Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/530FF1D6DD7411EF84DBC78E762E951A.roa
File: 530FF1D6DD7411EF84DBC78E762E951A.roa (raw, json)
Hash identifier: 6Xb5oLVLXr42Jg8NjrUYTAiep5mpwi1xdqY+oIQ2Ruc=
Subject key identifier: 4B:55:70:BD:49:E7:79:1B:51:12:78:9B:A8:5A:EE:98:D7:16:DD:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D0C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/530FF1D6DD7411EF84DBC78E762E951A.roa
Signing time: Tue 28 Jan 2025 12:35:15 +0000
ROA not before: Tue 28 Jan 2025 12:35:11 +0000
ROA not after: Tue 25 Feb 2025 12:35:11 +0000
asID: 9304
IP address blocks: 154.206.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85260 (0x14d0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 12:35:11 2025 GMT
Not After : Feb 25 12:35:11 2025 GMT
Subject: CN=6798cf03-4c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:64:5b:35:c0:d3:86:ed:9a:51:35:4a:77:dd:
e3:64:cc:16:66:52:5a:09:59:e8:b2:91:fe:4c:d2:
5f:0a:77:2d:93:c5:01:60:73:3b:08:7f:47:38:12:
e0:84:f6:af:13:3c:e5:d2:e1:48:a7:0b:35:f4:cb:
ef:65:48:ea:5a:6b:72:04:1d:7e:87:7b:e0:21:d3:
1f:80:c8:3f:b9:f0:60:7b:c5:50:0e:84:45:08:49:
f3:b5:37:cd:40:9d:60:a9:c3:63:7a:61:df:7d:cc:
11:91:a2:ea:e6:fe:83:a4:11:bc:34:c8:b2:3d:cf:
1d:1b:d7:70:df:62:48:16:06:9b:79:55:96:fd:07:
bb:cc:e9:20:11:87:bf:52:86:25:a1:3e:3e:65:83:
60:bf:fc:f0:e5:64:94:7a:fa:81:b6:6d:93:01:7a:
0a:ba:82:66:da:c8:3d:a7:fb:9b:3c:61:26:fa:a2:
e0:73:3d:af:26:d8:62:e4:f4:19:4c:09:10:4e:91:
6f:2b:71:57:5e:c1:18:10:fe:67:7e:a7:4b:9e:8b:
16:45:90:0e:1b:54:96:14:0d:b6:7d:42:f6:6e:41:
1a:88:89:b0:b5:b2:a0:2e:7a:52:3d:6b:bc:18:49:
c9:de:0d:3e:64:4f:cc:b2:18:56:d2:d2:b4:7e:1b:
96:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:55:70:BD:49:E7:79:1B:51:12:78:9B:A8:5A:EE:98:D7:16:DD:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/530FF1D6DD7411EF84DBC78E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.47.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:d9:8a:a8:62:a0:52:78:d2:5f:33:7b:d9:13:80:78:d0:18:
6e:aa:31:8c:b3:ac:59:14:ae:4a:df:73:40:08:80:68:16:5a:
11:d6:b3:33:bc:66:00:11:81:7e:c1:b9:04:80:c6:f1:65:e7:
43:69:c8:5a:e4:2a:91:e7:98:14:e6:76:e0:4a:9d:48:1a:f2:
c4:ca:dd:84:02:6d:f5:48:c2:d3:cb:88:d5:55:c7:8e:f2:b6:
f2:f5:5c:6b:9f:dc:70:42:70:43:ca:9d:70:9c:03:86:83:54:
82:91:50:ac:8a:c7:ae:15:f1:c4:3e:01:b1:9f:46:f5:f6:57:
4e:6a:d2:ee:16:62:29:5a:23:6a:92:ee:f9:61:19:b7:ef:96:
a3:a8:93:08:93:6d:07:81:7f:25:4c:a9:60:4b:59:27:87:9f:
cf:3e:69:38:a8:02:36:93:a4:5a:c9:87:56:81:2b:97:f3:54:
ae:62:04:d5:ea:d6:52:74:95:dd:cb:55:6c:56:ff:bf:20:fa:
9a:be:07:3a:d9:6c:ee:05:06:48:e1:aa:4e:93:22:82:b3:f8:
e0:3f:70:ce:0b:11:05:7a:65:2f:bd:e4:ab:07:ca:7a:09:32:
fb:e0:ca:ec:5c:c7:d9:c9:39:fe:46:a4:00:2f:15:d1:27:eb:
20:06:93:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:14:39 2025 by rpki-client