Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6799BDB4DFDE11EF9545BC4F762E951A.roa
File: 6799BDB4DFDE11EF9545BC4F762E951A.roa (raw, json)
Hash identifier: xlQes7yDywIRzQA6pQte2baAIL+arI6p1UlRShnQiTc=
Subject key identifier: B3:D5:D9:79:67:E9:13:DA:FC:0E:84:37:1A:A3:8D:8C:63:D4:76:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DB5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6799BDB4DFDE11EF9545BC4F762E951A.roa
Signing time: Fri 31 Jan 2025 14:19:39 +0000
ROA not before: Fri 31 Jan 2025 14:19:35 +0000
ROA not after: Mon 03 Mar 2025 14:19:35 +0000
asID: 133180
IP address blocks: 154.215.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85429 (0x14db5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 14:19:35 2025 GMT
Not After : Mar 3 14:19:35 2025 GMT
Subject: CN=679cdbfa-b2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fd:1b:0e:a9:49:41:b2:93:90:95:58:29:35:
45:4e:a2:82:f7:2c:8b:a5:d7:37:4b:ad:7b:e1:a5:
86:bd:ae:68:15:8c:65:41:01:a8:e4:d2:a9:11:c9:
f7:bc:ec:df:d8:39:b6:de:22:09:3d:cb:97:e1:b4:
f5:b0:cd:94:3b:79:0b:07:41:42:1b:ff:b7:9e:7b:
30:2c:ed:b3:49:f0:48:38:58:b8:a8:e3:49:ce:23:
07:dc:a1:b1:54:5d:e5:43:ab:76:c2:21:b9:ef:cf:
1d:79:3e:03:cc:21:84:06:07:f3:07:a6:c7:74:a2:
f6:14:ad:3e:3d:8e:36:9a:6a:95:81:ce:79:92:c5:
c3:33:30:bf:a8:51:09:bc:82:db:12:a8:7a:2b:b6:
1a:be:4d:fe:5a:7c:81:3e:c4:76:1a:5c:7b:e9:fb:
a2:ec:1b:09:26:c4:0d:3a:e5:0a:c3:9a:3c:bc:ab:
d5:43:8f:59:13:ab:7a:4b:84:77:17:87:73:d4:3a:
51:3f:62:fb:bd:f5:e2:99:e7:fe:53:4c:b6:4e:35:
24:01:74:76:63:29:39:b2:03:54:f5:d5:d4:ff:20:
c3:2f:f1:fb:02:bd:30:72:dc:d5:4e:05:a0:b5:fa:
53:9b:40:89:64:5d:63:a5:bf:d8:00:51:0a:0b:03:
55:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D5:D9:79:67:E9:13:DA:FC:0E:84:37:1A:A3:8D:8C:63:D4:76:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6799BDB4DFDE11EF9545BC4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.64.0/18
Signature Algorithm: sha256WithRSAEncryption
92:66:6c:37:ec:3d:3e:11:4e:53:18:10:62:1f:4b:d0:01:21:
90:16:8b:7a:a5:d1:ea:7f:a6:d1:b1:0b:f9:a9:16:66:fd:73:
3b:c5:47:97:ef:d8:72:96:44:a8:4d:1f:b5:e3:00:10:92:4d:
51:a6:2a:40:df:1e:10:bd:b5:0d:26:4f:49:35:d8:e2:82:a6:
fb:64:74:f1:18:90:52:e5:38:f9:fb:f9:b6:39:89:a0:fc:33:
69:a8:dd:94:5c:f7:3c:11:25:36:09:12:dd:cc:1b:08:37:7f:
51:fb:b5:05:5b:f0:1f:89:b2:6d:3c:81:34:e8:d0:a6:97:74:
c9:27:f9:aa:14:32:e4:78:c7:d0:cf:1f:55:c0:70:ce:a6:f6:
97:03:09:89:67:71:c5:69:4c:16:4a:aa:41:4c:95:63:08:ce:
f0:9c:2b:d3:55:da:7a:bc:73:83:0f:bc:85:57:cf:c6:71:c2:
2b:dc:8a:f6:c0:c6:b9:aa:7c:32:f3:c5:8c:9a:45:a1:23:bc:
a9:ff:3a:eb:5a:f1:bf:9e:78:d3:69:be:d5:fc:f5:36:06:ac:
ba:f1:09:cf:0a:2d:4d:d8:c2:ca:e7:08:c6:e4:23:78:99:85:
ee:4e:e1:98:dd:c1:39:93:19:62:b7:aa:b4:0e:b3:a4:ec:79:
6e:ec:b1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:42:21 2025 by rpki-client