Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C791AA6D8AF11EFA16F6D5A762E951A.roa
File: 4C791AA6D8AF11EFA16F6D5A762E951A.roa (raw, json)
Hash identifier: WCbT4Xkm5OsTXuOjgKwIvsAyKJVa8ibmw7Sq/7joEU8=
Subject key identifier: F8:5B:CB:BB:09:99:AB:A2:D6:4D:33:88:D0:29:87:0A:36:D2:3C:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EDE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C791AA6D8AF11EFA16F6D5A762E951A.roa
Signing time: Wed 22 Jan 2025 10:54:48 +0000
ROA not before: Wed 22 Jan 2025 10:54:45 +0000
ROA not after: Sat 08 Feb 2025 10:54:45 +0000
asID: 150008
IP address blocks: 154.206.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81630 (0x13ede)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 10:54:45 2025 GMT
Not After : Feb 8 10:54:45 2025 GMT
Subject: CN=6790ce78-562b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:17:f3:45:92:11:1c:0c:43:dd:48:83:64:f7:
a8:e1:59:01:53:06:1b:7b:e8:b3:69:fc:38:cf:d8:
79:e7:83:25:1a:88:9c:fc:a5:0d:26:6c:ee:00:cd:
8d:b3:39:89:34:21:28:5f:ae:a8:b9:72:67:f7:09:
8d:e6:cc:61:3f:1f:db:56:33:11:97:da:7a:af:06:
24:71:48:1d:95:6f:61:c9:05:09:e8:8d:fe:9e:da:
fb:b3:4a:6a:17:f4:37:35:ca:fa:49:da:53:2f:fb:
73:be:32:03:7f:60:2f:9e:72:79:d9:ca:89:b0:bf:
e3:5c:8c:98:a2:52:38:5e:29:35:1f:a9:73:dc:da:
e1:7d:7d:73:cf:6c:d3:3e:d1:f3:89:d0:21:d7:b5:
7a:de:fb:d9:f8:46:43:c5:f3:88:35:d5:8f:1c:ff:
50:a1:de:cc:df:ed:a8:8d:9d:a4:c1:92:18:ed:f2:
9f:8c:e6:d6:37:2a:1f:6c:06:d9:7f:00:25:18:7e:
50:9c:24:9f:ba:e0:c8:be:70:3a:2a:00:41:8b:d9:
40:a9:41:61:80:6f:fd:93:fc:4d:6e:ce:8d:31:49:
33:6d:3b:e9:32:ad:12:dd:58:a9:f7:11:b7:ec:0f:
3d:9c:24:f5:12:f0:35:89:c1:bb:ed:09:4a:fe:c8:
dd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5B:CB:BB:09:99:AB:A2:D6:4D:33:88:D0:29:87:0A:36:D2:3C:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C791AA6D8AF11EFA16F6D5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.24.0/24
Signature Algorithm: sha256WithRSAEncryption
18:f3:d1:eb:d1:38:8e:39:57:0c:ea:d8:0d:3c:5c:4a:46:28:
fd:02:09:06:82:cb:ef:30:22:e9:43:cd:28:87:13:21:cb:c6:
29:5d:06:1a:dd:25:c1:bd:72:ed:29:23:0e:ed:a1:bf:66:a4:
b4:2e:2a:62:62:e2:b6:cb:75:7e:b8:32:6c:3e:23:3a:83:b6:
0c:13:2e:fa:4b:78:4c:20:33:6e:dc:b9:e1:3a:c3:95:97:5f:
91:ad:4a:91:0e:6f:09:af:23:a0:67:be:8b:05:b7:6a:0e:bd:
47:54:78:84:2c:d8:fd:3e:0a:30:70:61:d3:d9:35:60:c0:e6:
fb:87:24:30:91:e9:10:ba:44:54:6b:f1:63:ee:ac:cf:76:4e:
66:2a:97:95:24:1f:f0:60:3d:16:85:9a:c8:aa:cf:f7:14:89:
85:7d:88:49:f3:19:7d:32:f6:6c:d5:91:80:11:ae:eb:03:0c:
e4:12:35:62:17:a7:b6:4d:6e:b0:64:84:0c:02:a2:f2:35:ce:
16:80:e1:b5:49:ef:fd:00:a2:b7:e7:32:ae:c7:c6:ef:5f:fb:
f1:bd:bb:4c:12:cd:5c:24:bf:65:8f:39:fb:11:6c:e0:c1:62:
de:c8:3e:00:62:2a:94:9d:c5:fc:9f:45:b3:54:00:36:b3:fd:
7d:50:b1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:46:09 2025 by rpki-client