Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/241AE2E8D0BB11EFA66B595F762E951A.roa
File: 241AE2E8D0BB11EFA66B595F762E951A.roa (raw, json)
Hash identifier: oNyZNwwj2zbbGcktS9DxSWSghPu9onS6ek72c0BmvzU=
Subject key identifier: 23:75:B6:D9:B9:C2:13:89:09:BF:FD:A3:89:EC:42:76:EC:CB:5E:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013AA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/241AE2E8D0BB11EFA66B595F762E951A.roa
Signing time: Sun 12 Jan 2025 07:59:25 +0000
ROA not before: Sun 12 Jan 2025 07:59:22 +0000
ROA not after: Fri 14 Feb 2025 07:59:22 +0000
asID: 137899
IP address blocks: 154.222.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80552 (0x13aa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 07:59:22 2025 GMT
Not After : Feb 14 07:59:22 2025 GMT
Subject: CN=6783765d-5a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:32:d9:8f:59:81:70:3c:75:08:e7:60:6d:0a:
a4:98:20:e0:b7:29:eb:ad:d0:72:48:9c:c9:51:a0:
f5:1a:a8:73:4a:bf:a6:af:5e:a5:aa:16:fc:b6:1d:
3c:b5:b1:e9:a8:d6:1c:c9:94:52:e8:ad:5c:e1:89:
d1:1d:ff:07:fc:f0:47:56:22:09:62:a3:fe:00:af:
a9:c2:a3:8f:4a:06:5b:02:ba:b9:1a:63:dc:93:c7:
36:e5:bd:47:89:8f:5e:79:f3:50:68:b1:9d:40:7d:
fe:62:fa:fa:00:5a:6c:6a:9f:5a:bc:ae:86:93:5f:
f4:32:92:83:9d:fc:9b:c6:f4:57:42:84:ae:8f:d2:
89:f6:46:99:9b:b4:5f:de:3d:68:24:38:48:7a:44:
0c:b3:e0:ad:8a:71:90:29:51:be:4c:92:54:58:fc:
17:5e:ff:09:af:94:d9:63:ed:12:22:cb:50:30:03:
73:da:3e:7e:cd:ee:97:61:51:61:13:bc:a8:a2:b3:
c8:31:63:2a:f3:b2:00:c1:19:83:46:8d:03:c8:69:
93:b7:77:0e:96:8e:30:a5:3d:bf:95:a4:10:3a:46:
6e:eb:15:4d:50:5a:7a:2e:0f:a4:75:d9:f4:f8:5a:
5d:e4:37:b0:93:31:5e:e7:4f:04:8c:1c:45:58:53:
1d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:75:B6:D9:B9:C2:13:89:09:BF:FD:A3:89:EC:42:76:EC:CB:5E:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/241AE2E8D0BB11EFA66B595F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.24.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:1e:0d:91:c0:b3:50:a3:5f:d1:03:54:80:9c:63:4c:92:a6:
b4:5f:b6:2e:03:42:68:a7:4a:e9:f9:d0:86:04:a7:a0:5c:c7:
f0:7c:8f:de:17:b4:71:59:3a:06:e4:51:eb:f7:42:65:8e:e9:
45:8d:9d:92:42:77:e8:c7:7e:2f:c4:62:72:cf:85:2d:b2:47:
f2:ac:e9:4f:08:b5:55:ee:74:a0:49:51:dc:ee:01:21:e8:87:
a0:8b:f8:e1:6f:62:a5:70:98:f9:04:35:b8:47:94:df:0e:0e:
2b:dc:1c:ed:30:73:6b:1d:85:58:dd:05:f5:a5:10:dc:86:60:
1f:26:ba:12:2b:20:1e:55:91:d4:14:65:f0:f4:3a:27:cf:1d:
54:a1:a6:7b:cd:60:3e:eb:e7:96:45:82:9b:cc:85:ea:e4:af:
5d:95:8b:fb:46:43:0f:ef:7e:bd:e0:5b:64:4b:85:2c:42:09:
17:69:e7:23:12:f8:d7:5d:aa:3c:fa:f3:98:d1:a4:72:8f:ab:
86:d4:57:1d:54:34:cc:29:49:10:89:79:72:53:2d:06:6c:cf:
65:16:19:17:6e:98:12:7c:60:7c:ff:c3:89:a3:50:7a:da:73:
c3:15:b8:dc:6f:10:1b:e3:c5:66:8a:0c:41:72:96:cc:74:f1:
39:e2:3d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:59:21 2025 by rpki-client