Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2619546AD0BD11EF9C8A7A6A762E951A.roa
File: 2619546AD0BD11EF9C8A7A6A762E951A.roa (raw, json)
Hash identifier: Who4amE8AvnI3IpQ9VjVxJGe1Z74eA6aFsCcV9kFfAA=
Subject key identifier: 2F:CE:F2:65:11:C5:0A:AB:95:C5:EE:10:AD:C7:77:CA:E3:21:C8:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013AB7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2619546AD0BD11EF9C8A7A6A762E951A.roa
Signing time: Sun 12 Jan 2025 08:13:48 +0000
ROA not before: Sun 12 Jan 2025 08:13:44 +0000
ROA not after: Fri 14 Feb 2025 08:13:44 +0000
asID: 142032
IP address blocks: 154.222.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80567 (0x13ab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 08:13:44 2025 GMT
Not After : Feb 14 08:13:44 2025 GMT
Subject: CN=678379bc-79c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:41:cc:dc:29:28:cc:e6:a3:38:72:31:bf:
1c:84:82:a9:02:95:3e:de:c2:a1:40:81:16:ea:6e:
13:40:0e:fc:ac:d7:05:1e:85:ed:53:42:14:85:b5:
4f:95:09:06:c3:f2:ee:9a:20:bc:5a:d5:a5:22:8f:
50:45:8a:c8:a3:06:bb:6c:32:08:50:41:fd:49:d2:
13:13:22:a1:d8:c5:af:7d:17:b7:b4:56:cf:55:b3:
4e:bb:ed:b8:e0:a8:49:99:d1:f8:87:cd:78:8d:ee:
29:df:a4:27:84:4f:cb:e8:39:db:a0:b2:9e:52:e2:
20:c2:af:f4:1d:b3:ec:40:87:ba:54:07:b0:c3:f1:
bc:94:30:94:f5:2c:1d:98:b7:86:fe:da:4f:6c:9a:
8d:f6:8a:c5:40:bf:cf:58:65:dc:9a:e7:94:86:8c:
f3:59:c7:bf:65:b4:6f:5a:fc:ca:41:df:7f:ea:53:
c4:4a:51:f6:ae:b9:cc:88:92:0a:fa:19:78:ad:24:
b3:31:4b:6a:bf:f6:dd:0f:ff:d6:cc:2e:1a:73:dc:
3d:fd:45:49:da:63:54:30:e7:b5:c4:ba:86:39:13:
17:54:e8:f4:e6:b6:34:6e:bc:eb:b6:06:6c:7b:35:
53:d3:71:1a:c5:f9:2e:61:f8:78:d9:54:6c:05:92:
4f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CE:F2:65:11:C5:0A:AB:95:C5:EE:10:AD:C7:77:CA:E3:21:C8:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2619546AD0BD11EF9C8A7A6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.28.0/22
Signature Algorithm: sha256WithRSAEncryption
93:31:9f:86:71:94:bc:1c:ff:e6:d5:58:43:93:b3:0f:b2:09:
6d:58:3f:fc:7a:3d:13:74:c0:a6:8f:89:28:02:45:65:0e:0a:
92:66:6d:73:e5:97:50:06:c7:16:19:33:bc:e3:72:24:d7:d4:
61:52:0e:af:4a:d6:1e:6d:a3:23:36:3d:2e:85:66:4d:61:e0:
b3:9e:77:8f:54:c0:3b:7c:05:d1:c7:0c:6b:93:0e:52:6a:7d:
22:13:2a:99:8f:72:15:56:c8:76:85:3a:20:6a:52:14:cd:3a:
78:5f:42:d7:6a:50:ca:bc:37:73:2f:ee:8d:63:87:e8:fa:ba:
64:18:ff:9b:36:76:76:42:f3:b8:29:64:39:34:ad:71:88:81:
a1:b6:7a:95:ed:06:58:01:cd:13:b1:67:28:43:69:da:b5:c4:
79:4c:46:fd:e8:98:00:9e:8f:e9:48:66:95:f9:48:b5:fb:eb:
5a:a1:57:67:9e:1a:71:d1:7e:ee:f1:00:79:21:dd:fc:20:64:
60:61:1f:2b:4d:94:8d:36:6f:43:3d:55:12:82:19:39:5f:b0:
05:0f:01:5e:fc:f3:f8:8a:37:2f:73:3f:0f:9e:92:11:7d:6a:
fb:96:fb:18:db:35:ee:14:a4:70:e2:c5:9e:4f:97:af:71:95:
e1:f4:1b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:29 2025 by rpki-client