Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3036BDACD8BF11EF88555246762E951A.roa
File: 3036BDACD8BF11EF88555246762E951A.roa (raw, json)
Hash identifier: ibxjl/YEO2ZJMP3GesdKA21n3Wkn7Ns2h5EbLeAMylM=
Subject key identifier: AE:8B:4B:27:44:CE:51:F9:6F:64:D6:78:F3:BC:97:0E:0F:2E:E9:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F5A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3036BDACD8BF11EF88555246762E951A.roa
Signing time: Wed 22 Jan 2025 12:48:33 +0000
ROA not before: Wed 22 Jan 2025 12:48:29 +0000
ROA not after: Sat 08 Feb 2025 12:48:29 +0000
asID: 18229
IP address blocks: 154.210.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81754 (0x13f5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 12:48:29 2025 GMT
Not After : Feb 8 12:48:29 2025 GMT
Subject: CN=6790e921-7a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:ed:53:11:a4:68:c9:4b:b1:5f:42:cd:76:
e6:d3:5a:20:99:25:da:51:68:98:0c:56:48:ed:17:
a2:d8:93:c7:b1:16:70:96:7c:a1:24:d5:56:de:da:
65:74:ef:8a:8a:d6:19:71:70:9a:a0:ee:7f:8f:dc:
fc:2e:d6:8b:06:90:fd:1e:97:58:b8:40:2d:b0:57:
5c:bc:de:98:c0:ec:de:9b:70:c7:cf:26:52:3b:4a:
9b:1d:ca:3b:5d:4b:e4:2e:fa:f9:fd:72:96:6f:b9:
cf:a4:44:b9:85:b2:f7:fa:5e:2f:b6:9b:2b:ce:e0:
a7:a1:97:19:e7:4f:83:ca:f5:f4:0c:81:80:f4:13:
b4:8f:99:2a:d5:b7:0a:3b:ab:3d:88:6a:f0:10:73:
bb:3e:90:55:b4:2b:af:5d:0c:ec:57:c6:79:11:45:
32:00:62:65:dc:89:7d:ab:48:29:76:6d:36:be:fd:
5a:e9:e9:72:f6:26:e0:18:5b:35:8d:58:3e:29:43:
a3:34:26:d0:3d:9c:58:4a:36:9c:9c:5a:44:f6:b9:
c4:a2:f1:2d:2c:3f:a6:9e:30:a4:0e:bb:22:04:ff:
fd:ad:d9:d2:d7:df:7e:d9:aa:5e:de:9e:0b:84:d8:
e0:37:5b:42:61:3c:23:b3:0f:6b:65:24:12:66:1a:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8B:4B:27:44:CE:51:F9:6F:64:D6:78:F3:BC:97:0E:0F:2E:E9:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3036BDACD8BF11EF88555246762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.144.0/24
Signature Algorithm: sha256WithRSAEncryption
48:bb:82:14:1f:34:11:05:57:4f:5c:b5:1c:1d:6e:61:bb:26:
d2:07:f9:05:f0:67:2f:e0:8e:36:8c:34:ff:74:6c:c3:ce:e8:
2b:31:a4:6f:77:fc:0c:f1:2b:8e:3f:aa:2e:12:04:26:56:a1:
11:b8:67:84:da:e6:1a:6f:07:0a:c3:78:32:c2:31:52:4e:77:
3d:a3:49:9e:de:b7:a8:fe:41:95:fd:80:22:43:2b:f1:44:f1:
b6:84:84:6c:33:94:63:9b:52:a2:c7:8a:ec:53:53:28:1e:c2:
ca:c4:0e:39:07:79:1d:78:a2:c8:57:79:74:9a:e2:58:f8:05:
5c:03:1f:3d:ff:39:63:c5:b7:24:55:83:e4:88:b6:46:9f:83:
e4:a0:9a:83:a8:aa:52:15:fb:26:61:81:58:f5:dc:39:be:a5:
65:29:b4:16:10:83:16:64:3d:d5:42:40:79:ad:c9:60:13:26:
50:bf:9a:b8:19:64:a2:1c:dd:0c:00:76:86:64:2a:9d:ca:3d:
f1:fb:d8:fd:b8:7d:49:78:83:42:7d:71:9c:a0:e2:e1:b0:d2:
02:ad:9f:77:d5:aa:ad:1f:7f:14:b3:d1:ca:a9:3d:00:1f:a2:
20:af:24:2f:87:4b:cb:02:71:dd:eb:12:da:e4:d1:4d:45:cc:
f3:96:f8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:04:31 2025 by rpki-client