Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/209D162AD73411EFB3F9389E762E951A.roa
File: 209D162AD73411EFB3F9389E762E951A.roa (raw, json)
Hash identifier: KVIxSO299fkfcD/9oFNPGU0U1X//tKZGXQL9/TRLRoc=
Subject key identifier: D3:C7:4F:8F:70:68:EF:E9:AA:F0:BB:CE:E6:3C:A8:4D:5D:BE:8B:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/209D162AD73411EFB3F9389E762E951A.roa
Signing time: Mon 20 Jan 2025 13:40:36 +0000
ROA not before: Mon 20 Jan 2025 13:40:32 +0000
ROA not after: Wed 05 Feb 2025 13:40:32 +0000
asID: 140570
IP address blocks: 154.91.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81496 (0x13e58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 20 13:40:32 2025 GMT
Not After : Feb 5 13:40:32 2025 GMT
Subject: CN=678e5254-7484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:af:74:bb:7e:8f:5b:9d:c2:e9:01:38:1e:
e1:0c:46:52:9e:1d:b5:d3:b7:6a:fd:69:63:58:1e:
95:47:ce:c1:91:bb:75:28:79:0c:c9:6d:cd:eb:d0:
53:68:41:0d:76:99:da:d5:ee:68:3c:d3:14:11:3c:
4d:a4:9f:e8:7a:94:ad:cb:20:05:e4:f4:aa:f3:f0:
c1:bd:be:35:56:af:43:20:1f:dc:dc:1c:a3:54:14:
5e:18:73:1f:24:51:54:ed:4c:01:ba:10:aa:a9:1b:
71:72:09:e6:49:c6:1f:eb:17:d2:d8:67:11:ac:d0:
d7:7b:e7:a9:d1:86:c4:3d:36:0b:fd:49:89:6d:e0:
b9:cf:a3:21:aa:99:a9:20:dd:ed:b8:0b:3c:49:80:
94:8c:35:b1:57:24:e6:ac:1e:14:fa:d8:c6:26:2f:
fa:64:28:f6:db:74:66:19:06:21:25:8b:28:88:55:
4f:e3:43:e6:7d:b4:06:99:12:5a:05:dc:07:e1:16:
64:e9:85:87:41:4e:0c:a6:25:b2:5c:85:8e:23:26:
47:d4:e0:9d:29:82:d0:0c:7d:97:36:dc:2c:bd:a5:
57:94:f5:19:cb:03:ec:84:11:e6:09:ec:23:66:b9:
a7:d8:d9:fa:68:e0:91:10:82:10:eb:c9:cb:a2:13:
41:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C7:4F:8F:70:68:EF:E9:AA:F0:BB:CE:E6:3C:A8:4D:5D:BE:8B:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/209D162AD73411EFB3F9389E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.7.0/24
Signature Algorithm: sha256WithRSAEncryption
01:08:1c:52:b2:34:1f:ab:db:bb:43:91:02:b8:eb:58:a8:8e:
d3:ce:f9:d6:a5:93:b8:4f:54:b9:13:92:25:99:24:01:34:98:
57:81:de:d4:18:a4:b4:45:b9:8b:b0:8d:ff:9c:bf:71:5a:3f:
98:b8:14:e8:7e:39:97:36:6e:c0:26:e0:63:fc:3a:9a:0c:3e:
fc:4f:b8:f1:c2:51:f5:d6:e9:a5:85:c7:0e:2a:fe:c7:15:b8:
55:e0:b7:78:ff:cd:3b:87:4d:11:f1:fc:10:8b:3c:4e:18:87:
61:41:b3:7a:df:d9:67:c6:b0:34:61:09:3a:b9:b0:26:c0:81:
ae:c5:a7:ef:8d:a8:09:fd:ca:12:d8:b0:ca:05:8e:2e:87:a0:
8a:17:e3:c4:36:e0:31:94:1e:4c:d9:27:bd:ed:4a:68:fd:90:
26:d9:8f:8f:d9:db:d0:f0:d4:7b:88:52:6c:f8:2f:33:b8:88:
a7:d8:1a:4a:d5:bf:e2:88:24:71:42:1f:36:1f:51:3e:44:58:
63:b6:a3:46:e9:eb:83:af:94:7d:d2:30:2c:96:22:0b:c5:4a:
a4:e9:32:2e:6e:43:26:b1:9c:35:55:9e:0d:34:dd:b3:80:ac:
71:2d:c9:73:b7:f8:ef:11:8d:2c:5c:44:46:45:c9:50:e2:68:
e8:c9:9d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:03:21 2025 by rpki-client