Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6919CB70B5FE11EF927A28A5762E951A.roa
File: 6919CB70B5FE11EF927A28A5762E951A.roa (raw, json)
Hash identifier: UZc0pee124UEnO3utm+/4hLZzmPnCuocCui4vPQS9Mk=
Subject key identifier: 1C:28:EC:71:1C:E1:D1:20:EE:1B:6E:85:3D:B3:3D:B1:62:20:0D:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0119C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6919CB70B5FE11EF927A28A5762E951A.roa
Signing time: Mon 09 Dec 2024 07:22:56 +0000
ROA not before: Mon 09 Dec 2024 07:22:52 +0000
ROA not after: Thu 06 Feb 2025 07:22:52 +0000
asID: 137443
IP address blocks: 154.223.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72131 (0x119c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 9 07:22:52 2024 GMT
Not After : Feb 6 07:22:52 2025 GMT
Subject: CN=67569ad0-6b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:8d:33:48:03:a5:6f:70:42:ca:dd:bc:2b:
69:3d:42:b4:63:bf:fe:99:f8:8b:a2:91:ab:a4:fb:
83:1d:a5:7a:fc:a6:47:fd:f6:40:d8:22:cd:7d:c3:
0b:e9:4d:2f:7f:77:0e:42:ee:b8:34:7f:46:7f:ee:
03:ef:b8:3c:27:bd:6f:08:1c:d3:db:44:22:ee:07:
ca:13:e9:88:b7:fa:f0:f4:f3:af:b3:e6:81:cf:2f:
5d:6a:b8:6b:0b:9d:97:a5:ce:a1:0d:a9:2d:d6:74:
3a:a7:2d:37:bf:22:8e:1f:40:af:92:04:b2:3b:ec:
10:c6:d8:6c:52:55:f9:98:fb:d9:76:72:20:e7:9b:
eb:f6:bc:32:a7:af:e9:e8:30:01:bc:5a:5c:ca:e1:
24:2f:5e:95:e8:52:f4:a1:12:50:3d:31:17:41:03:
68:66:a8:9c:45:07:d4:0f:56:32:08:39:9b:89:4e:
1e:5b:dd:59:f0:4c:e7:27:02:dd:a8:0c:fc:05:30:
7f:be:83:b7:16:c2:5a:fe:67:81:a7:97:ee:f2:fc:
29:e5:3c:bf:de:77:a7:62:36:a6:c6:f5:d1:cf:58:
47:b0:77:a4:77:8f:42:ba:55:f7:06:2e:4c:e0:f1:
f1:f3:f0:a5:85:84:96:67:ed:ef:65:d2:9b:26:84:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:28:EC:71:1C:E1:D1:20:EE:1B:6E:85:3D:B3:3D:B1:62:20:0D:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6919CB70B5FE11EF927A28A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:1d:01:b9:64:54:74:ad:e6:81:e4:e3:a7:74:22:f6:6a:b8:
d6:02:8f:7e:20:76:99:75:8b:0e:24:42:29:ad:79:79:95:f1:
4f:42:64:8b:59:cf:5c:08:35:fb:44:9f:7d:8b:32:7f:be:af:
f1:9f:24:df:a1:8c:83:dc:3e:30:b1:65:86:bc:bc:5e:ea:de:
17:2a:f4:4a:de:af:50:90:22:e7:6d:5f:32:8a:7b:65:59:6f:
f1:73:16:ad:62:61:f9:05:24:51:50:ef:92:55:3a:5c:01:13:
4d:e5:b4:ed:c8:cb:ca:98:e5:3c:33:f3:7d:80:e3:dc:38:2a:
25:0e:03:f3:26:04:27:26:de:ba:5a:67:7e:dd:3e:cb:2a:45:
2f:c1:82:8f:7f:b7:1d:15:23:71:f4:e6:79:20:e7:e6:81:e0:
13:9b:06:22:68:57:c5:1d:26:68:16:31:c8:57:f6:62:d1:78:
b5:38:7a:09:7b:c6:4f:11:9a:c2:17:72:ee:d6:bd:e3:37:70:
2a:53:a5:cc:75:33:77:16:22:ee:1c:1a:7b:8e:86:35:26:4a:
c6:34:10:6d:b3:c4:70:22:d3:68:61:3e:0c:25:dc:da:ae:2b:
7f:01:d3:98:82:0f:f6:7e:27:3b:8e:c4:a5:1b:7b:f2:15:f9:
c3:7f:44:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:02:17 2025 by rpki-client