Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29086D32DA4A11EFA0A5FCA9762E951A.roa
File: 29086D32DA4A11EFA0A5FCA9762E951A.roa (raw, json)
Hash identifier: +SqTGYRr7FVs4MNHnx0ghcsFm1iOrgivG7ijDRCN4Sk=
Subject key identifier: D5:D8:F6:84:8A:95:25:3C:EE:1D:93:B3:5F:BD:BB:5E:73:FC:D3:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01465B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29086D32DA4A11EFA0A5FCA9762E951A.roa
Signing time: Fri 24 Jan 2025 11:55:53 +0000
ROA not before: Fri 24 Jan 2025 11:55:49 +0000
ROA not after: Sat 08 Feb 2025 11:55:49 +0000
asID: 18229
IP address blocks: 154.210.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83547 (0x1465b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:55:49 2025 GMT
Not After : Feb 8 11:55:49 2025 GMT
Subject: CN=67937fc9-01c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:0e:dd:45:81:d0:28:e3:db:f3:5a:e8:af:
d0:00:59:09:f4:b7:62:20:24:5b:6e:d5:3f:3f:79:
0b:ed:8c:f5:91:ee:36:2d:f2:16:8d:1b:a3:10:b7:
f2:a8:eb:87:60:42:fe:7f:95:e3:a6:f1:f8:d4:eb:
6c:82:1d:16:2c:dc:ac:2e:62:f8:61:cf:04:e2:cf:
f2:ec:c3:e0:df:b4:2d:f1:bb:1e:1b:56:d5:d7:3d:
ae:18:7a:8a:3f:c8:27:bb:dc:d4:02:2d:e6:d7:9b:
cf:3b:14:21:d4:32:a5:a3:08:86:55:ef:c8:56:47:
13:d2:13:77:7f:ac:f5:38:43:5d:1d:c3:00:c2:bf:
ac:e0:39:05:1e:a3:9d:67:9e:05:93:05:14:eb:19:
90:3c:e8:f4:1f:70:41:4c:2a:32:3b:30:af:b8:26:
16:90:72:bf:e4:33:dc:2f:60:cc:1c:de:4a:65:b4:
23:02:45:dd:7c:d0:9e:0b:dd:b0:29:16:a1:f9:ba:
f8:5f:02:68:42:d1:1e:c1:1b:15:80:d4:dd:44:fe:
25:36:83:6b:1e:17:c6:ff:76:ee:21:a6:86:20:4e:
43:13:2b:0e:44:44:39:fc:11:23:ac:d5:17:ca:1a:
b8:a8:d9:e5:c6:f9:bd:01:78:c9:07:d1:af:14:00:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D8:F6:84:8A:95:25:3C:EE:1D:93:B3:5F:BD:BB:5E:73:FC:D3:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29086D32DA4A11EFA0A5FCA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.183.0/24
Signature Algorithm: sha256WithRSAEncryption
af:14:5a:72:12:36:90:d1:74:8f:6d:25:db:12:2e:60:b4:b8:
09:1a:7b:6f:1c:ca:f8:75:b3:c1:2e:13:52:c2:e4:ee:fe:f1:
e8:01:f2:10:e2:d0:7f:45:bf:cd:6d:e9:2a:ec:c5:6b:41:34:
4b:f2:26:49:88:5e:b8:d0:ab:6b:5a:0c:53:6d:b6:46:b5:bc:
c7:19:ae:05:01:65:13:eb:d4:bd:ce:31:3c:cb:87:a2:80:71:
fc:3d:a6:80:85:9d:68:c2:c2:e1:ff:ae:3b:e4:0b:6c:c6:f4:
d2:be:e1:20:4c:45:47:0f:f9:36:25:0d:4b:a0:ba:a1:ec:61:
97:d1:60:30:93:d5:35:3b:5c:94:90:e7:ec:9e:8e:5a:5d:15:
cd:5f:eb:14:7d:f5:dc:b1:4b:88:28:60:04:d0:c8:f2:81:7d:
d2:b2:0b:6e:a9:76:8e:e7:c7:dd:50:6c:e0:ad:1b:b4:37:57:
5f:a2:d2:5f:96:95:bb:aa:e8:d3:1e:41:b4:6c:bb:aa:90:ca:
3b:0c:bc:94:00:6a:72:3b:b3:9c:8f:f7:15:53:ae:19:5c:95:
be:49:47:aa:0e:4e:6c:74:b1:a7:6d:5d:2e:58:37:ae:6e:fe:
8a:be:86:36:da:5b:c6:bd:75:82:f1:e8:7f:58:0f:4e:c3:f2:
3a:68:a8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:51:21 2025 by rpki-client