Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C532418DA2D11EF9F7FFF67762E951A.roa
File: 2C532418DA2D11EF9F7FFF67762E951A.roa (raw, json)
Hash identifier: FqA1ZjXgrCUMZMBIe66ymbgG/IBP7c5mwa6Hy2k4rsY=
Subject key identifier: D9:0A:7E:52:2E:81:E5:97:EE:78:55:26:0E:80:BC:26:20:D6:E7:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01446F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C532418DA2D11EF9F7FFF67762E951A.roa
Signing time: Fri 24 Jan 2025 08:28:23 +0000
ROA not before: Fri 24 Jan 2025 08:28:19 +0000
ROA not after: Wed 05 Mar 2025 08:28:19 +0000
asID: 202656
IP address blocks: 154.221.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83055 (0x1446f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:28:19 2025 GMT
Not After : Mar 5 08:28:19 2025 GMT
Subject: CN=67934f26-f27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:ed:b3:cc:11:79:c2:2c:f4:4f:be:2f:f4:
e8:80:01:d1:4f:83:d0:3a:f6:2c:b4:25:ed:85:26:
26:a1:e8:59:80:4c:d4:02:1e:38:a1:26:ab:b7:53:
df:5b:91:f0:3b:01:bd:07:f0:3e:b9:f4:2c:0b:7e:
17:0f:c3:25:52:8f:4c:db:66:3d:9f:8c:7a:a5:d9:
db:53:8d:3c:b0:a7:10:97:77:3d:8c:55:aa:55:4d:
0e:a7:c2:d5:cb:a4:21:c0:22:f0:c8:05:7c:0f:ed:
bb:53:e2:80:dd:9d:e2:05:8b:e6:02:55:21:5d:fc:
81:7f:5a:23:51:b4:2c:b2:69:96:9b:d3:ed:fe:47:
eb:05:46:1a:f9:06:58:dd:0c:4e:69:fc:40:25:53:
b2:5d:e2:50:d1:09:c5:57:3b:99:28:37:be:a8:76:
85:0e:96:be:92:24:15:57:8a:d1:4f:c6:a4:0c:82:
36:64:00:78:e0:e9:c8:0a:9c:fc:db:fe:d3:0a:cf:
34:f1:fa:83:39:32:73:cb:61:0d:72:5b:06:ec:34:
14:60:0c:df:03:e7:c4:d8:fa:4a:76:9a:f1:4c:2c:
16:41:79:15:7e:dd:64:d2:6f:f7:54:88:3c:04:e0:
31:99:74:48:9d:a8:f5:01:37:52:f3:4e:9d:d7:a1:
21:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0A:7E:52:2E:81:E5:97:EE:78:55:26:0E:80:BC:26:20:D6:E7:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C532418DA2D11EF9F7FFF67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.62.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:36:38:bc:68:f8:b3:a6:52:ec:5d:ed:4e:56:43:62:ba:b2:
bc:62:a9:79:6c:2b:26:1c:56:5f:0f:5a:f2:e1:ad:35:24:56:
d1:f0:ba:49:ca:fd:1e:ab:59:ca:09:86:d5:2a:2f:14:68:ac:
bc:a4:08:cd:32:f3:94:75:93:dc:dc:71:fe:4d:6d:93:3a:22:
6a:dd:66:53:b8:5f:4e:5b:f8:3c:30:e9:22:75:1a:48:c8:93:
4e:ae:7d:d9:2c:ad:4a:a7:c3:36:8e:73:01:05:e1:45:fb:31:
e1:92:f7:32:ee:e6:9d:d6:27:5b:a7:87:2d:4d:32:7b:48:5e:
cf:8b:92:eb:83:f0:ec:31:88:ff:e3:f1:97:d9:ec:a3:f5:85:
92:40:22:4e:08:81:6a:29:e7:89:2b:76:52:18:ba:b6:fc:da:
f6:51:dd:f3:74:2e:06:66:48:9d:96:b3:e3:7a:f8:fe:16:d6:
de:ad:56:c4:eb:40:28:63:ad:05:fb:78:0d:5f:05:a3:7e:f2:
17:b9:22:26:b1:58:59:7e:89:89:76:d2:74:96:01:2d:fd:7b:
75:9d:3b:10:ef:ac:fb:90:e0:3e:7a:ef:3d:ae:4d:c4:d5:47:
d9:1d:8d:43:5e:15:c2:fe:a0:8a:81:4c:01:40:16:69:0a:3c:
79:fe:49:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:47:33 2025 by rpki-client