Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D2726BCDB2611EF8F53EB7E762E951A.roa
File: 5D2726BCDB2611EF8F53EB7E762E951A.roa (raw, json)
Hash identifier: kPafi1Tbqv1KuKGXNP5Jsg8bYovVWRqb6N9rKoCpZzg=
Subject key identifier: 55:48:23:50:FF:19:BF:53:DD:6C:23:1E:53:E0:28:A9:41:B2:33:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D2726BCDB2611EF8F53EB7E762E951A.roa
Signing time: Sat 25 Jan 2025 14:12:09 +0000
ROA not before: Sat 25 Jan 2025 14:12:05 +0000
ROA not after: Tue 04 Feb 2025 14:12:05 +0000
asID: 7018
IP address blocks: 154.207.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84423 (0x149c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 14:12:05 2025 GMT
Not After : Feb 4 14:12:05 2025 GMT
Subject: CN=6794f139-26d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:4a:4a:1e:7d:b0:15:e6:fc:76:80:d3:8a:
ef:b9:ba:69:9e:90:52:75:b7:f2:2d:46:a4:70:ae:
9c:8d:c1:15:a1:f2:27:6c:bf:4a:64:21:35:0f:e6:
58:84:8b:44:2f:20:7e:1f:1a:39:0d:41:08:0b:a9:
c4:3d:9c:f7:fd:37:52:39:cf:9f:cd:97:3c:1a:89:
1c:ed:2e:64:eb:dd:4d:e9:d9:32:80:32:b5:10:04:
b1:2b:45:43:9c:a9:10:87:05:1c:70:33:18:2a:93:
58:44:46:09:1f:c9:cb:41:fd:94:28:26:9d:9c:7a:
01:2e:57:d9:44:c8:f1:da:83:bd:95:28:ff:8f:84:
da:dc:96:b4:4e:6c:d2:ca:c1:23:f7:bb:74:a7:0c:
b9:85:d2:c2:dd:6b:36:08:02:85:a0:91:97:fb:c4:
9b:61:a7:17:2d:1f:ca:d2:4a:5e:6b:0f:91:01:8d:
0c:83:10:13:12:13:10:0c:c3:36:ec:97:e2:27:53:
34:3d:4e:5d:e2:77:7b:d4:b6:d9:1c:80:6d:a4:30:
01:20:49:1c:1e:3c:8c:79:67:dd:8e:fb:b2:f3:99:
89:0b:74:2c:8d:6f:f9:b9:99:ac:11:bf:3f:3a:24:
ff:2e:99:aa:02:e1:89:67:43:89:93:94:f6:78:cd:
3e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:48:23:50:FF:19:BF:53:DD:6C:23:1E:53:E0:28:A9:41:B2:33:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D2726BCDB2611EF8F53EB7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.156.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:63:26:28:ad:c9:89:08:ab:79:0a:63:79:0f:d5:46:9a:65:
52:9c:44:3b:c7:97:55:bc:c2:c0:c8:d5:4c:89:85:f7:fc:b3:
5e:13:e8:ee:1d:05:cc:8b:07:d5:10:3d:0b:9c:0c:e9:eb:a0:
59:22:f4:1d:3a:15:e9:da:21:fe:26:66:30:0f:f1:0f:c7:90:
bb:3a:51:1a:a5:0f:0b:1f:e9:2d:18:34:8e:4b:1e:86:5d:d2:
86:4c:74:c7:9d:6a:01:81:93:0c:49:04:0b:90:5a:f9:22:c6:
13:58:88:17:ed:cc:78:24:96:91:31:d0:00:d5:21:7e:ef:f5:
b8:77:44:4c:9b:6b:05:f8:4c:95:3d:3f:fd:89:02:4a:1c:da:
49:4c:e9:81:fb:e6:d0:25:63:e1:42:78:f2:ca:cc:cf:03:14:
1e:46:b4:18:c0:48:e9:9f:c5:99:64:fb:94:df:ee:1a:c0:9d:
fe:e8:6e:20:e4:a7:1f:23:ce:6d:0b:fd:2f:9b:0d:7d:70:d5:
77:dc:21:c5:df:66:d3:03:18:10:6f:c7:21:a9:b6:f8:27:b5:
73:10:f2:8c:7f:91:fc:e5:27:7e:eb:ee:bf:49:f7:5a:f5:fb:
78:f0:a9:b9:58:28:5d:f2:e6:0b:db:7b:93:e3:69:97:2a:bc:
e5:94:8e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:22:09 2025 by rpki-client