Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/408B5A2CD8A711EFB18460A4762E951A.roa
File: 408B5A2CD8A711EFB18460A4762E951A.roa (raw, json)
Hash identifier: x22K0eg5ZQA+gjxAQHybotwxAabyCsSeZQZOn29iiT0=
Subject key identifier: 21:37:D8:4D:63:F2:32:68:1E:C8:B7:DA:C4:E5:D5:9D:90:55:0B:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EA2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/408B5A2CD8A711EFB18460A4762E951A.roa
Signing time: Wed 22 Jan 2025 09:57:13 +0000
ROA not before: Wed 22 Jan 2025 09:57:09 +0000
ROA not after: Wed 05 Feb 2025 09:57:09 +0000
asID: 395793
IP address blocks: 154.194.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81570 (0x13ea2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 09:57:09 2025 GMT
Not After : Feb 5 09:57:09 2025 GMT
Subject: CN=6790c0f9-2449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:1e:89:03:97:c3:97:41:64:f0:3f:10:9a:
42:28:36:8f:3f:22:30:46:e9:88:61:cf:08:85:e9:
62:2d:f6:e4:0c:c4:89:d8:42:f5:d6:48:07:33:1d:
9f:d2:c3:60:88:2b:88:f7:1b:cb:9b:ae:9a:8d:d4:
4a:87:39:80:5c:00:7b:99:79:5c:39:37:bc:f4:bd:
44:55:0c:17:a4:ee:a3:68:0d:bc:ea:5a:c3:6d:08:
13:d2:8e:ba:d2:e5:62:22:de:16:4f:a0:7b:cd:41:
32:5b:c3:0f:7c:f9:08:57:ea:04:b5:35:81:30:1c:
fd:4c:b5:e7:f4:b2:b6:30:de:b0:da:0d:5e:79:7d:
f8:cd:d1:62:ce:ac:25:db:90:f9:88:92:fe:78:3d:
49:45:17:01:97:35:e5:b4:9e:47:d1:92:f5:18:7a:
07:ad:11:67:77:6a:9b:13:6e:eb:b8:74:4a:a5:79:
75:13:a1:ad:50:c9:a6:c9:1d:1d:6d:63:c4:7d:64:
1a:2e:5d:66:42:37:83:07:d3:89:e9:96:2f:8f:d8:
dc:45:18:63:3f:63:16:77:9b:0b:22:55:27:5d:d9:
51:4b:db:c8:0b:12:c0:4f:b0:b5:a5:1c:67:26:50:
25:7e:f5:b4:2b:4a:a9:f3:fa:d8:11:84:95:65:58:
f2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:37:D8:4D:63:F2:32:68:1E:C8:B7:DA:C4:E5:D5:9D:90:55:0B:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/408B5A2CD8A711EFB18460A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.208.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:2b:db:9d:21:1c:fd:de:5b:b4:14:86:7c:40:f7:9c:cb:ec:
aa:95:9e:9a:72:15:ac:c0:33:c2:3c:6d:7d:24:81:f5:29:b9:
70:5e:2a:c9:d8:96:49:38:a1:8a:ed:17:17:a9:19:9b:8e:45:
62:cb:bd:26:3d:29:bd:4a:eb:9e:be:e4:44:c4:5c:f3:8f:f8:
03:d1:53:3e:1b:f9:7d:e9:7b:45:20:82:b7:17:ea:2c:43:fe:
ea:11:5a:41:7a:87:f7:78:1d:7b:c4:98:9c:4d:9b:9c:7a:79:
bf:ec:2b:ef:46:15:0d:dd:b3:31:77:f3:83:bc:87:53:64:03:
6d:6c:6f:50:3a:d0:3e:06:b3:d7:d4:6b:88:b7:98:af:f3:0f:
f1:75:44:af:d9:30:8d:05:f9:be:51:73:b1:86:10:7d:6c:40:
4c:28:24:41:a9:54:54:81:5b:05:1b:ad:79:e6:47:40:51:b1:
9b:a1:85:73:e1:fe:e6:a4:f6:81:84:09:9e:36:9e:c3:ef:0f:
94:7b:a6:bc:48:d8:2c:79:79:cd:f1:16:00:8c:85:cc:e6:fb:
6f:b5:0c:18:52:73:6c:97:e3:cf:f0:d7:7c:9f:51:8c:40:0d:
44:ec:bf:38:40:7d:19:ba:b3:d3:d2:06:59:ad:48:84:cc:74:
cc:12:51:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:15:10 2025 by rpki-client