Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BBC122ADA3F11EF884B4863762E951A.roa
File: 5BBC122ADA3F11EF884B4863762E951A.roa (raw, json)
Hash identifier: BrsvFJxyO8+ywMbURGjdrIa/xgtt/S4YKyCNmNm8INM=
Subject key identifier: E2:B1:66:51:CA:7B:DE:C3:FE:FC:4C:8C:1A:C8:6D:96:0F:CE:1D:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BBC122ADA3F11EF884B4863762E951A.roa
Signing time: Fri 24 Jan 2025 10:38:33 +0000
ROA not before: Fri 24 Jan 2025 10:38:29 +0000
ROA not after: Wed 05 Mar 2025 10:38:29 +0000
asID: 202656
IP address blocks: 154.219.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83364 (0x145a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:38:29 2025 GMT
Not After : Mar 5 10:38:29 2025 GMT
Subject: CN=67936da9-f4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b3:33:82:d4:e8:69:3c:67:2b:56:0a:ed:b3:
9c:0a:01:b9:e3:ad:83:e7:5a:d3:fe:d8:34:af:06:
19:49:e9:2d:17:28:60:3d:e9:0a:c2:34:f7:ad:8b:
12:3f:ef:5b:60:33:53:ea:b9:80:6f:7a:d1:27:8d:
54:97:2b:5d:f5:e9:42:9d:06:18:bc:f3:8f:e6:db:
1a:25:cd:c4:7c:d3:b3:81:bd:f7:ad:8c:da:46:6a:
4d:58:0f:20:ec:cf:ed:51:f2:e0:53:27:db:77:67:
3f:44:f5:03:66:02:83:dd:31:d6:b1:05:e2:a1:e9:
58:c6:3c:12:53:53:1b:86:c4:21:52:25:05:b1:13:
d7:d4:ca:cb:69:ea:81:e0:5c:ff:07:8c:49:d2:db:
cd:eb:94:d1:73:12:a3:5c:42:4d:6c:01:29:1c:27:
0a:37:c0:23:9d:82:84:e7:f8:3e:ff:ce:0c:1e:87:
65:e2:3c:cb:54:05:eb:4d:d2:3e:a0:bd:fb:d9:d7:
38:0a:74:e1:8f:18:ec:5a:d9:55:a8:f4:80:88:fa:
c8:ac:b7:c3:c4:43:ff:fc:d7:18:c4:35:ac:34:0b:
54:23:c7:4f:9a:79:7a:7e:1c:99:0d:d3:b3:3d:ba:
be:09:0a:ff:60:b6:ae:e8:32:5b:fd:84:d7:ce:50:
16:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B1:66:51:CA:7B:DE:C3:FE:FC:4C:8C:1A:C8:6D:96:0F:CE:1D:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BBC122ADA3F11EF884B4863762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.18.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f0:73:48:5c:a1:cd:31:b2:85:24:fc:72:99:02:b5:15:93:
58:5b:fc:30:2f:dd:2c:72:97:6b:1c:07:b3:b6:0a:c8:63:72:
a9:34:cf:ea:75:0e:bd:c4:f8:22:49:69:89:67:36:f3:7a:5e:
19:0b:03:c1:11:5a:69:83:4e:71:58:53:a8:3c:58:b3:91:2b:
80:e7:93:71:63:48:8f:31:ad:da:13:6c:7d:79:9d:68:10:1a:
a9:e3:5f:4c:fb:74:52:c4:46:ed:b6:17:82:06:52:2f:cf:8a:
69:2d:ee:ef:7a:06:59:e0:06:6b:3a:45:f7:0b:70:a0:37:3e:
42:34:02:c9:f4:0b:8d:4c:4b:73:9d:a3:97:b0:60:c0:4d:cf:
ef:46:4e:75:ac:0f:33:22:db:e4:e2:72:dd:0b:0b:c5:b3:cc:
7e:dd:99:0c:8e:2f:ea:94:ab:7b:75:2b:41:33:34:b9:f5:5a:
20:32:ba:41:2b:95:1f:f6:fe:a6:53:3e:4b:25:e5:56:e4:8f:
b1:63:49:1d:ff:78:41:e4:be:8d:c7:33:86:6d:79:a4:79:2f:
a4:9a:87:6e:80:68:d2:74:8e:fe:c2:01:65:5d:bf:1d:39:f5:
06:da:2e:41:18:62:17:fc:28:f9:f3:70:e1:3f:77:b1:54:d7:
ac:7e:39:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:50:48 2025 by rpki-client