Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BEF6718CADE11EFA10BA897762E951A.roa
File: 4BEF6718CADE11EFA10BA897762E951A.roa (raw, json)
Hash identifier: xG5oL01VKr8yOo7RXaKvX+ITkaVw5cSs4/jved9psGo=
Subject key identifier: F2:0B:FB:74:A0:B8:36:DC:58:D1:DD:35:2F:54:1E:74:B6:5B:55:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013557
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BEF6718CADE11EFA10BA897762E951A.roa
Signing time: Sat 04 Jan 2025 20:55:58 +0000
ROA not before: Sun 05 Jan 2025 20:55:54 +0000
ROA not after: Tue 04 Feb 2025 20:55:54 +0000
asID: 203020
IP address blocks: 154.209.16.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79191 (0x13557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 20:55:54 2025 GMT
Not After : Feb 4 20:55:54 2025 GMT
Subject: CN=6779a05e-68bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a5:51:b1:bc:6f:9a:91:41:30:22:3e:8e:48:
0d:00:30:88:02:62:e6:c8:54:4b:bd:e6:28:8e:45:
54:e3:19:60:24:06:d4:ad:74:72:52:cb:70:91:33:
d9:cd:94:b8:b3:c9:8b:f7:09:cd:96:f0:a9:89:96:
f3:c9:2a:07:a4:18:d3:22:76:e2:3d:c2:87:d9:85:
8f:92:c2:55:86:30:dd:39:26:1d:37:9c:5e:e2:82:
d1:6e:e0:4a:1e:0a:b3:af:bf:a1:0c:4e:89:bc:5f:
86:9a:1a:d4:d5:23:33:42:88:f0:4b:2b:51:1d:63:
59:20:60:3d:93:bd:3d:1b:66:f3:86:02:bf:49:d1:
7a:5a:ba:c6:ac:5a:f0:20:05:60:64:2b:80:41:9d:
97:10:98:39:a1:a0:2b:aa:00:35:50:f0:07:28:c6:
00:18:48:ef:e6:39:63:7e:ed:64:ea:3c:1f:2d:01:
ff:65:92:17:8d:46:17:b4:d9:91:9b:7c:ce:55:e9:
0b:74:95:01:8f:80:c9:d7:28:74:90:eb:7b:b8:82:
04:e9:5e:a0:76:9f:9c:37:09:20:5e:59:cd:46:bb:
43:8e:45:3a:1b:a2:74:54:f8:c8:18:ae:fb:05:1b:
1e:98:e3:ca:e2:1a:7b:1f:9d:57:d1:8d:28:72:8b:
df:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0B:FB:74:A0:B8:36:DC:58:D1:DD:35:2F:54:1E:74:B6:5B:55:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4BEF6718CADE11EFA10BA897762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.16.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:6a:e1:95:e7:d0:e8:22:85:14:bc:3e:c1:83:ed:38:e6:26:
85:6d:49:9a:43:ec:7c:78:f6:6c:6d:6a:8c:43:4e:0f:ed:14:
9d:1c:96:aa:2e:22:ed:b1:c8:0f:41:ae:fd:33:01:21:39:d8:
3f:36:cf:50:06:de:af:22:8d:8c:f2:8a:9c:1b:af:7f:44:0e:
1a:ab:91:ca:d7:fb:00:f9:bf:f4:7f:0c:b3:1f:a7:75:15:c0:
a1:a3:b2:ad:f8:7a:20:d9:41:7c:e1:3d:7d:d1:77:46:39:8f:
46:64:14:8d:b4:67:0d:c7:19:63:9e:b1:b1:f6:72:11:62:03:
4b:ce:5e:80:40:94:b5:d3:c8:2a:72:fd:65:69:d1:f5:e7:8c:
bf:6b:4d:84:ad:4d:a3:1b:99:bb:4b:66:0d:48:85:ca:8f:72:
84:d1:47:2d:16:45:d6:33:9a:fa:58:5d:b4:7e:7a:9f:e8:c5:
01:8e:e6:c6:69:d9:6d:3d:24:8f:dc:b3:f7:92:4d:aa:53:ac:
c2:80:6e:e3:4a:9f:ad:c3:24:2d:b4:c5:22:d3:24:ae:a7:bb:
b2:4e:5c:af:63:b0:df:03:0d:c1:df:98:cd:a7:40:26:f1:3a:
73:cf:85:76:e7:db:8c:69:e2:a3:38:a1:d2:46:f9:bc:f4:3b:
c8:a7:f8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:38:33 2025 by rpki-client