Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/414B39C8DCA811EF8B2114A7762E951A.roa
File: 414B39C8DCA811EF8B2114A7762E951A.roa (raw, json)
Hash identifier: /jIH4PgVSP8KJrZx4ePbU+uE1Jxo5/A8QcfRU/bZTEA=
Subject key identifier: 38:CA:EA:FB:51:41:57:C2:41:6C:43:62:10:F2:97:31:85:09:D3:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BFB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/414B39C8DCA811EF8B2114A7762E951A.roa
Signing time: Mon 27 Jan 2025 12:14:28 +0000
ROA not before: Mon 27 Jan 2025 12:14:24 +0000
ROA not after: Sat 08 Feb 2025 12:14:24 +0000
asID: 7018
IP address blocks: 154.212.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84987 (0x14bfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 12:14:24 2025 GMT
Not After : Feb 8 12:14:24 2025 GMT
Subject: CN=679778a4-9fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:41:af:78:8d:f5:45:4c:51:97:f6:c4:87:
c5:86:60:aa:e9:67:f5:56:4d:dc:1d:40:69:c3:43:
61:c7:99:ac:ac:70:58:85:9f:b8:a3:61:d1:35:64:
c3:ff:03:67:11:42:4c:15:d1:d1:7d:d7:fe:c2:24:
e1:a9:52:d2:86:4b:c0:6b:0f:ea:d8:5d:ad:a0:01:
ca:98:ac:98:cf:a4:ad:80:cc:d2:b9:6e:4a:25:04:
56:e9:97:dd:14:08:87:45:bf:a6:b9:ec:ee:6e:b8:
01:9d:fd:d2:62:77:de:d3:46:be:00:f2:9c:33:f7:
66:b6:67:d9:b0:b8:ba:43:7c:18:07:95:74:a7:5b:
c4:85:1e:bd:eb:a3:16:26:63:82:ba:68:d4:ce:da:
84:38:4a:04:10:e1:7e:36:0f:95:01:54:67:7e:1d:
12:41:50:2f:7c:dc:54:b9:9f:b6:06:77:f0:bc:07:
f4:99:58:d6:f8:9e:5f:93:13:9a:b6:67:10:3e:bd:
90:c8:4d:55:88:86:a9:f6:db:0d:f2:b2:90:82:b0:
90:d7:e2:d7:5f:ab:a2:43:53:5b:e3:13:2f:08:94:
3d:ab:5b:ac:16:7a:fd:c8:a7:aa:e1:31:b5:57:f4:
b2:ee:c7:70:d3:f2:22:67:09:8e:45:67:b7:51:88:
58:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CA:EA:FB:51:41:57:C2:41:6C:43:62:10:F2:97:31:85:09:D3:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/414B39C8DCA811EF8B2114A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.8.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:59:6b:0b:b8:4c:11:62:cf:8a:30:96:44:40:3f:95:8f:17:
66:01:7d:da:2c:3b:71:49:93:4b:9f:09:55:77:4c:2f:81:3a:
e1:fe:5a:22:6b:e7:02:b4:84:6b:63:0e:51:77:f8:aa:0e:03:
3f:a8:c9:f5:aa:c5:50:61:0a:a2:0b:cb:4f:eb:6f:7f:03:05:
45:d0:db:7c:56:81:22:e1:4b:a2:f3:9b:56:58:81:85:64:d8:
0e:37:70:85:86:f7:44:a0:25:bd:7e:35:d3:29:d7:2a:d1:59:
09:1b:d9:6c:8d:a3:6d:c7:82:8c:73:06:13:2d:e2:37:b0:06:
f9:e7:1c:b5:68:a6:32:cd:b4:b1:96:02:64:0c:04:61:7a:a5:
89:5b:5a:c4:89:bc:3d:aa:64:d1:47:a2:97:f5:66:69:30:03:
70:70:74:7c:57:9e:d3:2d:df:f4:14:7d:21:67:0d:6d:3a:73:
b7:f0:c5:6c:72:85:1f:70:2b:7c:53:bc:91:f1:9e:6f:b0:34:
3b:bf:51:f3:a6:b6:5f:4b:5d:a9:6d:be:b5:3b:49:d0:b0:16:
4c:82:81:57:61:17:17:fe:d7:90:79:98:4e:1d:bc:35:0d:1a:
dc:c9:b5:da:39:ed:33:e2:62:33:f7:d8:91:69:d9:cd:0f:bd:
f6:54:ed:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:45:43 2025 by rpki-client