Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FFBF638D73311EFA8364499762E951A.roa
File: 1FFBF638D73311EFA8364499762E951A.roa (raw, json)
Hash identifier: 4R2ZjhI0Mu18w5pU1EltQhYIVetheXDZm2UP/yePp/s=
Subject key identifier: 77:BE:0A:D4:CC:95:2A:ED:4D:AA:D8:5A:D9:9D:E8:3F:8D:58:D5:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FFBF638D73311EFA8364499762E951A.roa
Signing time: Mon 20 Jan 2025 13:33:25 +0000
ROA not before: Mon 20 Jan 2025 13:33:21 +0000
ROA not after: Wed 05 Feb 2025 13:33:21 +0000
asID: 135097
IP address blocks: 154.212.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81488 (0x13e50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 20 13:33:21 2025 GMT
Not After : Feb 5 13:33:21 2025 GMT
Subject: CN=678e50a5-1b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:af:67:2a:e9:3e:f9:6f:8d:bc:a4:ac:57:
23:ec:b8:8c:fa:d6:f0:21:02:3f:94:82:ba:8f:25:
94:76:67:bc:58:f5:f3:bc:19:ff:13:02:4b:db:32:
e7:44:c4:dc:bd:2e:fb:5c:65:8a:b5:b7:f7:67:6d:
d2:2d:da:cb:96:07:b2:1c:75:81:ef:6b:33:37:53:
98:12:55:48:9f:8c:4b:db:0f:3f:b5:7b:10:4a:63:
77:6a:63:41:11:93:34:2f:3c:5f:ea:58:b4:81:cf:
ed:9b:dc:9c:09:45:b8:35:b1:18:e8:d1:70:5e:85:
4d:e1:c8:ea:74:e8:ae:61:fa:ba:a6:0c:ab:d1:68:
4c:55:fe:8a:c8:04:77:1a:e7:d5:2f:8f:4b:1d:9c:
4a:36:8a:79:4a:e2:ce:41:c3:3b:a3:d9:02:77:9c:
ee:42:3b:fb:09:91:8e:84:93:03:4a:a5:64:a2:5f:
58:c5:34:38:99:3a:2c:c3:3b:dc:a0:74:dd:e8:34:
eb:c9:4d:23:3b:ce:df:f8:71:bf:68:ba:99:ad:f1:
3b:69:f9:a6:3e:67:43:3b:3b:67:e9:58:46:d9:be:
91:74:6a:05:60:a0:c0:4b:d2:6a:10:24:57:c3:a9:
37:b0:c6:12:91:b7:11:a8:c6:36:fe:3f:c3:3d:b9:
a1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BE:0A:D4:CC:95:2A:ED:4D:AA:D8:5A:D9:9D:E8:3F:8D:58:D5:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FFBF638D73311EFA8364499762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.164.0/22
Signature Algorithm: sha256WithRSAEncryption
56:72:a3:17:42:69:b5:61:f4:27:c3:f6:60:9c:28:bd:e1:99:
1e:b6:bf:e8:0d:96:2e:a2:57:0d:08:42:39:9f:6e:44:b9:03:
e0:a7:d6:a8:dd:14:6e:3e:b8:9c:49:df:62:f1:57:91:e1:7f:
16:d0:d2:9d:f5:20:fa:57:71:e6:43:7b:41:1f:38:6b:04:76:
cd:77:27:ba:88:32:1b:4a:2d:4f:0b:6f:87:8c:eb:eb:75:e7:
50:70:e7:5e:ae:5c:b5:4b:6d:02:3f:d0:73:86:b6:c8:12:b1:
db:4d:d9:a4:53:fc:7e:78:08:cb:3e:3d:d6:3b:29:c8:4a:27:
5a:b2:f2:f5:68:37:77:dd:72:ea:ef:74:58:b7:43:b0:fc:2b:
d8:a0:25:98:95:f8:18:6a:17:8c:7a:aa:95:94:d1:eb:1f:fd:
92:2a:57:fa:c6:1c:46:65:0c:ff:2d:47:08:45:86:10:4c:68:
80:07:ed:8d:41:03:22:a2:84:a7:7d:54:25:eb:41:5b:ad:ba:
d5:8d:d4:60:4c:e2:d1:20:b6:db:cf:d7:80:66:93:8d:0f:3c:
06:9e:a7:74:9f:26:3c:8c:9d:9f:4b:40:26:b6:fd:3c:22:3f:
26:de:2a:3c:b1:02:75:84:27:ae:6f:82:a3:02:48:5f:72:62:
a3:05:35:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:19 2025 by rpki-client