Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51128502D8B911EF96D8079E762E951A.roa
File: 51128502D8B911EF96D8079E762E951A.roa (raw, json)
Hash identifier: 9iLT1FaAsuXF3nlNcxosd9qAak+u0iVKV1qgNhMPzz4=
Subject key identifier: 10:69:8B:61:40:B2:A1:F1:B7:54:CB:7D:6F:6F:41:AF:6F:51:BD:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51128502D8B911EF96D8079E762E951A.roa
Signing time: Wed 22 Jan 2025 12:06:31 +0000
ROA not before: Wed 22 Jan 2025 12:06:28 +0000
ROA not after: Sat 08 Feb 2025 12:06:28 +0000
asID: 18229
IP address blocks: 154.210.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81702 (0x13f26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 12:06:28 2025 GMT
Not After : Feb 8 12:06:28 2025 GMT
Subject: CN=6790df47-01aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:76:a1:4e:b6:84:c0:5d:42:ea:a2:2a:f5:
2b:44:d3:1f:00:43:08:44:bf:9d:9d:db:80:34:f0:
5a:ee:96:4a:02:17:7e:d4:80:7c:82:6b:d5:35:70:
c2:e9:c0:ac:e5:57:56:b1:26:51:59:b8:e3:46:9c:
6f:6a:79:3c:2f:13:e1:8a:e6:6f:09:49:d3:e7:3d:
47:3f:4f:e7:dd:43:82:c6:67:7e:51:5b:fe:84:f4:
e9:af:f7:86:56:a5:02:09:c6:cc:81:7b:6d:ab:ec:
a6:80:2d:1d:73:78:e4:52:16:a0:62:7a:86:e6:27:
5d:17:d0:22:dd:58:5a:62:3d:f7:c4:ca:ff:1d:ae:
e1:05:08:76:3a:ac:9f:20:9c:15:03:c1:69:61:cc:
d3:69:b6:6e:c1:04:c1:69:ee:62:64:91:17:60:c0:
7a:81:fe:dd:a6:0f:eb:72:56:83:2b:30:01:27:ec:
af:be:f7:1e:73:8c:e7:9e:1f:77:bc:ae:d5:62:a9:
b2:20:35:95:3a:fc:9e:d4:c1:1e:f6:81:1d:f0:62:
ba:eb:fe:8f:36:e3:19:94:5a:fc:9a:15:9f:83:92:
b8:95:ba:dc:eb:a1:29:1b:65:a4:7a:59:a6:01:b1:
32:7d:3e:c4:06:6b:58:0d:1c:bb:98:6c:c3:a7:3b:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:69:8B:61:40:B2:A1:F1:B7:54:CB:7D:6F:6F:41:AF:6F:51:BD:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51128502D8B911EF96D8079E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.215.0/24
Signature Algorithm: sha256WithRSAEncryption
29:dd:8b:e7:5f:e1:98:96:71:b6:0e:b4:c1:96:4a:be:2f:e2:
91:a3:8e:51:1a:89:96:bf:06:b4:b3:6d:47:9d:9a:cd:7a:55:
15:29:e4:de:c6:a7:da:62:2a:39:06:d5:c6:90:50:43:b9:f1:
d9:d7:8b:5a:ce:9e:8f:4e:ca:c4:a3:b7:cd:de:d9:57:7a:a2:
51:2d:eb:39:d9:11:b7:d5:ee:fc:95:88:2b:6a:b7:f0:72:a0:
bd:f5:ba:1f:80:1e:b4:7f:e9:a0:16:02:df:32:14:4f:df:20:
e1:93:77:8b:79:29:7d:60:dc:d5:2a:7d:b7:ff:f7:1d:37:86:
8b:85:85:08:89:e1:01:e3:19:e9:01:21:00:c9:98:9e:91:20:
c6:44:29:b6:e5:fc:0b:21:2f:d2:a6:0d:6b:06:e4:5b:fa:bd:
e5:b0:74:a1:62:bd:c5:d8:8e:88:c1:9d:b6:a6:32:98:b1:25:
11:3b:eb:3c:34:cf:82:59:4e:5c:33:0f:97:56:65:b7:eb:a6:
0c:09:a2:de:f2:b9:6e:6c:80:48:37:d6:63:8e:95:cc:da:87:
66:70:50:37:d9:9a:d4:ba:ec:66:6d:a1:56:82:73:22:08:10:
3b:c4:38:6b:1f:f1:67:8c:c1:87:bf:c8:9e:96:ac:bf:c2:8e:
53:60:fa:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:51:18 2025 by rpki-client