Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28A9324CCADA11EFAFC3037E762E951A.roa
File: 28A9324CCADA11EFAFC3037E762E951A.roa (raw, json)
Hash identifier: opBgRa3c5+HW9rvB4krl3cFEcSHbDRpfiOsHB+QSrfo=
Subject key identifier: FD:51:B2:82:DD:75:C6:BF:11:6B:1B:5B:6B:9C:96:AD:6F:58:99:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013547
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28A9324CCADA11EFAFC3037E762E951A.roa
Signing time: Sat 04 Jan 2025 20:26:21 +0000
ROA not before: Sun 05 Jan 2025 20:26:17 +0000
ROA not after: Sat 08 Feb 2025 20:26:17 +0000
asID: 203020
IP address blocks: 154.217.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79175 (0x13547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 20:26:17 2025 GMT
Not After : Feb 8 20:26:17 2025 GMT
Subject: CN=6779996c-f868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:bd:63:0b:c2:a6:9a:7f:59:12:1c:a4:2a:
98:b1:4e:9c:07:0f:28:88:f4:af:0e:89:f8:23:7a:
bd:4d:4d:e1:f9:60:66:30:b8:bc:e5:eb:ee:c7:52:
f2:e1:44:9a:5d:c1:54:ab:ab:56:79:1e:6b:0e:04:
f4:97:91:35:31:9e:50:9b:c6:54:0f:af:a1:95:cf:
6c:46:ea:a4:94:37:9c:3b:5e:f5:04:d9:77:3b:fa:
1e:3f:39:e5:5f:8b:57:8c:ae:d8:ce:c2:01:a7:f2:
e8:4d:0d:fe:81:1a:ad:2e:6f:b2:99:b4:f1:7c:48:
3b:5e:a8:cc:ed:4b:fc:1b:9f:8c:bd:ce:74:04:25:
2c:89:56:54:a5:6a:e3:48:b7:71:99:62:cb:ac:68:
be:17:d5:ac:3f:d6:24:27:a1:75:b5:d7:85:8e:24:
2e:6e:1f:db:b3:2b:03:9d:54:e6:41:a7:1f:43:d2:
8e:79:c5:99:59:46:55:fd:0b:67:94:4b:45:43:82:
74:9a:1a:41:4e:7d:ad:83:4f:41:36:55:b9:b9:7a:
42:71:4e:06:16:7a:46:68:b9:16:b4:11:78:59:8e:
6d:33:e4:c6:f1:cf:45:d9:fa:c9:ea:22:99:5d:98:
78:da:bb:e0:3a:1e:19:0b:07:7c:15:b5:94:e8:8c:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:51:B2:82:DD:75:C6:BF:11:6B:1B:5B:6B:9C:96:AD:6F:58:99:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28A9324CCADA11EFAFC3037E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.136.0/22
Signature Algorithm: sha256WithRSAEncryption
96:72:96:9c:a8:08:e0:f3:f2:60:ae:a8:50:f5:d3:da:a8:da:
c3:fe:25:9a:ed:f1:8e:61:4c:ae:0b:04:ca:bb:74:8c:29:6d:
7c:0a:ca:2d:fc:c7:c6:04:29:42:46:29:fd:1c:a5:9b:ca:2e:
17:3e:24:64:b6:30:76:d3:06:0e:bb:8b:27:04:51:78:dc:b7:
b6:7a:24:1e:bf:7d:fc:b6:25:51:c1:ee:b3:c3:55:3f:a2:b0:
f2:a6:47:49:5d:58:06:b0:00:68:ce:5a:95:4e:74:7f:1e:c5:
69:03:a6:11:c7:16:b7:54:cf:8b:34:db:52:fe:d2:e5:88:ea:
59:80:6a:5e:18:02:11:64:1d:3b:65:7f:dd:60:e0:bc:55:f6:
23:90:92:ee:49:3c:d0:39:2a:43:98:cc:fa:5a:cd:03:b5:f9:
27:d4:33:40:b7:e4:90:59:e3:71:1f:18:55:1e:ec:e6:c3:49:
6f:e5:23:d6:22:8c:f7:09:30:f6:2a:bd:93:ae:6c:dd:24:b4:
fa:88:02:79:0a:78:12:07:f4:19:42:ed:c3:e2:dd:0d:b6:31:
49:45:7a:c7:99:fa:a0:23:4e:94:8e:6a:78:68:e1:20:4b:5c:
e8:fb:e9:96:bd:d0:ad:81:60:8f:7f:af:75:69:e4:fe:2a:0e:
fe:9e:1c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:06 2025 by rpki-client