Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5150F834DBDC11EFA28AD149762E951A.roa
File: 5150F834DBDC11EFA28AD149762E951A.roa (raw, json)
Hash identifier: TBoo/hoyCEcwQiCE4gkTTz3EMpt8RCQELQfdvClesxE=
Subject key identifier: 6D:48:7A:92:BF:CE:6E:9B:D5:CB:F0:DF:6F:45:69:50:A5:2C:95:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A82
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5150F834DBDC11EFA28AD149762E951A.roa
Signing time: Sun 26 Jan 2025 11:54:37 +0000
ROA not before: Sun 26 Jan 2025 11:54:33 +0000
ROA not after: Tue 25 Mar 2025 11:54:33 +0000
asID: 6079
IP address blocks: 154.202.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84610 (0x14a82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 11:54:33 2025 GMT
Not After : Mar 25 11:54:33 2025 GMT
Subject: CN=6796227d-03f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:d8:a2:87:05:6d:78:f2:68:2d:2e:4b:de:
6b:7f:ec:38:36:d1:b6:4c:2d:25:cb:36:d8:59:df:
31:6b:6c:55:0b:66:87:41:41:a6:47:0b:d6:c4:37:
40:0e:86:7a:98:bf:0b:1b:ea:77:60:96:ea:d6:fa:
9e:fc:e3:de:46:4f:46:f5:cd:31:00:c6:64:2f:f6:
37:90:3d:9f:44:91:30:e7:b6:68:c3:98:eb:ec:31:
9c:2a:d3:76:94:08:b4:ba:1e:2f:88:cf:06:63:76:
f8:16:47:05:62:6f:91:64:44:89:67:42:15:41:c0:
89:14:28:80:f6:aa:ec:e2:db:f3:ef:d3:d0:18:d4:
bd:aa:84:3e:59:58:ff:73:9e:c9:04:74:2a:48:d7:
44:b9:6c:1f:77:c7:14:0f:df:de:21:40:96:d6:69:
8b:cb:74:d4:2b:a3:17:2c:c9:b1:af:5f:d1:d8:2a:
c4:14:22:50:5e:93:7d:50:89:41:36:76:2c:df:98:
14:72:de:ad:28:7b:67:6a:73:cf:19:35:d4:a3:03:
06:d0:82:a2:24:45:48:45:08:27:30:d8:35:5a:e2:
b2:66:b4:58:a6:29:a8:88:d1:e8:e4:1d:fa:21:b8:
17:be:cb:6a:0c:1c:be:5d:9b:05:26:e9:c0:9a:3b:
45:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:48:7A:92:BF:CE:6E:9B:D5:CB:F0:DF:6F:45:69:50:A5:2C:95:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5150F834DBDC11EFA28AD149762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.138.0/23
Signature Algorithm: sha256WithRSAEncryption
54:2a:27:1c:87:f5:52:39:22:f4:38:f3:44:13:ae:44:38:b1:
73:af:9f:6e:11:c1:bd:ab:02:af:85:30:33:b8:70:73:ee:4c:
1e:80:d0:e1:3a:10:df:8b:2f:79:d0:dc:fa:38:6e:65:d0:30:
fe:da:46:6c:5d:7f:72:ed:fd:9a:26:72:4d:89:9d:33:d8:12:
b2:6c:c7:30:92:98:98:50:06:32:bb:98:73:08:ee:17:0a:34:
ce:ff:ff:6d:d9:8d:e6:57:b6:82:24:dc:94:2e:64:7f:ca:1e:
42:6e:b7:32:8f:d0:68:1b:e6:94:63:a1:44:d2:a1:af:44:39:
62:e1:c5:c9:62:23:c8:6d:a1:ae:fd:7c:21:57:a3:c2:57:44:
97:4c:d7:df:1f:49:0a:70:19:cb:0b:97:a3:e1:98:20:d2:89:
c2:7b:9d:b4:02:16:e9:6d:36:aa:22:d5:a5:7e:e6:2a:7f:5c:
08:ba:67:d1:1c:d2:6e:12:f9:c2:a1:46:e8:35:b8:5c:29:88:
b7:1f:a7:3f:67:b2:dc:a8:ca:5f:93:e7:71:df:f0:db:d7:2c:
7c:59:5a:43:67:13:e9:1a:f7:3f:e7:e0:23:e9:8d:a7:39:68:
c4:e1:b4:6d:02:3f:22:26:35:08:52:ab:7b:af:94:c7:54:c6:
0e:59:b6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:15:07 2025 by rpki-client