Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F20CA08DA4C11EFBBE1FAB7762E951A.roa
File: 4F20CA08DA4C11EFBBE1FAB7762E951A.roa (raw, json)
Hash identifier: OStZQelS81+kIDa10MSNTSOa8oYbbaibtwGlkT/oXqk=
Subject key identifier: A7:1B:2A:82:BE:67:5B:32:EF:F1:53:8F:19:4E:8E:B6:A4:67:37:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01468F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F20CA08DA4C11EFBBE1FAB7762E951A.roa
Signing time: Fri 24 Jan 2025 12:11:15 +0000
ROA not before: Fri 24 Jan 2025 12:11:12 +0000
ROA not after: Sat 08 Feb 2025 12:11:12 +0000
asID: 18229
IP address blocks: 154.210.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83599 (0x1468f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:11:12 2025 GMT
Not After : Feb 8 12:11:12 2025 GMT
Subject: CN=67938363-09e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:84:21:d5:81:f7:4e:64:81:03:8c:b2:29:
84:37:aa:f1:31:9c:d9:f5:03:82:ea:88:eb:88:42:
95:29:e0:a3:92:24:86:1c:2d:29:5f:cf:31:56:ad:
16:da:9f:1c:01:4d:2f:f5:18:98:6e:93:a0:71:8b:
33:a2:1d:48:70:ef:a8:36:8b:56:f6:bf:a8:eb:c0:
fa:17:e0:9b:a4:89:15:26:4e:cc:4f:eb:51:fe:09:
e2:13:a0:90:cc:f9:99:c7:27:e1:78:c7:0c:64:68:
84:95:9b:a8:22:2a:3c:66:e9:26:12:76:a6:7c:f3:
31:bd:74:ec:fe:30:53:1a:3e:c5:98:30:5d:19:d7:
47:1a:a1:a7:94:58:55:88:22:79:1d:61:c7:07:e0:
65:63:13:85:b3:3a:10:9f:ca:b0:c2:0c:41:9a:c2:
da:d6:64:b6:7d:b7:d0:f4:f1:e5:cc:4a:6a:61:48:
92:67:a2:77:e4:7d:b7:12:6d:07:33:30:8a:99:f9:
e1:9c:d7:d2:39:00:97:5e:42:ed:bf:6b:92:3b:8b:
7e:ad:c7:62:00:76:be:64:5e:b8:7f:85:ee:68:73:
0d:1e:05:0e:83:25:c4:92:bf:74:19:78:47:10:43:
5b:22:ad:b3:17:f3:df:58:b6:db:4d:23:30:90:c0:
de:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1B:2A:82:BE:67:5B:32:EF:F1:53:8F:19:4E:8E:B6:A4:67:37:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F20CA08DA4C11EFBBE1FAB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.151.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:ed:9c:6e:be:0b:67:78:97:46:a5:f0:b7:0d:cd:c4:77:8a:
70:3e:c3:50:12:23:80:0b:3e:eb:9f:df:6b:6c:96:12:ee:d4:
90:c5:48:2d:a5:bd:e2:9f:d4:12:a8:86:d1:24:48:b1:40:0b:
40:e8:0e:fa:33:66:2d:01:06:31:fc:44:dc:f5:3c:92:8e:0b:
78:e9:fc:94:17:c3:25:6a:ec:76:5b:d4:ac:97:5c:51:a1:b8:
02:9f:e7:49:a9:be:20:c3:a4:05:4f:09:33:90:a4:9f:15:66:
99:b9:f4:33:22:c4:81:86:bd:a6:3b:79:fd:e1:71:a6:31:90:
26:3e:7a:b8:26:9e:9c:77:98:d5:e1:7c:7d:d4:f7:a0:1b:65:
73:ec:86:df:b8:cd:66:91:5c:05:2b:3a:2a:4c:c1:2f:5c:6a:
b1:f5:65:a2:b6:20:c7:32:d9:f8:a8:74:d5:2c:44:a9:d4:17:
b3:fe:9d:71:93:55:a6:17:a9:96:a6:a8:34:9a:c0:15:f2:2b:
fd:97:17:1e:85:4f:2d:21:2d:99:c0:6a:72:f0:f1:f0:e2:07:
11:0d:e7:b1:75:1f:29:ec:76:92:3d:e9:78:e3:1e:1a:2d:86:
bd:45:02:f8:21:e5:d3:98:30:dd:15:67:a6:7b:3a:be:50:ae:
19:0b:92:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:39:04 2025 by rpki-client