Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F4E3D94D8A211EFAC1F9D84762E951A.roa
File: 5F4E3D94D8A211EFAC1F9D84762E951A.roa (raw, json)
Hash identifier: 8kYBn1e1YaGT8RL3a+ftHXrAWtz8qcZE449nv5qtEEY=
Subject key identifier: CA:FD:E3:75:87:21:4B:05:53:10:77:15:3F:3B:E2:2D:20:82:62:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F4E3D94D8A211EFAC1F9D84762E951A.roa
Signing time: Wed 22 Jan 2025 09:22:17 +0000
ROA not before: Wed 22 Jan 2025 09:22:13 +0000
ROA not after: Tue 04 Feb 2025 09:22:13 +0000
asID: 139880
IP address blocks: 154.206.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81532 (0x13e7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 09:22:13 2025 GMT
Not After : Feb 4 09:22:13 2025 GMT
Subject: CN=6790b8c9-ad78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9a:6a:79:55:16:48:1e:14:1a:e2:ff:c3:ed:
2e:40:ca:01:71:c8:2d:69:1d:e6:1a:c1:f5:61:0e:
8e:32:fa:37:e0:b1:76:16:90:f6:94:4d:8e:72:83:
95:d8:67:5c:ff:29:d2:31:71:0c:c9:1a:b5:61:e7:
88:77:ed:3f:f6:fe:17:05:bf:29:4c:79:77:40:a8:
20:57:84:47:f1:5a:53:80:2f:b8:cb:d8:15:78:e7:
87:e8:ce:09:88:8c:67:f8:6b:87:10:b5:c6:e9:1c:
bf:81:9b:91:64:25:dc:99:f1:e8:4e:23:85:17:96:
bd:ad:45:a6:55:db:65:39:9a:3d:c5:19:57:c7:8a:
19:b9:af:00:69:3f:5b:98:37:d6:16:d9:f0:71:13:
5f:ad:83:3d:52:dd:8a:81:89:fb:5a:b4:e7:60:e7:
8e:b7:e6:45:68:d6:da:98:90:70:af:4c:d9:d3:d8:
7c:f2:45:d9:ec:a9:23:3c:d1:b2:a4:79:c0:4d:e4:
d9:d6:9b:cd:74:ca:8f:9e:6d:77:47:3e:5b:90:6a:
53:33:df:d7:87:30:71:89:c6:78:76:48:d8:ca:07:
12:ff:09:04:9d:c5:71:af:e0:b3:d7:e8:4c:6f:02:
88:49:d7:c9:4e:c7:d5:b5:4b:04:dd:95:52:a4:3f:
61:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FD:E3:75:87:21:4B:05:53:10:77:15:3F:3B:E2:2D:20:82:62:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F4E3D94D8A211EFAC1F9D84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/18
Signature Algorithm: sha256WithRSAEncryption
40:07:76:53:fa:bc:11:d3:f1:62:bd:5d:a1:a1:ac:d7:6b:d1:
de:4a:29:37:d4:40:bf:bb:2f:cc:ec:b2:08:a8:d9:f8:21:f4:
a8:87:ff:df:a6:9d:04:ab:f6:b5:14:d5:4b:71:69:29:13:97:
fa:34:78:f1:ba:af:93:39:4a:61:84:c4:bd:c9:f9:1a:8d:b9:
69:4f:34:2e:2d:d2:8e:8e:d1:b6:32:96:aa:2e:ee:a0:2c:dc:
20:a0:54:ef:6b:a8:c5:22:24:d2:8e:c4:9b:08:d7:f3:43:01:
34:29:f6:a0:b2:02:d1:eb:d0:a5:70:a4:35:7e:22:e1:23:22:
3d:63:7f:17:30:4f:54:f8:f6:a2:6f:b0:04:ea:26:d8:8a:6b:
2e:27:ef:59:a8:0e:49:55:f7:a7:dc:44:4d:ba:b9:22:1a:fe:
b9:46:15:34:64:a1:1a:0f:3d:91:35:f4:cf:5a:a0:77:c1:7f:
c8:e3:e6:6d:ea:d5:99:4d:1a:a8:58:35:de:c0:6f:ff:75:f0:
8d:f7:5c:19:32:a5:ec:96:71:2e:a8:cd:f9:3a:76:ad:dd:30:
86:ac:e6:b9:86:c0:22:97:6e:f0:c9:a6:a9:3f:a8:21:80:2a:
36:34:1e:a3:02:9a:3b:0d:4b:a4:c8:01:16:0e:15:d4:75:6c:
e6:f7:e2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:38:06 2025 by rpki-client