Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/347A35FCD9DB11EFB42AF3B0762E951A.roa
File: 347A35FCD9DB11EFB42AF3B0762E951A.roa (raw, json)
Hash identifier: U3c7tIiGT/JZYHnTfvX/AYJiTQjgbf8S6B7iXqXKnPY=
Subject key identifier: 41:27:03:DE:68:81:BF:71:4B:1D:AA:B8:DE:7D:5D:8F:54:69:AF:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01435B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/347A35FCD9DB11EFB42AF3B0762E951A.roa
Signing time: Thu 23 Jan 2025 22:41:37 +0000
ROA not before: Fri 24 Jan 2025 22:41:33 +0000
ROA not after: Sat 01 Mar 2025 22:41:33 +0000
asID: 62240
IP address blocks: 154.223.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82779 (0x1435b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 22:41:33 2025 GMT
Not After : Mar 1 22:41:33 2025 GMT
Subject: CN=6792c5a1-ef7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:e7:1c:9f:a1:7c:ef:ae:6e:30:dd:de:d3:
a6:86:77:0b:22:fd:53:40:6a:96:be:cb:fb:61:34:
7a:74:54:56:c6:b0:37:da:1a:7d:1c:2f:db:f6:fc:
8d:18:ac:1d:d9:12:3e:f9:1e:63:6c:87:cc:cb:c4:
ff:0f:e8:b9:96:f0:9a:87:07:e7:0e:2b:b0:2c:18:
97:83:1f:73:81:20:6a:58:14:93:92:64:82:a8:88:
f5:15:cf:cd:6c:48:fe:a3:6b:b4:00:8e:1c:6c:df:
7a:a7:6d:3e:8e:12:d1:a2:79:89:fb:bf:d4:18:c9:
37:ea:d0:03:ec:28:26:39:66:8a:ca:29:46:50:06:
5c:d7:40:9c:c9:20:23:10:1a:46:25:03:ea:c4:d7:
07:12:ed:f7:62:b0:e8:c8:46:f3:89:18:a5:4a:f2:
80:98:44:b3:a7:24:da:13:b8:d8:4c:c6:3d:65:27:
cb:05:9b:09:35:c6:47:bc:af:a8:63:d7:93:52:7f:
8f:5c:69:66:02:3f:da:5e:1d:54:29:9a:dc:a9:e6:
93:f4:ce:62:ff:bc:51:c1:22:2b:3c:64:82:50:b2:
7b:b5:86:c8:4e:ee:8a:c8:5a:40:3f:c5:89:d0:15:
f4:b2:15:0b:1c:7a:77:da:89:3e:d3:b0:5e:5a:bf:
e9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:27:03:DE:68:81:BF:71:4B:1D:AA:B8:DE:7D:5D:8F:54:69:AF:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/347A35FCD9DB11EFB42AF3B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.212.0/24
Signature Algorithm: sha256WithRSAEncryption
20:3b:b8:d4:f7:51:5a:f2:51:90:8a:6e:6a:b5:f0:0e:ea:c8:
0e:d7:89:4b:2c:52:52:d7:36:cb:69:69:ee:b2:92:02:66:3e:
e4:12:01:7f:38:7a:1d:dd:cb:4e:8f:3a:bb:52:b4:01:76:42:
36:41:28:a8:e4:1c:f7:03:2f:68:3e:42:39:c4:f5:77:de:f5:
c4:00:e8:0c:63:8d:61:9d:5d:c8:1a:f5:bb:cf:44:fb:9d:38:
fc:79:1b:33:4d:c8:9b:89:3a:51:98:24:20:e4:25:0d:02:76:
3f:60:ec:87:0d:d7:a0:38:3c:fe:89:9c:a7:ae:56:c6:ea:57:
ee:56:0f:49:89:4f:99:b3:75:92:46:d3:70:1a:bd:16:39:f5:
79:e9:85:78:0e:ec:ff:ff:8c:dd:38:f3:fd:7d:0e:1e:8d:68:
73:25:86:f2:e3:e9:e4:d3:4a:0e:e7:12:42:2f:87:7b:78:41:
4c:db:75:ce:7e:fe:84:f2:3b:b0:34:3b:92:77:59:58:c2:db:
a8:1d:27:2e:12:98:03:b2:1e:24:65:8f:08:b6:3b:da:eb:a9:
76:ab:d0:28:de:af:52:5c:c2:3c:bc:4a:4a:ba:7f:f5:ee:7a:
f4:5c:a6:eb:fd:94:b8:45:52:aa:d1:79:cc:56:f2:1b:cb:5c:
fb:44:1c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:01 2025 by rpki-client