Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C7BF46CD9FC11EF86B43D9B762E951A.roa
File: 4C7BF46CD9FC11EF86B43D9B762E951A.roa (raw, json)
Hash identifier: +80yrTYmQl2+rHa9cGi5qR59AUeGfZCmdKcsbuHWNXc=
Subject key identifier: 2C:43:1F:64:56:47:75:18:99:60:13:3B:2D:61:5E:AE:A8:2A:F2:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01436A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C7BF46CD9FC11EF86B43D9B762E951A.roa
Signing time: Fri 24 Jan 2025 02:38:31 +0000
ROA not before: Fri 24 Jan 2025 02:38:27 +0000
ROA not after: Sat 01 Mar 2025 02:38:27 +0000
asID: 62240
IP address blocks: 154.223.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82794 (0x1436a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 02:38:27 2025 GMT
Not After : Mar 1 02:38:27 2025 GMT
Subject: CN=6792fd27-3f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:da:43:3f:f1:32:c5:42:d2:56:12:d9:3d:
ff:e2:1e:26:07:37:c2:03:1e:87:a1:f7:fb:5a:28:
73:64:1b:a4:d2:c8:b7:91:44:4b:8c:d0:46:34:93:
64:d5:58:2e:f7:f7:93:fe:c6:bb:91:04:50:f4:cb:
a6:9a:b0:5f:5b:72:21:a4:3e:39:85:e2:8d:b5:81:
e3:6b:37:6d:7f:a4:1f:22:fb:d7:e5:1f:a3:a8:d1:
a4:00:b3:c8:46:2b:32:b8:cf:f5:6a:72:3f:7c:8d:
a8:a6:72:88:f5:03:46:ce:77:e3:ab:81:99:3e:95:
22:6a:6b:e1:7c:53:cc:87:8c:e5:d4:34:3b:15:8e:
d9:4f:00:23:21:64:92:ca:4e:f2:b1:72:16:e6:9a:
9e:e0:22:17:83:74:0a:8e:ec:82:44:39:70:cd:4f:
3f:68:fd:8c:b2:ac:25:c9:1f:c4:e0:42:ed:c2:8d:
08:c1:ee:2a:98:25:1e:00:84:d4:26:27:31:bb:fc:
67:f9:c8:d1:80:76:ad:b2:66:40:af:43:5b:22:53:
4c:41:cf:14:7c:ae:53:68:db:44:1d:2a:46:0b:32:
6e:32:9f:09:54:2d:ed:bb:3c:83:62:5c:a9:fd:5d:
e4:41:ef:95:17:0a:17:b4:50:ea:a7:32:04:dd:7f:
c7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:43:1F:64:56:47:75:18:99:60:13:3B:2D:61:5E:AE:A8:2A:F2:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C7BF46CD9FC11EF86B43D9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.220.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ba:61:9e:53:63:e6:c0:9f:2b:9f:c0:50:1c:80:51:32:58:
be:8d:6a:ef:0e:a0:a5:8c:ad:7d:ac:e8:31:3b:79:ea:5d:a5:
df:70:62:25:c9:30:89:ea:0b:49:2e:d2:88:d9:5b:ac:37:c5:
c1:7d:7a:e8:05:dc:56:12:d4:1b:70:a4:e0:02:5c:60:9b:10:
c1:e4:97:64:1d:b4:0f:5e:39:70:a4:83:0a:66:c3:44:90:38:
06:b6:31:7d:91:33:29:40:61:d4:f3:1d:94:bb:b4:e4:63:53:
57:cd:fd:1f:ea:17:6d:cf:46:3a:7a:47:39:ed:82:af:a8:cc:
3c:bc:85:06:b4:54:74:ea:bc:ff:09:84:7f:40:56:c6:fd:db:
4f:ec:cb:0c:51:1c:d6:60:cb:87:c6:1e:19:e1:ad:1c:a6:b6:
48:2f:8a:8a:fa:27:68:04:a4:d3:95:df:f6:5d:00:ec:2f:d1:
f9:47:d6:60:e3:73:13:0d:1a:22:a2:fb:f0:11:ac:5c:7b:eb:
d5:37:dc:12:61:78:50:36:e1:2c:6a:4b:1b:18:43:6a:89:48:
56:a2:11:27:fd:d5:21:88:49:dd:5c:1a:39:81:3c:28:1c:1e:
ab:72:47:fd:f2:ba:98:f5:15:60:ab:8f:e3:79:75:9b:2c:c0:
cd:dc:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:16:57 2025 by rpki-client