Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50E4D01CD98B11EF9D8D95A2762E951A.roa
File: 50E4D01CD98B11EF9D8D95A2762E951A.roa (raw, json)
Hash identifier: Gq+z3l9UYOlhfCCGUQ8uqgNs9jsC/NycG5FVDHIzeJQ=
Subject key identifier: 84:EB:AF:25:76:CF:2B:1E:7D:42:57:62:24:2D:C6:74:46:24:3D:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014268
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50E4D01CD98B11EF9D8D95A2762E951A.roa
Signing time: Thu 23 Jan 2025 13:09:45 +0000
ROA not before: Thu 23 Jan 2025 13:09:42 +0000
ROA not after: Thu 13 Mar 2025 13:09:42 +0000
asID: 138915
IP address blocks: 154.203.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82536 (0x14268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 13:09:42 2025 GMT
Not After : Mar 13 13:09:42 2025 GMT
Subject: CN=67923f99-7e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:f7:c2:a7:93:b0:07:8f:36:a0:14:54:9e:
1b:de:af:23:72:d6:61:9f:ed:4b:38:5b:b9:42:3f:
3c:5a:ea:40:2e:62:78:ac:40:05:64:78:05:e9:05:
da:d5:01:38:49:13:d2:3f:4f:45:ad:7c:cf:ca:40:
64:dc:39:ab:7e:a6:7b:d5:e1:21:08:e0:58:b7:0a:
06:b3:b5:6f:5c:a4:51:44:ff:7b:38:50:eb:34:6a:
06:1b:39:19:9d:4c:46:90:b2:f3:1d:48:c6:70:22:
5b:c2:2b:35:05:c5:c0:47:cd:ee:12:a6:92:93:ed:
05:9d:68:9e:82:b6:e0:d2:17:ba:5e:f9:f1:8b:c0:
76:04:d1:24:a6:b6:53:8f:57:4f:ce:ec:e1:89:df:
9a:e1:11:96:26:0d:b0:71:19:ad:e6:ab:5b:c7:2a:
c1:91:4d:78:96:21:96:f3:11:9d:6c:76:86:f0:af:
82:03:da:2f:12:90:31:bb:31:a2:bf:b5:ab:c3:4e:
69:d7:b1:7c:bc:e0:ec:55:37:f0:07:50:48:cf:70:
fd:d4:c0:49:c2:b3:ed:58:5f:af:c6:12:0e:45:7d:
06:16:86:ff:27:2f:9c:ed:92:d0:7a:70:ce:89:56:
2f:80:e9:f6:aa:04:55:5c:fb:36:57:11:bf:00:29:
9d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EB:AF:25:76:CF:2B:1E:7D:42:57:62:24:2D:C6:74:46:24:3D:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50E4D01CD98B11EF9D8D95A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.136.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:15:76:d5:15:32:6b:60:1a:0e:e2:58:fe:cf:49:57:4f:f9:
5a:38:d2:76:a7:d8:d7:61:43:b8:fb:03:1a:01:4e:18:d3:dc:
40:6b:88:2f:d3:81:bf:eb:71:66:95:f1:1e:a4:d7:a2:42:0b:
aa:cd:ec:f7:1d:eb:8e:2b:80:b5:d7:5a:ed:6a:05:64:98:ee:
8f:76:a4:95:56:99:c4:55:ab:25:0f:6b:4f:15:99:dc:dc:95:
01:dd:f7:41:22:63:99:be:68:a9:73:4f:e1:3f:81:3d:fc:65:
5f:04:ed:25:1d:9f:74:87:cb:7e:90:c3:0f:98:a5:8e:de:46:
10:55:cc:79:26:d5:b2:da:c9:9c:fa:8e:d6:06:8d:48:31:19:
2c:98:84:d7:71:31:9d:c1:63:0e:86:18:00:f4:4a:0d:40:c6:
c1:8d:c4:d7:12:47:59:86:77:9d:9e:7c:57:81:82:83:0a:2c:
2c:b0:7d:0e:eb:e0:8e:97:d0:3a:ac:f1:d1:f4:1d:c6:07:bd:
bc:e7:2c:af:85:31:a4:55:6a:a1:19:5e:12:f3:77:ef:63:f9:
16:9c:53:3b:c5:75:ef:c9:e1:db:8d:32:4c:23:6c:4d:b2:98:
37:1e:78:1d:55:f0:e8:a3:1d:dc:83:d9:bd:05:db:5e:0a:e8:
62:0f:d2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:58:36 2025 by rpki-client