Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FB09D42D9DA11EFBBEF1AAA762E951A.roa
File: 1FB09D42D9DA11EFBBEF1AAA762E951A.roa (raw, json)
Hash identifier: Bq4cu8efGEfFNTgelGhAzvaDl9RcjRpP5oHcuy21Qw0=
Subject key identifier: 52:6F:C4:D6:40:2B:C0:FA:4C:43:90:3C:D9:97:C9:74:33:FA:F3:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014353
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FB09D42D9DA11EFBBEF1AAA762E951A.roa
Signing time: Thu 23 Jan 2025 22:33:53 +0000
ROA not before: Fri 24 Jan 2025 22:33:49 +0000
ROA not after: Sat 01 Mar 2025 22:33:49 +0000
asID: 62240
IP address blocks: 154.223.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82771 (0x14353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 22:33:49 2025 GMT
Not After : Mar 1 22:33:49 2025 GMT
Subject: CN=6792c3d1-92e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2e:fd:80:46:4e:c8:5a:3a:c7:3b:e2:31:3b:
8f:85:11:a9:55:13:ad:56:fe:c8:6f:69:8d:e7:81:
f0:30:ef:6c:d4:d4:63:70:0c:c4:f7:3e:28:3d:49:
95:0f:d5:75:55:f5:8a:ec:36:4e:a5:7e:bd:66:1d:
a7:ed:9d:40:32:45:42:e9:d2:39:97:4d:02:05:c4:
ce:39:1c:85:dc:42:1b:2e:09:d1:be:c3:90:59:75:
f4:71:58:ce:a6:16:81:4e:37:01:95:e9:8e:5d:62:
77:04:4b:79:76:77:7d:97:67:82:0a:74:15:23:91:
a5:19:0d:88:83:96:9e:d3:d4:fb:34:ce:0b:ef:9a:
b0:38:53:87:92:2a:f0:b6:c5:e2:de:e1:7c:b2:2c:
c5:4c:4d:f6:f0:62:2c:60:03:1e:b1:75:10:cc:6b:
0b:16:0b:e9:37:fc:a8:59:16:78:62:47:bc:71:11:
43:ce:c6:5c:14:a5:ee:39:d2:87:8d:fb:6b:0a:41:
d4:fe:0f:45:37:55:35:2e:94:2f:15:26:df:97:f8:
65:ab:d5:5e:bd:b7:68:de:42:c3:07:c7:ba:dc:71:
b7:4c:33:d6:52:b6:68:72:b3:17:cc:bd:25:c9:d5:
36:ef:80:f4:ff:ff:0c:0a:57:e9:63:f1:46:15:a9:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6F:C4:D6:40:2B:C0:FA:4C:43:90:3C:D9:97:C9:74:33:FA:F3:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FB09D42D9DA11EFBBEF1AAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.208.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:05:a3:65:61:db:f8:a7:c5:bc:81:13:86:bb:7a:33:3b:6a:
21:fe:ee:98:b1:80:f0:d8:0b:f7:04:74:30:05:50:c5:77:e9:
4e:0d:7d:82:df:aa:54:49:b6:e7:80:e3:aa:18:71:59:9f:01:
a0:f4:8a:90:02:f8:7d:d1:b1:19:02:0a:ed:21:f8:72:60:08:
3c:6c:b0:70:c9:78:1f:4c:25:ba:c7:e2:52:58:0d:49:bf:3f:
47:95:9c:23:a5:23:3a:43:bf:e4:79:72:9b:72:bc:c5:c5:c7:
1f:8b:eb:da:48:c3:e7:29:23:7d:57:b7:ea:51:ed:22:e8:e2:
eb:35:6b:b1:4c:81:d4:b8:d9:19:0d:7f:77:ab:61:73:ec:cd:
fa:d5:a5:e9:1a:07:a2:cb:bd:a3:ad:8e:20:0b:6b:f3:39:6d:
c1:92:2b:52:7d:dc:98:a0:4c:f1:dc:a8:f1:83:f5:20:f1:c4:
e7:32:cb:77:b9:5b:e9:34:b9:68:c7:25:61:ff:b8:54:93:f6:
54:29:77:8a:d2:d4:9d:8a:1d:3a:1e:cd:0c:ab:82:ab:b7:d2:
fa:ff:2f:14:c9:0c:e1:75:72:cc:04:dd:ed:64:a5:57:0c:57:
88:fd:c8:8e:23:b9:4b:78:8a:79:54:3e:db:55:b5:bb:77:02:
ff:c9:87:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:54:30 2025 by rpki-client