Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/230C5A64DA3C11EFA250794C762E951A.roa
File: 230C5A64DA3C11EFA250794C762E951A.roa (raw, json)
Hash identifier: 6a0TOkSFRTu64hpK1XdJwNq+oXgbOr1gZjknXe7EWuc=
Subject key identifier: BA:68:77:44:68:95:50:96:BE:CA:37:CD:2A:72:1E:22:B7:A7:22:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014567
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/230C5A64DA3C11EFA250794C762E951A.roa
Signing time: Fri 24 Jan 2025 10:15:29 +0000
ROA not before: Fri 24 Jan 2025 10:15:25 +0000
ROA not after: Wed 05 Mar 2025 10:15:25 +0000
asID: 202656
IP address blocks: 154.219.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83303 (0x14567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:15:25 2025 GMT
Not After : Mar 5 10:15:25 2025 GMT
Subject: CN=67936841-0c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5d:ca:cf:19:01:8e:18:a2:82:54:d1:3b:ac:
9f:b6:b5:2b:29:4c:dd:64:22:0b:58:1a:8d:7c:99:
25:5b:8f:4a:a4:4f:3b:be:e4:8c:64:b8:c2:6c:58:
6b:de:03:9d:ba:a9:0c:b7:a5:5a:1a:4a:55:cc:3e:
8a:11:f5:1e:10:9e:cf:af:a8:bb:c8:cd:3c:3b:8d:
9e:ea:f9:2e:71:be:99:2f:77:42:67:0a:d0:19:0b:
fa:9a:f5:60:34:af:ad:4a:d1:45:41:3a:b5:5e:b5:
2c:f7:14:0c:c2:e8:02:27:af:e4:8d:40:90:f6:55:
f7:c0:db:76:39:8f:36:4e:b3:46:6a:a1:47:46:60:
f4:72:fb:0c:f1:b0:d9:8f:8d:77:d8:65:af:8f:17:
f1:0d:ab:6b:c3:75:46:42:de:6c:df:cd:96:89:53:
b5:14:7c:bb:d8:8f:c4:90:13:11:09:97:d0:52:44:
4e:c9:f3:b4:dd:c1:de:f2:56:de:ad:ed:56:6d:68:
3f:de:26:8c:fe:2f:07:4e:8d:9d:44:81:d6:6d:31:
77:57:58:b6:a5:6e:15:ad:9d:f1:79:97:8f:0e:1c:
b3:97:de:ca:fb:cb:9a:3c:ef:66:5f:60:a1:72:0f:
ea:86:ca:99:78:31:08:61:fa:be:40:15:56:a7:0d:
12:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:68:77:44:68:95:50:96:BE:CA:37:CD:2A:72:1E:22:B7:A7:22:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/230C5A64DA3C11EFA250794C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.243.0/24
Signature Algorithm: sha256WithRSAEncryption
07:be:e0:a1:ee:3a:8e:69:6b:de:94:5a:5b:94:7d:b5:8d:74:
1c:32:4d:f8:ed:d0:55:62:3b:a7:69:f0:24:40:94:26:2c:8e:
22:0c:51:80:20:fc:64:6f:5c:15:3b:ce:d0:e2:01:6c:61:e4:
af:d9:53:b6:93:84:bb:f9:74:1e:b1:73:aa:91:fa:87:2b:b9:
55:c6:d1:18:1a:ab:ef:0d:a8:ae:3f:3b:d0:51:00:87:f3:5e:
6f:a6:35:20:2f:ad:8f:0a:c8:e3:47:90:95:75:a9:01:32:0b:
59:60:52:4f:c2:d6:17:aa:5e:8a:67:77:29:e6:d6:d3:94:c6:
e2:f4:d2:45:6a:2a:be:92:bf:8b:fe:b2:8c:b7:8b:f5:37:57:
e2:21:e9:a8:4b:07:0f:8f:c8:14:2c:6e:0f:f3:f1:06:3d:cb:
c7:90:9d:b4:f2:61:32:99:01:e2:cd:07:85:ee:27:ba:04:17:
d7:c9:53:88:f1:de:58:dd:18:15:24:f4:17:38:46:f0:2c:41:
8d:40:3c:ab:d5:f4:29:f2:b1:c2:60:06:bb:ec:b1:32:6b:32:
41:4d:02:a1:b0:dd:83:c0:43:28:57:29:2f:74:ba:f4:e8:0f:
ac:65:b2:5f:81:c1:ab:d6:6c:fe:86:ba:43:5f:16:ce:94:22:
c7:49:86:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:29:42 2025 by rpki-client