Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26944954D95F11EF85BC847B762E951A.roa
File: 26944954D95F11EF85BC847B762E951A.roa (raw, json)
Hash identifier: imUyMECsPIAIYvgoXlhQ+SbmbqdLqhguqEfzpwLNmDs=
Subject key identifier: E8:BC:13:F2:B2:06:85:F9:F9:24:0E:AB:62:16:E3:CE:BB:E9:70:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01405B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26944954D95F11EF85BC847B762E951A.roa
Signing time: Thu 23 Jan 2025 07:53:37 +0000
ROA not before: Thu 23 Jan 2025 07:53:33 +0000
ROA not after: Sat 08 Feb 2025 07:53:33 +0000
asID: 18229
IP address blocks: 154.210.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82011 (0x1405b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 07:53:33 2025 GMT
Not After : Feb 8 07:53:33 2025 GMT
Subject: CN=6791f580-a0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:63:e8:fa:b4:88:67:6d:99:ca:1b:3a:9d:9a:
fc:98:c8:f0:16:b0:d9:67:89:9d:e0:d8:3a:97:6b:
bc:33:87:f3:93:8b:39:53:5b:a9:e0:93:1d:b1:3c:
76:8c:31:8a:49:97:f3:6f:dd:0e:a1:68:b2:57:40:
f1:0a:64:73:0e:fc:48:1e:c6:a5:fc:3d:46:82:79:
df:1a:72:fb:2b:47:64:73:63:d6:15:73:a7:4d:e2:
b6:61:a4:b3:02:3d:45:04:38:f2:84:a1:70:21:d7:
39:6b:c2:4f:89:8d:57:78:3a:c3:a2:7b:ab:98:f2:
92:80:91:98:e3:37:05:a5:f3:2d:3d:96:85:9c:85:
37:62:43:2e:1f:82:f8:7d:07:1f:7c:a6:50:87:2e:
9b:27:2a:0b:bf:f8:e3:de:60:2e:83:61:e6:86:15:
eb:85:b0:26:10:f3:55:dc:02:a7:32:a2:7f:0f:05:
f3:d0:c9:a8:1f:d7:94:ce:87:9e:fe:0d:ac:75:0a:
f8:10:5c:5a:0a:07:72:d0:65:c6:c0:b6:0c:3e:cc:
4d:18:24:49:fb:9e:5e:91:f0:64:05:fd:92:bf:bb:
07:ba:bd:42:d7:0c:a1:fb:e3:96:ca:14:fe:2f:22:
a4:0b:6b:e2:12:90:0f:5f:14:e7:49:06:4c:2c:b2:
99:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BC:13:F2:B2:06:85:F9:F9:24:0E:AB:62:16:E3:CE:BB:E9:70:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26944954D95F11EF85BC847B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.174.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:8b:51:fe:fd:15:b4:89:cc:49:90:a4:1b:f9:75:c0:20:13:
ce:48:30:43:db:f1:42:fe:b8:11:46:c3:6c:ad:b1:d3:65:37:
1d:08:ab:3f:84:9f:0f:bf:65:c5:7d:73:af:9f:73:d6:c1:ea:
84:45:8c:3a:dc:d5:8b:c8:6a:bb:0b:3f:24:03:8a:b0:b5:d1:
53:5d:c6:02:ad:a6:d8:f9:46:ad:3f:04:4a:d6:9e:a9:de:e4:
02:42:2b:32:f7:ad:79:ac:44:1d:6a:07:a0:b8:0d:ad:4b:62:
68:88:8f:cf:c4:a1:54:56:9d:f8:83:0c:fd:0c:92:a8:ec:ab:
d9:1c:b9:f2:0b:cf:85:20:7a:ba:50:65:af:a6:1e:a2:bf:cd:
b3:25:0f:06:d3:bf:e3:ea:b6:44:65:44:1f:29:1e:b5:c1:2d:
16:13:81:3c:ab:79:54:e9:b7:07:fc:d9:5e:86:3a:c0:d8:8d:
d1:82:a8:c0:d5:30:6c:6c:6a:6f:74:43:ef:71:4d:3c:b9:53:
85:ce:14:40:da:b8:c3:30:8b:39:c0:11:f7:0e:35:24:e6:41:
02:22:ac:24:cb:75:92:7f:53:3f:1d:73:43:6d:c1:29:b8:ed:
4b:f9:58:7d:2b:f8:58:a0:20:0d:e8:3e:85:27:bd:d2:8d:11:
0f:77:9a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:45:48 2025 by rpki-client