Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47EB48CEDB2011EFAB999E56762E951A.roa
File: 47EB48CEDB2011EFAB999E56762E951A.roa (raw, json)
Hash identifier: EAcmj8j/CFhLSxowg3QELL+ZY6hnORPwah0vusO0Cfg=
Subject key identifier: FC:33:73:3E:D7:E4:27:F7:AA:73:78:A6:A9:E6:7A:9A:81:4F:49:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014986
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47EB48CEDB2011EFAB999E56762E951A.roa
Signing time: Sat 25 Jan 2025 13:28:37 +0000
ROA not before: Sat 25 Jan 2025 13:28:33 +0000
ROA not after: Mon 03 Mar 2025 13:28:33 +0000
asID: 48031
IP address blocks: 154.222.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84358 (0x14986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:28:33 2025 GMT
Not After : Mar 3 13:28:33 2025 GMT
Subject: CN=6794e704-0d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:85:cb:32:08:bb:7f:86:1b:ea:02:77:fa:
c3:14:18:62:bd:1d:b0:1b:15:5a:e1:8a:92:88:a5:
af:ba:00:94:9f:cf:40:51:6c:57:3b:c7:fb:fe:d7:
85:63:a0:f8:12:79:d9:b7:23:8a:f7:b7:fa:4a:93:
94:47:ff:dd:7b:17:59:ee:a1:87:3a:28:3b:06:32:
c6:40:15:fa:e1:9f:db:0d:8e:57:69:9c:e0:75:10:
f7:8f:20:d0:8f:ff:ba:43:73:32:99:a6:e3:3a:62:
4e:bf:ae:3e:60:38:1f:48:4e:bf:63:11:1f:fa:a6:
1f:18:ba:e9:ea:3e:bb:9e:27:97:ee:0c:dd:1d:39:
3a:b6:9e:f8:49:45:ca:b2:f1:bd:41:66:4f:c6:1b:
53:b6:ee:4f:25:f0:d6:66:68:40:d9:76:3e:bb:08:
31:a9:f0:ef:27:df:9c:b6:c5:61:5e:e3:d8:06:e6:
fe:43:b4:12:f8:b0:71:2d:0a:b8:9b:84:ec:1f:38:
4b:3f:1e:e0:0c:49:74:91:87:72:f9:38:41:4f:27:
36:6e:1d:ed:bd:8a:25:e0:7f:60:93:f3:b0:9c:35:
8e:89:73:f0:9f:1b:25:72:fb:49:07:06:fd:82:e9:
85:c7:f4:75:dd:6e:17:2e:81:4b:0f:0b:f1:92:0a:
0e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:33:73:3E:D7:E4:27:F7:AA:73:78:A6:A9:E6:7A:9A:81:4F:49:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47EB48CEDB2011EFAB999E56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.215.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b7:a3:c5:a7:07:60:f2:97:55:56:e8:fd:0a:ee:3b:ac:1d:
35:89:1a:fd:28:ad:ab:71:dd:bb:67:c9:8e:88:b8:25:c7:a4:
d4:6b:74:bd:df:31:eb:7e:b7:28:30:c5:f8:e3:e5:bc:0f:57:
b5:e0:3d:fe:e8:86:bc:f6:91:cf:92:80:e9:0f:36:10:17:3c:
94:8e:83:6f:59:fc:9e:b8:43:40:61:8a:c8:49:a0:66:ad:41:
8f:22:ea:1a:48:f3:7b:b1:48:58:ac:9a:37:25:25:40:46:ec:
ec:da:ee:14:51:54:a9:fa:2a:a7:64:5a:8f:0d:74:eb:dc:7c:
6b:b9:19:b1:bb:a0:c4:4b:81:e9:a5:d3:01:f5:98:f7:10:21:
f2:2c:ba:25:0b:54:d7:fc:13:55:4e:bb:e1:a4:29:0e:2f:d4:
d9:7f:86:d5:bc:67:67:ac:dd:70:c4:0d:d7:97:34:0d:92:f3:
00:6b:f7:da:ae:94:53:8a:41:52:07:4e:c9:b5:97:89:11:01:
0c:ee:8e:dc:b8:f5:91:5a:bf:1c:8a:65:a7:e4:7d:d0:df:f0:
63:da:d4:f3:71:89:bf:75:ed:9b:71:13:f9:7e:62:ed:37:14:
c5:7e:c0:8a:db:9d:65:3f:31:de:3b:5d:8c:cb:37:02:df:3f:
13:31:ac:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:06:04 2025 by rpki-client