Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/301BCE66DCBB11EF9E5FA1A4762E951A.roa
File: 301BCE66DCBB11EF9E5FA1A4762E951A.roa (raw, json)
Hash identifier: kyBLDjJplAwSZGJ4HVMVHFwgQAV34Eq/JT6gbLLvSpU=
Subject key identifier: 6E:0A:89:E0:B5:6F:D8:3C:28:46:FE:CF:AD:78:56:9D:1F:7B:7C:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C13
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/301BCE66DCBB11EF9E5FA1A4762E951A.roa
Signing time: Mon 27 Jan 2025 14:29:59 +0000
ROA not before: Mon 27 Jan 2025 14:29:56 +0000
ROA not after: Sat 08 Feb 2025 14:29:56 +0000
asID: 133180
IP address blocks: 154.82.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85011 (0x14c13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 14:29:56 2025 GMT
Not After : Feb 8 14:29:56 2025 GMT
Subject: CN=67979867-01ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:cd:30:b9:f4:b1:6c:ad:20:a3:ca:1d:48:
62:c3:10:ff:d3:ce:d9:46:f1:2e:b1:0c:ed:0a:57:
a5:0c:01:a4:90:63:dd:08:ae:0e:ce:02:1f:c6:87:
98:52:ab:ec:46:d4:66:74:0a:72:c5:19:6a:e6:07:
16:aa:37:31:15:1a:48:9e:68:45:6f:cb:40:a9:43:
e3:81:17:75:57:61:3f:02:b9:7e:fb:47:55:86:69:
dd:9d:2e:55:39:11:91:bc:2c:e2:57:3d:aa:98:cd:
b8:44:4e:10:01:11:c2:5d:d9:3e:21:7b:1a:c4:82:
a3:08:44:25:fc:1b:22:c3:66:be:7f:66:61:d8:a4:
5c:6f:9c:b1:47:bb:c1:6f:12:db:81:9c:17:6b:ca:
ba:cc:36:8a:3f:f4:03:03:94:c6:5e:94:bd:38:45:
ac:65:3f:9a:19:13:13:f6:6f:77:09:a9:92:a4:be:
de:ca:00:8f:0a:4b:e5:33:56:7f:1e:6f:d0:3d:49:
7e:9f:12:10:ff:1e:d9:fa:56:b3:bb:2e:32:86:26:
28:7b:cc:f2:d9:a9:34:38:89:db:b9:fc:a2:0f:d3:
7f:11:e1:49:b4:d5:3a:41:7e:44:b7:a7:60:fd:50:
c9:37:9e:cf:63:4b:5f:e3:a6:5e:60:69:50:d9:54:
c0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0A:89:E0:B5:6F:D8:3C:28:46:FE:CF:AD:78:56:9D:1F:7B:7C:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/301BCE66DCBB11EF9E5FA1A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
Signature Algorithm: sha256WithRSAEncryption
66:49:76:b5:48:cf:6a:8f:d0:8f:c6:74:7d:1f:9c:96:48:3a:
90:e3:5a:32:72:0b:56:e4:2e:93:e1:94:e8:d6:fe:87:e6:55:
28:98:77:28:50:66:40:2d:dd:15:96:05:92:c8:fd:3a:13:cc:
8d:fb:39:ca:7c:89:b8:29:cc:23:eb:75:7a:37:d6:46:e9:97:
a5:b3:b8:99:5e:31:2e:6a:35:e1:42:4b:61:af:f0:85:79:7e:
a9:ce:c4:f4:5f:01:ae:dd:92:f0:c7:97:d0:71:f1:77:e7:63:
da:06:b3:e4:fc:92:86:43:50:52:52:42:cd:6b:02:1c:3b:d2:
00:68:32:62:f0:08:fa:86:6e:5a:cb:1b:80:eb:67:53:03:b3:
bd:a1:47:e5:8f:93:9e:49:e4:cc:88:3a:10:d4:86:c8:99:be:
2c:66:b1:75:9e:22:d8:3f:8c:b3:ae:97:1a:17:30:d7:5f:7f:
b0:b8:92:44:12:98:1f:97:54:fa:1b:4c:f1:96:0d:cc:9a:49:
6e:57:b0:60:67:5b:e6:a9:23:d7:7e:61:c4:44:af:d8:bb:d6:
a8:e8:5b:a8:a7:b3:83:30:11:40:41:f6:bd:17:75:60:5c:2f:
ad:8b:73:55:8d:28:54:8d:21:13:f0:4b:5e:ef:3e:8d:53:8c:
cd:ff:a7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:06 2025 by rpki-client