Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35976D26D8B711EF85345990762E951A.roa
File: 35976D26D8B711EF85345990762E951A.roa (raw, json)
Hash identifier: 3SrLcVMbpZJ/9hp5RDVRO07AJZQnKmVoW39DdXcGsZ8=
Subject key identifier: 5F:CB:05:0C:B9:9C:A3:AF:82:73:A1:98:53:6C:D9:82:83:7A:F9:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35976D26D8B711EF85345990762E951A.roa
Signing time: Wed 22 Jan 2025 11:51:26 +0000
ROA not before: Wed 22 Jan 2025 11:51:23 +0000
ROA not after: Sat 08 Feb 2025 11:51:23 +0000
asID: 18229
IP address blocks: 154.210.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81686 (0x13f16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 11:51:23 2025 GMT
Not After : Feb 8 11:51:23 2025 GMT
Subject: CN=6790dbbe-5a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:eb:ac:9a:bc:8a:19:af:d7:85:01:36:28:ae:
8e:19:bc:26:4c:c9:25:95:44:0c:c7:e0:fe:c3:16:
6d:01:e0:42:e1:6e:f3:4b:72:51:73:4f:3d:d0:24:
47:48:aa:ec:04:01:d7:43:b9:d6:15:8e:b9:52:58:
7f:f0:39:ac:0a:76:26:eb:fb:6f:5c:2a:ac:37:15:
e3:3b:b1:ca:5c:12:ec:1f:da:23:20:81:62:cf:0c:
c0:16:ab:f6:94:4d:0b:fd:fc:0d:49:b2:6d:37:db:
a5:2e:40:61:04:0b:dc:57:34:2d:77:a5:dc:53:39:
fa:06:d0:7f:c6:b3:1b:4d:25:92:a5:62:ee:e1:93:
15:53:3b:a8:ba:c2:c5:8a:94:21:4e:29:94:ab:d2:
ad:57:67:cd:84:62:01:7f:15:58:d5:8a:36:e8:ae:
c2:27:88:67:af:f5:4e:be:f1:68:51:e0:2e:0d:95:
35:3d:41:bc:95:19:10:66:35:b9:d9:95:d8:60:ef:
01:6e:c4:44:7d:de:e8:5f:71:3a:0e:b5:43:1b:dd:
0f:24:10:96:ac:13:22:49:15:fc:a2:ae:e5:82:e6:
de:7c:93:7a:64:14:f9:2d:0f:10:20:ae:b6:d5:14:
11:c7:a5:c7:9d:e6:ff:f2:07:4e:3d:68:a8:d3:a9:
1f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CB:05:0C:B9:9C:A3:AF:82:73:A1:98:53:6C:D9:82:83:7A:F9:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35976D26D8B711EF85345990762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.206.0/24
Signature Algorithm: sha256WithRSAEncryption
86:dc:28:7f:43:16:58:fe:0b:12:db:7c:32:4b:0e:b1:54:94:
31:fb:be:11:12:45:b0:89:8a:64:f1:9a:6a:ab:aa:77:32:66:
a3:ab:bc:7e:62:df:1d:af:9c:34:c5:f2:62:3f:6c:ac:6d:42:
87:9a:5a:e5:81:d8:9f:71:2b:ed:a2:21:e7:0b:b6:ab:b1:5d:
c3:9d:22:28:20:8b:aa:09:d7:91:fb:58:b4:12:fd:67:3c:57:
69:6f:f4:41:12:9c:68:7e:b4:7c:f3:87:7d:37:d3:a5:47:1e:
28:8d:30:c8:0c:66:14:c0:b1:a2:ec:b5:c1:10:c5:ae:a9:95:
92:4b:59:ce:5a:da:f0:3f:49:5c:91:f1:17:06:70:ab:96:ee:
2e:eb:50:2b:17:10:6c:1d:ab:b2:cd:4d:79:b1:6f:13:ee:b0:
d7:08:12:9c:ed:a9:3d:66:8c:ae:01:c8:31:80:c4:65:09:83:
95:56:c9:7c:bb:cc:f7:16:86:e7:ed:29:d1:91:eb:90:57:ef:
7c:c4:83:40:ee:a2:37:08:8b:66:d8:60:12:8a:69:7a:33:61:
a9:44:74:cc:7e:4a:a0:15:bc:24:de:b6:20:99:ee:af:62:eb:
45:e4:12:20:eb:f8:07:51:61:57:43:03:fa:3b:6b:e1:d8:1d:
c9:b6:4b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:48:17 2025 by rpki-client