Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43AD896CD96211EF8CA5758E762E951A.roa
File: 43AD896CD96211EF8CA5758E762E951A.roa (raw, json)
Hash identifier: p4c3tHJzWXQqhQ1Xxg/n8XeL4m0Ox2cYQahFvAuzrBk=
Subject key identifier: FF:1B:12:64:37:AC:EF:65:2A:8B:FB:4A:AB:1B:EC:BD:1E:A8:50:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014073
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43AD896CD96211EF8CA5758E762E951A.roa
Signing time: Thu 23 Jan 2025 08:15:54 +0000
ROA not before: Thu 23 Jan 2025 08:15:50 +0000
ROA not after: Sat 08 Feb 2025 08:15:50 +0000
asID: 18229
IP address blocks: 154.210.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82035 (0x14073)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 08:15:50 2025 GMT
Not After : Feb 8 08:15:50 2025 GMT
Subject: CN=6791faba-dc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c8:fb:34:9c:3c:dc:3e:05:e7:ed:5a:60:ed:
2a:c3:7b:a1:ff:88:88:e0:bb:be:b3:b8:3c:e2:f9:
ca:e3:1d:ae:d0:0d:52:19:3b:6b:74:95:3a:4d:75:
d8:7e:1f:b3:75:46:4c:1c:00:ba:b3:4c:28:f7:34:
53:9a:93:b6:0b:42:86:16:b4:c2:90:a9:bc:3d:44:
4b:64:ee:f9:02:c5:a5:93:7b:05:de:b7:41:2d:64:
7f:c2:d7:3c:f9:70:20:c1:ce:7b:e5:ed:73:db:7e:
1e:45:93:93:44:73:d0:05:c0:a5:31:87:f9:6d:ac:
9d:bf:b4:c1:4e:f9:96:66:8a:65:f5:05:ca:ec:ed:
58:9d:02:2a:6c:db:bc:9c:7d:50:3a:fb:70:19:88:
f7:90:9f:1d:ef:89:8d:e2:eb:8c:ca:8d:85:1c:53:
f7:c0:d2:80:2f:ed:db:4a:a1:44:ee:5e:26:57:40:
e4:fc:1d:58:20:5f:f8:65:7f:77:cc:48:bd:88:94:
f9:99:53:71:d4:8d:52:b0:00:bb:e1:bd:9f:43:eb:
ed:e1:8e:77:cf:4d:4d:9e:2d:4d:35:c4:54:aa:6f:
18:02:2d:5e:71:12:3b:88:e8:25:2c:97:43:93:1b:
c7:d9:02:35:9e:1c:18:f6:ec:38:ce:15:6b:be:6a:
02:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1B:12:64:37:AC:EF:65:2A:8B:FB:4A:AB:1B:EC:BD:1E:A8:50:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43AD896CD96211EF8CA5758E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.186.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ca:18:00:09:02:d9:cc:45:34:79:ad:98:cb:a6:d7:80:7f:
30:c1:f6:fd:6b:19:49:bd:ed:fe:e8:8f:e3:16:eb:6d:ac:e1:
9b:95:70:80:66:ba:fc:dd:1c:29:89:e9:0b:cc:d9:55:89:23:
65:d1:a0:b8:31:6a:03:c5:a8:e3:b1:e8:fa:da:ac:25:fa:39:
fb:13:59:31:30:e3:dc:16:b6:fe:5e:b5:43:d6:78:94:35:b2:
00:c6:ed:67:95:6d:80:3f:ff:fd:b2:d1:c0:cd:c7:cb:05:9f:
4f:0e:d6:52:41:b9:38:3f:a4:67:c3:03:7e:c5:7a:47:31:84:
7f:ee:ec:9f:38:a8:c5:fc:4a:5a:27:8f:39:d1:7e:17:b0:40:
12:02:af:81:31:86:fe:2c:dc:ef:2e:b6:e9:a0:04:f7:86:9f:
4f:03:e4:a8:bc:3d:38:bf:de:b5:4f:eb:34:29:df:86:80:52:
ed:8a:a7:a7:d4:fa:7b:36:31:0d:52:80:dc:2d:ff:76:aa:55:
0f:41:28:00:58:78:20:4d:3a:dd:60:cd:c1:92:92:20:05:ca:
0c:c0:55:de:35:50:81:86:b6:6f:70:ae:bc:b8:07:79:f5:e5:
c4:52:04:25:10:03:6f:ad:77:4e:be:ff:44:0a:b4:eb:15:7b:
96:99:8e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:51:19 2025 by rpki-client