Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/445F8CD2DC1B11EFA81B2C6C762E951A.roa
File: 445F8CD2DC1B11EFA81B2C6C762E951A.roa (raw, json)
Hash identifier: bARWe59lknl5F/cGsuzo7zqyUEMQrZ9UyRNqeEWs6Vw=
Subject key identifier: B9:C6:48:A5:39:87:30:6A:B9:E9:00:03:83:C7:75:A6:25:50:81:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B60
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/445F8CD2DC1B11EFA81B2C6C762E951A.roa
Signing time: Sun 26 Jan 2025 19:25:14 +0000
ROA not before: Sun 26 Jan 2025 19:25:10 +0000
ROA not after: Sat 08 Feb 2025 19:25:10 +0000
asID: 138797
IP address blocks: 154.210.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84832 (0x14b60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 19:25:10 2025 GMT
Not After : Feb 8 19:25:10 2025 GMT
Subject: CN=67968c1a-e537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:18:14:fd:fc:92:db:5a:2c:e0:31:f0:5b:17:
2e:4e:c1:76:09:93:fa:c3:53:f4:1e:21:57:f1:35:
e3:e8:dc:0c:94:ac:e4:61:a1:4f:3e:7c:2e:6b:0b:
1d:2a:ae:d4:b8:ed:82:4c:79:c7:61:9b:17:69:69:
7a:54:4e:6e:74:ae:37:1d:ec:4a:cc:5a:6c:6e:c3:
a2:c9:d4:12:b3:c1:b3:e5:3f:8e:f0:58:25:fa:81:
74:e2:a4:75:7a:e4:ef:10:51:bf:07:f1:b7:90:63:
fb:8c:80:13:67:88:e1:cc:41:d4:7b:cd:91:ef:21:
92:8b:90:91:24:e1:94:62:38:87:c3:50:df:ec:d0:
3b:32:14:13:06:f4:d5:00:a5:95:be:03:e2:ff:8d:
79:bb:c5:f8:a1:3c:d2:60:b8:32:80:b7:c9:b1:ce:
d4:12:0e:26:47:59:d1:a1:17:9c:cf:97:83:00:01:
51:26:b0:98:7e:97:6f:4d:0c:ee:a0:f6:eb:7c:71:
15:20:f0:9a:9b:c7:55:d3:f0:9c:27:a3:45:2e:04:
f0:2c:50:d4:65:0b:55:8f:4f:69:44:83:45:4e:49:
47:f4:77:eb:91:46:8a:7f:dc:04:db:3b:b0:8f:66:
41:3e:c3:a3:df:84:97:88:37:b6:71:ce:ea:1a:5b:
c6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C6:48:A5:39:87:30:6A:B9:E9:00:03:83:C7:75:A6:25:50:81:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/445F8CD2DC1B11EFA81B2C6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.227.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ef:12:53:70:ce:d2:24:19:f9:6f:f6:91:1e:8a:1d:92:b2:
f5:4d:7a:6f:06:0e:f0:bc:b1:50:59:b7:9d:4b:18:4f:85:52:
42:ef:71:1d:0f:b2:3c:8c:3e:fe:86:3a:23:35:70:22:a1:c0:
15:9f:ed:72:42:c7:28:0e:27:97:57:83:b6:c2:9a:92:c5:b3:
70:26:0c:76:8b:14:2b:1e:44:a2:4a:e7:e1:55:a6:73:4a:eb:
66:b3:f2:73:9b:a0:4c:17:55:51:1a:b2:9d:93:c7:91:33:40:
5e:26:4b:0b:3b:da:9a:1e:d4:68:b7:70:97:93:9e:94:d3:bb:
18:e5:12:c1:aa:29:4c:f5:aa:45:75:ef:7a:d0:dc:3e:ff:e6:
f7:ba:f9:a6:dd:56:e9:e1:cc:79:17:02:a5:13:20:01:f4:f0:
0a:07:5f:0d:45:0d:42:9a:67:b3:2e:29:3c:17:e2:a8:c6:b4:
50:bc:6b:12:ba:17:1a:91:68:65:94:7d:bc:63:8b:08:4e:6c:
1a:99:e5:ff:28:31:ac:00:11:51:7d:1a:61:88:c1:bc:ea:c6:
c1:fd:a5:77:6a:da:a2:b0:be:0e:f9:39:3b:4f:3d:e5:8f:6c:
f8:6b:af:bc:b8:94:46:c5:e7:94:06:1b:d1:ed:87:b8:d7:b0:
a7:77:b6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:54 2025 by rpki-client