Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66FE3E7ECCCA11EF80AC3D57762E951A.roa
File: 66FE3E7ECCCA11EF80AC3D57762E951A.roa (raw, json)
Hash identifier: gzI7R4Vp6ufwZLDlyJoVRLDZlSkvoH19FMWGy80ZE1I=
Subject key identifier: 32:81:E8:5E:1A:FF:FF:2D:98:E7:66:EA:AB:83:CE:7A:5A:DE:06:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013659
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66FE3E7ECCCA11EF80AC3D57762E951A.roa
Signing time: Tue 07 Jan 2025 07:38:36 +0000
ROA not before: Tue 07 Jan 2025 07:38:32 +0000
ROA not after: Thu 13 Feb 2025 07:38:32 +0000
asID: 203020
IP address blocks: 154.207.56.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79449 (0x13659)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 07:38:32 2025 GMT
Not After : Feb 13 07:38:32 2025 GMT
Subject: CN=677cd9fb-97f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5f:3d:5a:74:d1:7d:85:9a:15:a1:22:bb:fd:
92:c3:1f:5f:08:50:cf:84:81:e4:28:6b:dd:25:77:
4c:01:fa:3e:42:5a:10:17:22:d0:73:df:12:64:1a:
d9:91:e1:7c:db:f5:61:d2:e8:42:cf:a0:64:3a:4a:
79:9b:90:86:a2:47:4f:31:a7:00:03:e8:27:40:3d:
a0:82:51:ec:2d:87:b9:09:81:e2:99:de:bf:c8:c6:
94:5f:7e:f6:b6:29:70:05:bc:12:48:01:b1:2a:de:
53:a1:e0:a0:39:e3:fc:a1:ea:43:46:01:c5:d0:9c:
61:70:ec:8d:24:20:55:ad:03:2b:ef:5c:8c:fd:94:
04:c6:a7:55:01:b9:4f:15:5f:3d:2f:40:f7:70:e7:
b2:8d:26:81:c7:e7:ce:fd:40:87:28:6d:67:5d:05:
75:b6:30:03:52:c0:54:bc:b6:72:c4:f8:2d:8c:c1:
2d:19:f7:27:75:70:c8:19:d0:cc:c5:e9:d5:40:cc:
b9:50:25:86:c4:7b:5c:1b:9b:f2:5b:3d:22:f6:be:
35:f7:31:93:ce:61:59:1d:1d:6e:84:17:11:81:40:
5b:80:d7:5d:4b:3f:81:32:fa:ff:ed:ed:61:8f:1f:
cb:b4:3a:97:41:ee:9c:38:ef:aa:0f:63:ed:2b:82:
4c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:81:E8:5E:1A:FF:FF:2D:98:E7:66:EA:AB:83:CE:7A:5A:DE:06:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66FE3E7ECCCA11EF80AC3D57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.56.0/23
Signature Algorithm: sha256WithRSAEncryption
95:05:0c:56:2c:24:0b:fa:27:d4:e4:02:98:ad:ba:49:1f:12:
b7:ab:5a:e4:d5:59:e5:4b:7e:a4:44:1d:f2:66:f1:fc:2c:62:
5d:be:b3:1b:cd:1e:ac:2f:52:29:e2:14:b9:47:d6:3f:91:cc:
04:99:c2:ff:c7:35:8c:dc:6b:42:1e:62:b9:6e:c0:32:a1:a2:
9a:00:ef:7b:54:a9:92:55:fc:7f:0a:03:38:9e:a0:50:e1:2c:
ef:70:94:56:10:ee:28:e9:af:b2:7b:d4:f0:1b:39:0e:64:c2:
3b:6e:8b:92:15:87:64:d5:5c:65:9a:75:f5:ec:f8:e7:68:01:
58:24:46:ca:b6:dc:74:64:17:05:16:67:1e:9e:ba:7a:7f:bc:
8d:e2:d8:7a:a8:19:7b:dc:6f:2b:a7:17:6e:e7:ef:e1:f7:d5:
48:b1:65:91:38:ca:61:8c:99:10:09:99:48:ed:59:61:b8:be:
41:b9:bb:14:b8:14:96:0c:49:e3:8f:7a:48:f3:86:2f:66:c6:
8d:7a:8b:dd:c5:84:bf:33:a3:b2:7c:09:cc:e2:ef:f0:5f:b2:
5f:b4:8e:56:53:ce:1e:ff:38:16:93:eb:32:0c:bd:b9:d6:01:
49:f4:57:0c:b6:a9:e2:54:43:74:99:5a:8d:46:99:34:eb:77:
75:2b:c2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:19:37 2025 by rpki-client