Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F2E56D0DE2111EFA26FEC9D762E951A.roa
File: 5F2E56D0DE2111EFA26FEC9D762E951A.roa (raw, json)
Hash identifier: pjjnZX4dzfoZwy1k36Jt0IbxE678jVk+ViZkg2GLdHw=
Subject key identifier: 0A:96:13:58:8E:B5:81:14:BA:8B:66:A5:A1:E0:DF:04:23:F3:82:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F2E56D0DE2111EFA26FEC9D762E951A.roa
Signing time: Wed 29 Jan 2025 09:13:58 +0000
ROA not before: Wed 29 Jan 2025 09:13:55 +0000
ROA not after: Wed 05 Mar 2025 09:13:55 +0000
asID: 203020
IP address blocks: 154.207.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85332 (0x14d54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 09:13:55 2025 GMT
Not After : Mar 5 09:13:55 2025 GMT
Subject: CN=6799f156-4c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:4c:37:08:33:49:b2:90:5c:3c:2c:9b:25:
08:70:3a:d8:be:2c:68:ab:2b:3f:41:ad:98:13:2d:
fa:dd:25:d6:e7:c8:76:b9:5a:9b:f8:31:75:86:a0:
53:ad:47:6a:17:2a:d9:fd:94:e4:c4:7a:36:21:31:
c3:3e:fd:de:e4:f7:bb:48:81:87:fb:1a:e1:56:f8:
7a:f8:69:d9:8f:c5:d2:8e:80:d5:68:ef:f2:cb:cb:
3d:ea:c3:8f:a3:64:d5:f6:4b:dd:ac:9c:12:77:6a:
78:f6:0c:63:53:da:24:4e:3d:3b:59:44:b7:55:0c:
f3:30:5d:cf:fc:49:df:e9:85:02:0b:7a:93:ca:d9:
2e:37:5b:10:f6:dd:4c:25:c5:e9:6c:be:6d:26:af:
b6:58:3f:9b:d1:7c:34:e0:86:fc:d7:1e:a9:fb:30:
c3:cb:3d:38:21:c5:61:7a:8c:e1:c3:f7:f6:44:71:
fe:a8:98:89:ff:d3:c9:5a:b0:15:b9:b4:51:a0:83:
5f:ae:5e:72:cd:bf:b4:c3:6e:52:c4:04:95:63:1b:
d3:68:af:41:cd:c1:26:ec:77:17:54:87:d1:85:b1:
48:f3:88:79:21:4d:4d:1f:0e:44:84:42:71:95:cd:
7d:3b:4f:44:80:5a:87:d7:a3:39:d6:dd:a0:38:b6:
2d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:96:13:58:8E:B5:81:14:BA:8B:66:A5:A1:E0:DF:04:23:F3:82:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F2E56D0DE2111EFA26FEC9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.102.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:02:65:b0:03:6f:ff:e3:38:38:81:44:80:c7:3a:d0:a7:78:
a7:82:02:08:3a:0b:5b:3b:08:cf:34:74:64:84:fd:21:08:2d:
39:e9:49:e5:55:77:b1:10:27:2b:83:2b:f6:1e:67:cd:1d:43:
7f:2b:6d:77:64:de:19:2a:1b:08:c1:84:52:37:43:60:d7:62:
98:e5:90:73:00:d8:f0:25:db:fe:47:34:66:c4:6e:a3:26:b0:
52:39:94:d0:e3:73:4f:ab:77:a6:f6:de:93:be:84:be:eb:2c:
12:cd:bf:36:e3:79:2b:20:5f:f4:a7:92:c9:60:39:65:af:69:
a9:d4:aa:af:c4:2e:0d:9a:07:08:90:53:5b:5d:ab:d8:ea:b1:
b3:6d:d7:24:5e:4a:03:3c:34:8f:bc:23:6e:14:17:35:d4:7d:
f5:87:37:9f:ff:5b:f4:ca:0e:64:4f:7a:2f:ea:bf:dc:70:48:
b4:56:aa:b9:8c:cc:80:25:44:45:c3:4d:86:c1:82:b1:4f:a2:
34:46:ba:aa:00:67:8d:79:da:a7:c7:df:78:f6:09:cd:05:8b:
45:b8:39:6f:ff:f9:be:a9:90:bf:af:70:be:b5:19:f0:76:2f:
29:8a:45:fd:65:e0:72:25:fe:38:70:66:97:b9:7e:81:ad:6e:
c8:86:5d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:57:47 2025 by rpki-client