Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/353C5F06DA6C11EF9AECB792762E951A.roa
File: 353C5F06DA6C11EF9AECB792762E951A.roa (raw, json)
Hash identifier: e3VWmsHrerFSVouZ/Ls7Dasb5Wic+QtSQlWwoEoX+KA=
Subject key identifier: 49:80:43:84:7A:6A:42:3D:B6:39:1D:44:F6:AC:EC:F4:D3:1A:C8:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/353C5F06DA6C11EF9AECB792762E951A.roa
Signing time: Fri 24 Jan 2025 15:59:36 +0000
ROA not before: Fri 24 Jan 2025 15:59:32 +0000
ROA not after: Mon 03 Mar 2025 15:59:32 +0000
asID: 203020
IP address blocks: 154.223.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84186 (0x148da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 15:59:32 2025 GMT
Not After : Mar 3 15:59:32 2025 GMT
Subject: CN=6793b8e7-9e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4d:95:36:01:f1:10:09:cd:5e:b7:08:63:ad:
6f:42:7c:ac:fe:9f:0f:c7:30:09:77:2b:d0:dd:5c:
64:a8:b3:b1:c5:26:da:1a:f4:65:9d:77:78:09:52:
1b:61:62:50:86:b3:df:7e:65:de:23:1d:30:e2:23:
6f:cd:97:95:91:ae:67:6d:8a:77:5a:5e:1e:b7:60:
4b:32:a7:60:3f:f3:83:0f:b0:2e:92:4a:fe:cc:2f:
4f:b9:19:3f:29:2a:f6:65:34:0e:ce:ac:13:a1:1a:
2d:bc:0a:8e:00:29:f7:8f:36:db:f8:0b:08:19:61:
6f:fc:fa:78:c2:8c:71:26:a2:d5:f7:b8:59:d4:a0:
1e:35:1b:f8:ec:b9:cd:15:ee:48:20:11:e9:d0:ff:
a0:81:e9:90:e1:9c:97:0e:7d:64:58:91:dc:b1:79:
64:70:e2:97:79:23:19:41:62:70:58:f8:34:d7:86:
c7:88:9a:38:ff:cf:8b:78:a2:a2:e6:5f:35:c7:3a:
52:ea:16:ed:c7:ed:f2:f3:fe:ab:a1:a4:15:ac:a4:
7b:62:70:bb:ac:38:10:cc:b4:cf:b2:80:46:8f:fb:
ce:1e:75:ed:ef:5f:ad:f8:d3:5a:0e:55:97:0b:52:
22:1d:85:ae:be:de:de:0e:a0:dc:0d:86:ff:eb:9d:
7c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:80:43:84:7A:6A:42:3D:B6:39:1D:44:F6:AC:EC:F4:D3:1A:C8:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/353C5F06DA6C11EF9AECB792762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.163.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:01:7d:53:92:a8:2f:de:17:a3:e2:e1:98:89:a5:ad:d1:80:
c5:0c:36:14:75:e4:03:df:f8:ad:7c:6d:b6:2e:50:58:66:4f:
5d:17:22:f0:73:e0:64:49:12:85:ee:7b:25:e9:a0:c9:2d:83:
a2:3c:f9:05:7c:ae:8a:d7:be:e7:23:61:d7:11:07:4d:36:2a:
bf:03:cd:bd:6a:8a:de:6d:d2:dc:83:11:90:b1:28:4a:cb:0e:
23:09:5d:50:cd:5a:6f:52:7d:88:54:a0:be:13:a6:4e:bd:81:
bb:b5:2b:39:ed:15:48:c1:9c:c0:74:fc:28:2a:37:35:14:f1:
99:7c:05:c2:a4:79:00:ac:b0:67:45:53:3f:2e:13:c2:5c:6e:
79:cf:77:d3:12:3f:25:dd:70:2e:85:bd:d2:a3:f8:1c:d7:e6:
c6:ac:36:48:24:56:df:ae:45:bf:1c:36:04:c0:d4:e0:d5:e6:
24:d2:b6:03:75:3b:7f:f9:cc:69:89:6b:a3:63:e5:e5:20:0c:
13:97:10:75:cd:92:86:ee:4f:bd:57:cf:df:b6:21:25:be:49:
a6:b9:42:5b:38:15:70:38:1f:ef:6f:84:da:f5:f6:15:b9:fd:
8e:a1:48:85:97:56:54:67:69:b4:e3:47:c2:36:a8:28:8d:5b:
44:1b:89:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:48:30 2025 by rpki-client