Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46A2A56CD40311EF811D18B8762E951A.roa
File: 46A2A56CD40311EF811D18B8762E951A.roa (raw, json)
Hash identifier: qCqR8goH1ghMF+rCzE+DMX83L9BTX6d8scuc/b7TyfU=
Subject key identifier: EB:D7:52:62:B4:48:B2:B0:10:DC:EC:99:95:29:AE:B6:18:9B:C3:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46A2A56CD40311EF811D18B8762E951A.roa
Signing time: Thu 16 Jan 2025 12:13:21 +0000
ROA not before: Thu 16 Jan 2025 12:13:17 +0000
ROA not after: Sun 16 Mar 2025 12:13:17 +0000
asID: 17561
IP address blocks: 154.206.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80928 (0x13c20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 12:13:17 2025 GMT
Not After : Mar 16 12:13:17 2025 GMT
Subject: CN=6788f7e1-6328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:f0:88:bb:c1:33:97:ef:0a:c4:ac:20:eb:
23:0f:6e:54:ae:70:81:90:58:00:61:c8:95:75:20:
d5:95:a7:34:21:5b:50:c5:68:56:1d:10:de:a8:76:
0f:eb:93:7e:af:6d:54:be:17:9d:f1:09:9a:30:1c:
2f:d5:c8:0b:3d:9c:50:e6:0c:91:03:17:8a:4f:47:
9d:57:fb:98:f0:fd:29:a1:5f:c4:f2:10:24:61:13:
bb:1a:5c:1b:3e:4d:34:2b:25:73:f3:0e:d2:27:8a:
c9:2d:2b:c1:4d:d7:54:f4:80:44:c3:72:c2:8c:ea:
ea:3a:44:9e:f1:ef:3d:82:b4:7a:1d:d8:38:e5:eb:
68:c7:12:22:63:ef:3f:f8:6c:c5:c9:44:98:47:48:
09:9e:91:31:0e:30:88:0f:e3:22:22:ad:b4:40:d4:
d5:0f:38:b5:26:48:6f:1b:62:90:00:a4:04:36:73:
1b:c7:df:a5:cf:2e:ea:d1:48:e8:61:ed:6d:7e:ce:
2e:50:00:5f:5a:28:4b:74:7f:c6:f7:c7:be:50:35:
16:2f:28:4b:01:17:f0:73:6f:73:0b:0f:5e:f8:45:
86:9d:c4:92:64:c1:21:2f:5c:36:f4:fc:dc:e9:6a:
d1:60:0a:3d:7e:79:3f:a4:89:dd:62:1a:d4:f7:ff:
88:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D7:52:62:B4:48:B2:B0:10:DC:EC:99:95:29:AE:B6:18:9B:C3:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46A2A56CD40311EF811D18B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.210.0/24
Signature Algorithm: sha256WithRSAEncryption
00:a0:7f:8e:98:7c:0d:b0:54:36:5e:20:1a:6e:74:46:3c:ad:
5b:96:42:50:b9:65:ad:b1:ff:b7:5d:70:40:89:03:df:cd:d2:
b2:77:9e:5b:48:1d:f4:83:9a:4a:7b:5c:e0:51:dd:2d:64:d1:
7e:ab:23:3f:48:8c:b6:2d:0f:4e:08:7a:8b:9b:48:69:df:06:
a7:61:13:34:86:0e:4a:cd:e8:21:88:47:ae:75:0e:8a:75:18:
dc:16:82:df:a3:4e:f5:8e:11:7a:c5:3b:82:2b:17:10:06:89:
85:ca:db:9d:9e:60:5b:83:89:bd:6d:2c:5d:42:48:9c:4f:12:
ef:65:c0:34:77:33:23:6f:b9:ed:9e:76:35:b0:8e:5a:99:03:
ab:70:17:2c:63:ff:90:18:fd:ef:28:9a:bc:09:40:46:e9:9f:
4f:de:ed:80:9d:96:87:1d:dd:11:3a:94:f7:ba:0a:a7:1f:15:
ed:3d:35:60:91:24:81:46:59:8b:2c:ca:91:ff:e8:05:53:ef:
d0:75:77:90:e8:a6:5a:2d:4b:65:22:9e:2d:64:46:e6:7a:a7:
ea:b9:a2:ce:72:5b:f6:b2:ab:5b:62:55:a1:ed:07:4c:5d:bf:
71:e2:2b:bf:34:df:fd:73:d9:a2:5f:18:f1:fb:94:c9:14:f8:
f4:58:ae:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:04:45 2025 by rpki-client