Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57CC8A96D40411EF9222C6BE762E951A.roa
File: 57CC8A96D40411EF9222C6BE762E951A.roa (raw, json)
Hash identifier: Pxyz9/HduSVVgTrOs7XCMw4Gg+sc+fuObZq5c6vPkr0=
Subject key identifier: 00:6F:A9:1B:E4:DD:40:39:6B:6C:06:76:31:8E:CB:98:DB:34:0E:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57CC8A96D40411EF9222C6BE762E951A.roa
Signing time: Thu 16 Jan 2025 12:20:59 +0000
ROA not before: Thu 16 Jan 2025 12:20:55 +0000
ROA not after: Sun 16 Mar 2025 12:20:55 +0000
asID: 17561
IP address blocks: 154.206.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80936 (0x13c28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 12:20:55 2025 GMT
Not After : Mar 16 12:20:55 2025 GMT
Subject: CN=6788f9ab-893e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d4:66:3c:11:5a:1f:77:1e:36:cb:48:78:a2:
03:23:7b:3b:07:7a:e3:be:6d:15:cc:7c:a4:52:a3:
b4:74:40:fb:b4:40:47:f1:fd:4e:1a:85:29:39:c7:
98:b0:27:46:aa:40:b6:25:b4:32:ce:bd:84:d5:09:
f9:5f:62:d7:c0:84:ea:db:d3:5e:2f:4e:71:15:3e:
e7:f9:d2:6f:39:4f:da:3e:81:51:14:60:3f:3e:58:
91:21:41:d4:db:7f:9f:4c:99:26:3e:01:dc:01:ac:
d8:a3:74:b3:10:1b:a4:ed:c3:93:40:af:8e:08:56:
12:20:8b:9e:76:93:55:a9:b8:4c:60:e3:68:f9:9c:
9c:37:84:3d:ed:13:de:75:29:f5:d6:d8:d3:25:b5:
75:e9:53:96:dd:fa:09:0f:2f:78:66:f2:33:da:9a:
45:9e:2a:96:a4:83:d0:e1:6a:f8:79:64:75:fb:cf:
94:d6:01:66:51:fa:7f:bf:27:e1:df:ac:d4:fc:56:
ff:d7:3b:a8:30:33:69:6b:9c:4e:4c:4d:ba:3f:e7:
7d:87:b7:2e:fb:5c:ea:e0:31:ea:8e:31:1c:78:8a:
16:5a:25:6a:da:ca:98:df:bb:ef:84:bb:04:2f:42:
e1:4f:ff:bf:5b:56:6a:f6:73:4d:e0:55:8e:d8:c6:
38:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6F:A9:1B:E4:DD:40:39:6B:6C:06:76:31:8E:CB:98:DB:34:0E:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57CC8A96D40411EF9222C6BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.214.0/24
Signature Algorithm: sha256WithRSAEncryption
65:22:26:b6:4f:f9:72:30:c8:1d:6d:5c:7f:86:22:9b:4e:d3:
7b:16:98:7c:f0:6a:b7:4c:86:24:05:96:0d:48:8a:27:79:ba:
07:ba:ac:90:58:35:7b:5f:58:24:a6:88:d2:a7:82:6d:cf:7e:
18:34:9e:1a:7f:65:39:8d:a4:78:95:03:ae:92:01:ea:94:12:
a3:8f:5a:db:8f:38:d3:43:be:ad:ad:6b:22:f1:20:ce:64:7a:
dc:16:df:da:db:55:ee:17:75:76:50:c4:ea:cf:a1:fa:7d:de:
c1:64:9f:de:99:21:e1:d7:52:8b:a4:85:0d:2a:b0:55:c3:bf:
26:21:29:6d:28:ae:f2:5d:fb:40:29:9f:8b:fe:24:6f:40:95:
e1:be:2d:e8:70:b7:e8:e4:bf:f9:e0:5e:6b:e5:1c:db:65:bb:
0c:b3:21:ce:51:22:b5:ec:cb:1b:b3:fa:3c:db:45:5f:3d:16:
42:46:58:59:99:cd:3a:59:96:15:08:bd:c8:79:73:49:e3:00:
cf:9f:05:3a:f2:dd:9e:a9:1f:91:dd:28:05:44:64:f4:2d:29:
73:4e:ff:bd:4d:ff:20:1f:3a:de:56:0d:29:28:2c:64:44:51:
67:49:51:a7:eb:04:44:03:d9:af:6d:56:5d:33:f3:e5:e5:38:
b1:30:83:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:24:10 2025 by rpki-client