Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/380B2442DA2B11EF891C325A762E951A.roa
File: 380B2442DA2B11EF891C325A762E951A.roa (raw, json)
Hash identifier: 8Rso8yxK8/XF98t30tffjOaW1tsfJLR2jw3F52n8jpw=
Subject key identifier: 44:04:81:82:85:43:41:BC:1B:38:BB:9F:FC:D9:69:B7:02:AB:90:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014452
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/380B2442DA2B11EF891C325A762E951A.roa
Signing time: Fri 24 Jan 2025 08:14:23 +0000
ROA not before: Fri 24 Jan 2025 08:14:19 +0000
ROA not after: Wed 05 Mar 2025 08:14:19 +0000
asID: 202656
IP address blocks: 154.222.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83026 (0x14452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:14:19 2025 GMT
Not After : Mar 5 08:14:19 2025 GMT
Subject: CN=67934bdf-b799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e9:e4:13:67:9b:a5:d0:75:75:cb:1d:dc:03:
17:44:18:fd:b4:88:76:e5:4e:76:85:fa:2a:14:9c:
8c:6c:8d:c3:ee:0f:c7:49:75:0b:c5:94:b2:fe:2e:
af:55:0a:f4:32:c6:5b:f7:86:f3:81:ed:31:83:5d:
81:92:d6:d4:a6:55:fe:35:37:44:ec:34:5c:07:cc:
c4:6f:79:2e:ea:43:7c:5a:26:5e:fa:e9:8d:f9:c4:
4a:bd:54:26:39:02:a2:78:12:37:66:c6:e1:46:4c:
46:ee:cf:75:95:60:82:45:91:43:29:ad:fb:db:69:
7b:d4:b2:b2:0b:2e:92:88:cb:e7:b4:8c:24:c5:95:
96:49:6a:0e:78:d7:55:8e:29:a6:87:8f:52:aa:a1:
55:33:d5:e1:af:cf:0c:1b:88:3b:cd:63:c7:96:01:
73:24:6d:3c:a0:87:df:52:aa:bf:ad:8a:a7:f8:6d:
35:f2:67:f9:1c:fa:09:2d:15:99:8e:15:5b:4d:18:
ba:9d:88:c4:70:99:6b:37:55:2a:3d:81:4d:03:3d:
60:30:6e:31:f1:08:13:fe:50:0e:c2:a2:15:da:5b:
4c:0f:f7:e9:d8:9f:b5:ff:6d:1f:0a:b0:68:ae:27:
e3:2a:58:a9:bf:eb:61:ba:40:64:4f:3b:19:b4:7f:
f6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:04:81:82:85:43:41:BC:1B:38:BB:9F:FC:D9:69:B7:02:AB:90:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/380B2442DA2B11EF891C325A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.15.0/24
Signature Algorithm: sha256WithRSAEncryption
63:63:9b:f3:24:9f:e5:50:2c:90:3b:1f:b5:fe:79:5f:76:c6:
50:d8:1a:b2:51:83:5f:8f:43:56:ac:1e:23:eb:53:6b:7f:17:
5f:db:d8:4c:46:13:93:9a:05:1a:33:2d:6e:f5:4e:2b:87:05:
44:1c:9d:a5:e4:84:4a:6c:a5:2e:54:1b:03:60:3f:63:bf:2c:
d7:e3:a3:91:75:e8:d2:68:79:4e:d9:4d:e3:eb:54:af:f8:f1:
bc:f7:bb:39:29:31:50:22:03:72:bf:a0:52:29:d2:9a:46:36:
3c:98:ec:ca:72:da:54:25:18:f8:01:97:a9:2f:5c:23:44:72:
0c:e2:9d:22:7d:4b:61:1b:8d:9f:f0:9b:39:73:ff:f0:1f:67:
fb:27:a7:c6:7d:a5:34:b4:6f:73:97:c9:c1:25:fc:5a:5f:f6:
df:bc:b6:a3:84:50:3c:b6:28:fe:ed:bd:17:8a:8b:c2:d1:1b:
e7:64:0e:9d:91:26:73:41:40:39:28:d6:40:d4:e0:c7:92:23:
87:93:53:29:5a:ad:9e:f4:53:60:29:24:88:cd:85:1c:34:f7:
f5:0b:ae:ce:d3:ba:91:3c:67:c1:e2:7b:aa:2c:18:77:8c:c1:
c4:f0:57:b3:a2:94:bc:4c:63:17:e9:00:2c:dc:16:4e:72:7d:
e8:dc:e7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:05 2025 by rpki-client