Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21F7C588C29E11EF9E29DBB0762E951A.roa
File: 21F7C588C29E11EF9E29DBB0762E951A.roa (raw, json)
Hash identifier: HwQRf4+Bl8tRfSkUgC+Vk1GWX7mihHQArnXv6jgsPLw=
Subject key identifier: 77:59:C3:FF:94:BD:89:00:71:F2:69:6E:17:9C:F0:E5:F0:6E:BD:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01251C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21F7C588C29E11EF9E29DBB0762E951A.roa
Signing time: Wed 25 Dec 2024 08:56:30 +0000
ROA not before: Wed 25 Dec 2024 08:56:27 +0000
ROA not after: Sun 09 Feb 2025 08:56:27 +0000
asID: 138915
IP address blocks: 154.223.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75036 (0x1251c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 08:56:27 2024 GMT
Not After : Feb 9 08:56:27 2025 GMT
Subject: CN=676bc8be-1082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3f:c2:82:03:53:4f:94:9c:ee:26:7d:73:4c:
95:a9:cf:67:c3:be:af:22:9f:a7:bb:fe:8d:e0:e6:
cc:2c:b1:2f:bb:5a:19:aa:d0:c7:a5:66:36:7b:31:
c5:e2:53:16:7d:e1:ac:a4:68:fe:32:49:03:3f:70:
b6:85:66:99:c2:fe:ee:86:be:7f:76:86:74:85:7f:
2b:1d:38:31:94:59:98:e0:30:78:2c:69:b6:41:a8:
42:23:88:05:b9:ed:33:df:35:78:ff:fc:74:5b:45:
5c:57:78:ce:2f:7e:25:37:5b:b0:f8:5a:bc:fb:e4:
06:a5:20:f2:f3:14:2f:42:2f:ed:7b:78:2d:4b:87:
64:68:cc:b2:09:31:67:d8:23:35:b1:36:45:28:c7:
43:66:77:3c:15:27:3f:59:f2:19:54:b5:99:74:6f:
c2:1f:52:65:98:13:18:d1:7e:85:56:33:51:41:bb:
60:66:7d:31:cd:5a:13:02:2f:f6:d2:8d:6e:53:53:
93:72:dc:5f:c7:42:e6:4f:06:d1:6b:16:7d:fe:2e:
c3:8e:33:e5:9a:ac:55:29:80:fc:46:88:6c:f0:f0:
5a:1a:32:e3:3c:6f:2f:5a:43:74:4f:de:34:7d:c5:
0e:c1:be:2e:51:2c:e7:ec:98:5e:91:05:c0:63:b4:
27:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:59:C3:FF:94:BD:89:00:71:F2:69:6E:17:9C:F0:E5:F0:6E:BD:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21F7C588C29E11EF9E29DBB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.72.0/21
Signature Algorithm: sha256WithRSAEncryption
32:62:1c:b2:d0:4a:15:f5:29:74:bc:27:9f:75:c5:5d:d9:3e:
ea:a0:03:1a:1a:33:e8:9e:8a:a4:36:94:a1:19:ac:b7:8f:2f:
5d:b3:9c:4c:67:7c:4c:1f:18:e6:bb:74:30:9c:b8:af:89:c2:
81:2e:9e:f5:64:92:15:ce:7e:15:6a:78:84:c0:00:f9:71:45:
a3:89:6a:5b:1a:73:4f:16:c3:46:98:01:cd:25:07:c3:bd:23:
e6:fc:ad:35:d0:47:46:66:e1:3b:4f:86:45:a2:59:9c:d8:0f:
dd:d7:02:7c:14:65:80:a4:f7:b4:bc:2b:a8:81:a7:1f:b9:fa:
5c:52:d0:d3:92:a0:02:22:18:03:66:ac:c7:39:b3:76:3d:69:
97:1c:6e:13:b0:fa:7a:d5:86:20:d2:26:01:f9:a3:fa:75:b0:
4f:2f:c0:bf:6a:70:a8:8b:be:db:31:cd:53:74:b7:fb:f8:7c:
9d:eb:65:3f:0a:3b:30:56:39:41:9a:fb:63:fa:e1:e8:bb:bb:
39:f8:66:13:12:d2:4a:ba:c7:b6:56:47:f4:cc:f5:c0:c8:16:
a2:16:a3:99:30:07:5d:bf:c5:a9:ce:f3:01:7c:34:7b:4d:61:
e6:74:1a:56:06:3b:b1:cd:11:c5:c0:11:e6:8a:b8:df:ad:ad:
43:71:d7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:25:18 2025 by rpki-client