Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E14D894DCAA11EF8F606BB4762E951A.roa
File: 2E14D894DCAA11EF8F606BB4762E951A.roa (raw, json)
Hash identifier: mfvn9H9Lk2FU55QBO7dNLAmJQ9XGTnCL88gCkTzaF4s=
Subject key identifier: 40:39:59:6F:A2:2D:29:80:4E:79:6C:F7:F7:52:EF:64:D7:78:2A:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C07
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E14D894DCAA11EF8F606BB4762E951A.roa
Signing time: Mon 27 Jan 2025 12:28:15 +0000
ROA not before: Mon 27 Jan 2025 12:28:11 +0000
ROA not after: Sat 08 Feb 2025 12:28:11 +0000
asID: 22773
IP address blocks: 154.219.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84999 (0x14c07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 12:28:11 2025 GMT
Not After : Feb 8 12:28:11 2025 GMT
Subject: CN=67977bdf-fa20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:ad:00:06:7a:30:b6:3b:09:4a:a2:9f:59:
29:c8:a1:6e:45:40:66:94:f0:62:6a:38:c7:a1:13:
c0:9a:00:7f:88:fc:19:03:5e:59:93:79:76:78:21:
af:fb:66:1a:cf:d9:64:5c:05:22:c3:7c:bc:0a:ab:
d8:74:9e:a0:1e:c2:82:ef:ef:98:e4:f2:b9:b6:d5:
f9:f7:27:8d:28:5b:60:a0:9d:00:7f:07:0d:ce:69:
2f:25:e6:fa:84:4e:e9:8f:f3:9c:e9:41:1d:6b:a9:
d7:d8:ca:22:6d:64:72:cc:f6:84:cd:8a:46:cb:fd:
35:f1:0e:69:b8:52:bd:2a:aa:3f:c4:1a:07:68:53:
52:9e:f4:5f:5a:58:8c:6c:ed:ab:19:97:f1:70:dd:
5e:16:4c:86:e2:10:6f:af:aa:28:4a:8a:f1:6c:8e:
55:cd:26:e3:cb:33:a5:3a:f5:29:83:ae:03:20:a6:
42:5f:a8:06:cd:fe:a9:bc:50:77:57:88:25:9a:05:
53:57:98:90:b5:71:14:aa:7b:d0:bc:05:1c:48:cb:
ee:98:e6:49:8f:03:13:cc:85:86:b1:df:4e:41:58:
df:23:43:0e:2f:26:9a:0b:24:26:f1:e9:f4:2d:4e:
d6:8c:40:19:9d:86:59:f0:4b:cd:3c:c4:f9:89:ba:
16:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:39:59:6F:A2:2D:29:80:4E:79:6C:F7:F7:52:EF:64:D7:78:2A:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E14D894DCAA11EF8F606BB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.6.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:48:a2:c7:d8:46:e7:5a:05:a9:4f:b9:bb:c2:95:b8:48:9c:
4d:1f:0e:f1:a4:a5:14:9e:5f:d9:65:e9:e4:23:a1:4b:f1:39:
06:ed:2f:1e:d3:5b:2f:d7:d9:24:47:79:2b:46:c2:1c:c6:17:
e9:e9:59:3d:17:83:57:97:89:40:a0:c3:53:b8:fd:60:f2:1b:
06:ad:45:03:d1:ca:a9:7b:49:82:60:9e:93:f4:17:ab:c7:a1:
af:79:6f:aa:f2:a5:24:00:24:8b:3b:92:ac:57:d9:1b:27:e2:
11:80:6e:d3:44:e0:c1:6a:68:41:70:b5:a5:4f:9b:52:be:9e:
94:be:51:2f:e2:06:69:a9:cd:de:9d:d8:7f:9b:91:91:e0:b9:
0b:e7:c0:d5:36:40:7f:b8:1c:b2:be:6c:1a:82:90:25:45:53:
a0:94:69:9f:a7:29:dc:50:65:e6:58:9c:f1:6a:67:1f:9f:5c:
94:fe:b3:7b:db:6f:aa:c3:eb:5e:4f:9a:4c:43:b5:31:d8:29:
0a:f8:d6:71:a4:99:fb:20:5b:a3:57:47:24:99:57:7c:a4:be:
de:04:9f:21:d4:4b:8d:43:34:d7:e8:fd:34:c0:54:8a:ad:dd:
de:bd:f8:73:b4:2f:94:04:c4:35:7c:ee:58:55:fa:c7:cf:04:
d6:20:2d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:35:43 2025 by rpki-client