Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31A1FE52D3FD11EF8CDF2192762E951A.roa
File: 31A1FE52D3FD11EF8CDF2192762E951A.roa (raw, json)
Hash identifier: KrW64iNUQsuWnv9LTyZ31RlJm/qT6NEyYPcoz3DljyQ=
Subject key identifier: 94:5D:44:42:68:35:65:48:37:15:99:EA:FA:6B:B2:9C:25:BA:6C:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31A1FE52D3FD11EF8CDF2192762E951A.roa
Signing time: Thu 16 Jan 2025 11:29:48 +0000
ROA not before: Thu 16 Jan 2025 11:29:45 +0000
ROA not after: Sun 16 Mar 2025 11:29:45 +0000
asID: 17561
IP address blocks: 154.206.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80886 (0x13bf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 11:29:45 2025 GMT
Not After : Mar 16 11:29:45 2025 GMT
Subject: CN=6788edac-44fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:21:1f:4b:c6:0e:2d:01:ce:92:fe:a5:4b:
ab:02:3b:93:6f:7f:84:2e:bd:f6:af:cb:8b:d0:3a:
96:f9:99:4e:b0:38:81:96:7b:01:e3:97:6b:76:37:
97:8d:b1:fc:d1:14:30:46:d5:1c:19:1f:bb:9e:fe:
46:55:b2:9d:b8:ea:dd:5b:c2:56:bf:c9:d5:dd:ee:
a6:01:48:14:0e:57:bd:cd:fe:31:60:3e:53:aa:4c:
cd:bb:a8:3a:41:48:77:47:d0:37:04:44:dd:14:ff:
aa:b9:2a:bf:d3:92:c2:55:4f:45:09:40:29:dc:55:
60:4c:7c:30:3d:db:74:86:6d:62:28:ac:d9:d7:01:
36:91:38:20:d8:6b:d3:fb:34:b8:fe:3f:94:e2:38:
2e:b6:10:89:d9:4f:e4:b2:86:63:16:70:39:8e:11:
0d:5d:f5:16:b8:fc:f1:aa:82:e9:19:cb:d9:25:09:
20:8f:a1:2f:fc:68:22:5c:c0:85:b3:c0:aa:6b:93:
4c:f3:9f:de:40:9e:75:d1:c7:b8:d3:24:18:e3:ee:
91:2a:d8:2b:85:98:83:d7:10:c0:11:50:66:d2:f1:
35:6d:34:5c:e2:bf:ef:d0:8e:e4:b3:0f:63:56:c5:
58:f9:61:8a:1b:58:e0:4a:a2:b8:a5:93:1f:f0:b6:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5D:44:42:68:35:65:48:37:15:99:EA:FA:6B:B2:9C:25:BA:6C:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/31A1FE52D3FD11EF8CDF2192762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.229.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ba:5a:09:94:1e:eb:76:a3:e8:a4:56:1b:cc:4a:51:4d:a3:
a5:4e:a3:11:77:9e:b3:29:28:ed:ab:0e:b9:80:e3:6b:e9:ca:
d6:ce:3e:9a:e0:58:16:96:d3:90:16:5c:62:e7:5d:60:68:9e:
a9:ec:7b:cc:34:5a:89:ec:18:38:51:64:c1:ae:b0:06:15:3a:
e4:87:16:d5:56:f0:c7:37:df:f1:af:1c:63:87:5b:d8:c8:f1:
d5:66:91:a6:22:83:a1:db:73:9b:64:06:9a:60:82:99:ef:69:
55:a3:a9:ea:c8:48:ef:05:3a:c5:64:fe:d8:5a:cb:95:88:fd:
af:c4:45:45:30:39:0b:0e:c4:e6:dc:c0:f4:ad:85:67:0e:9f:
cf:ed:b6:d9:d9:69:1d:96:bd:c9:d4:2f:13:65:49:3a:ab:10:
15:76:2d:c4:7d:8a:9a:d8:e4:3d:f1:12:9c:17:33:11:0d:c3:
c6:e9:12:07:fe:c7:b8:8a:bd:90:c7:1c:e6:c7:a9:63:d3:c9:
e1:d0:8a:a1:66:b4:53:cd:95:c5:a5:4b:50:30:a5:19:a3:eb:
ca:28:4a:54:12:20:10:45:94:bb:39:77:cd:a8:58:53:3d:5c:
98:b2:28:b2:d7:ac:e9:3e:91:46:0c:93:3c:fe:ff:d9:d6:c1:
e7:a8:30:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:36:34 2025 by rpki-client