Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63C95DF4D3FC11EFBE71E58B762E951A.roa
File: 63C95DF4D3FC11EFBE71E58B762E951A.roa (raw, json)
Hash identifier: l7uuAgQTfAkfH2vrGk4NmyoyRpGqSohxJJ+LlypalbI=
Subject key identifier: 77:DE:ED:97:73:1F:5C:F4:2C:FC:25:6B:AC:84:FD:55:AA:54:F2:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63C95DF4D3FC11EFBE71E58B762E951A.roa
Signing time: Thu 16 Jan 2025 11:24:03 +0000
ROA not before: Thu 16 Jan 2025 11:23:59 +0000
ROA not after: Sun 16 Mar 2025 11:23:59 +0000
asID: 17561
IP address blocks: 154.206.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80880 (0x13bf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 11:23:59 2025 GMT
Not After : Mar 16 11:23:59 2025 GMT
Subject: CN=6788ec53-7253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:c2:68:54:52:76:d5:e5:63:2f:bd:c3:57:
81:0a:0b:f9:e1:ad:04:0a:6f:a6:65:82:bb:65:0d:
64:47:2d:2e:1b:ff:c3:1a:55:af:66:b9:d8:1f:05:
c6:f7:bf:d1:00:06:dd:77:59:4d:38:95:e0:35:d1:
44:e5:05:95:62:09:24:7e:bc:b1:4f:d0:75:a2:da:
80:1d:1b:f1:c1:9f:5b:f1:4f:09:68:65:5e:21:c0:
43:84:82:2b:fe:5b:82:b3:ce:77:69:75:3b:4f:f7:
39:9a:19:10:fd:22:d3:ae:15:2a:98:f5:4a:90:87:
61:a3:67:bd:15:01:a5:46:bf:c7:05:ba:1e:68:91:
55:a4:f8:ec:fa:88:d5:2c:65:8e:24:91:65:0d:fc:
8e:fc:74:0b:cf:96:cf:da:1d:42:7f:23:95:35:58:
24:c6:ee:3d:03:c9:29:c1:bc:18:15:f2:5d:d2:aa:
02:97:fc:24:e1:e1:c8:c7:4c:67:c1:b9:c8:a4:f6:
c6:a1:a0:c1:94:91:f6:b0:08:13:a7:31:9c:a9:6c:
09:0b:5b:7d:93:ca:3d:22:5d:1e:ab:2d:e1:7b:6d:
1f:90:06:7e:9b:ea:16:5c:a5:cb:cd:54:22:83:00:
d7:66:70:48:05:61:44:2a:fb:03:63:40:e0:6e:02:
9f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DE:ED:97:73:1F:5C:F4:2C:FC:25:6B:AC:84:FD:55:AA:54:F2:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63C95DF4D3FC11EFBE71E58B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.226.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:81:2f:73:67:7e:1b:ab:e3:b4:5c:2b:3f:93:df:d5:54:7d:
6c:d1:5d:19:71:e9:f3:45:67:b4:85:da:ad:7a:20:a3:49:fd:
af:86:a5:ea:16:45:48:af:55:e6:64:0e:c9:b4:be:11:66:8b:
10:11:8a:da:bb:53:28:d9:01:e4:10:5e:57:57:85:5a:56:2b:
98:a9:13:4b:05:a8:73:58:05:57:b6:fb:57:dd:b6:01:ca:32:
f3:50:38:13:e8:f6:ad:53:ef:87:92:a4:3e:1e:8c:07:ef:c6:
ea:a4:fc:01:7f:98:28:77:15:83:fb:3e:63:4a:ec:6c:31:51:
d8:22:f9:b6:05:e5:a0:e1:1d:d7:f4:d8:32:94:e1:2b:ec:81:
36:2c:02:dd:1b:8c:94:f3:cd:86:6a:4c:3b:a1:83:12:ed:72:
f1:05:0d:7e:5e:d0:1f:4e:38:49:02:1a:9e:a9:c8:8f:d9:98:
fb:ad:c5:df:3a:42:cc:23:e6:e5:a7:61:7c:2b:9f:6a:59:b4:
d8:4f:f3:21:0b:ae:9d:71:60:ad:0b:c7:24:18:90:55:a8:ba:
3e:5e:a2:1c:0a:5c:bb:f2:46:67:41:a2:8b:7e:6b:24:8a:25:
82:92:0a:d7:b6:f0:1c:88:50:d6:60:5e:23:36:e7:ca:92:db:
83:b3:f4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:37:53 2025 by rpki-client