1:34:
3d:fb:40:06:e3:89:62:be:ee:0d:12:c2:46:ba:32:b4:5b:78:
7f:11:a9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:14:58 2025 by rpki-client