Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C8A1176DB3211EF88436150762E951A.roa
File: 6C8A1176DB3211EF88436150762E951A.roa (raw, json)
Hash identifier: kX/WaR+c9I17kKj/1NXeikeVwNiMbUIWGxUxEkbWXD0=
Subject key identifier: E8:EA:75:D0:5B:50:50:79:EC:BD:D8:BB:51:8B:F7:3C:DD:A2:5A:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A08
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C8A1176DB3211EF88436150762E951A.roa
Signing time: Sat 25 Jan 2025 15:38:29 +0000
ROA not before: Sat 25 Jan 2025 15:38:25 +0000
ROA not after: Fri 07 Mar 2025 15:38:25 +0000
asID: 138915
IP address blocks: 154.223.34.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84488 (0x14a08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 15:38:25 2025 GMT
Not After : Mar 7 15:38:25 2025 GMT
Subject: CN=67950575-a419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:cf:96:2d:e7:83:6a:49:80:c0:29:58:99:
26:23:b9:43:12:5a:99:c6:37:00:64:4d:36:41:de:
d9:d0:91:25:4d:38:01:a6:d8:dc:60:6e:1b:81:27:
9f:d9:f5:83:1a:5d:db:bc:a9:99:10:56:e5:6d:4e:
59:4b:59:dc:5a:49:49:65:1f:87:1b:55:41:fc:d0:
ff:c2:37:5f:46:4d:ce:56:5a:ce:db:b4:21:09:1b:
5e:c9:6e:80:3f:bb:80:b3:5f:be:9f:6b:c6:75:04:
99:b2:88:4e:59:e3:5a:6d:62:d1:4e:92:b9:e1:ea:
35:82:73:ea:21:e1:4c:95:00:4a:01:ef:6a:59:f0:
39:76:2f:57:c0:13:2c:17:6f:e6:af:57:05:b4:a1:
a6:d6:b9:b6:9c:90:86:37:6c:32:f5:b1:0c:89:3e:
b2:f5:27:67:c9:49:6a:c9:ed:20:1c:12:b7:0b:c4:
5c:8d:12:a0:af:27:80:76:e3:55:25:27:bf:0e:40:
cd:93:4c:e0:c4:1b:8e:d6:fa:5e:9b:7d:b8:41:87:
ef:20:22:77:a6:95:52:83:00:00:d2:41:d2:de:9c:
a6:00:d8:f3:4b:73:e5:15:76:39:64:0c:80:a2:da:
63:a2:d5:a9:24:4b:22:50:c8:19:94:04:e7:6d:f7:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EA:75:D0:5B:50:50:79:EC:BD:D8:BB:51:8B:F7:3C:DD:A2:5A:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C8A1176DB3211EF88436150762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.34.0/23
Signature Algorithm: sha256WithRSAEncryption
72:2c:af:7c:4d:14:d2:23:f7:ee:8a:ac:cb:72:6b:f5:05:52:
41:ac:c2:11:ca:c9:2b:98:1b:d3:bc:ad:1a:0b:23:df:66:8e:
b1:69:08:35:da:1d:5d:30:8b:7c:20:41:2e:f3:6e:3e:dd:99:
5d:f8:26:47:f1:3f:a3:3e:7b:5a:c9:f2:65:8a:1e:90:94:bc:
de:27:9f:e6:3d:14:ab:02:cd:23:85:e8:3c:8f:b5:0f:de:03:
58:28:8a:21:67:5a:ba:84:66:80:85:b5:d4:c8:75:4b:4d:17:
01:ce:d4:2a:ab:9d:35:66:c6:1f:f2:62:f6:00:d2:e8:0b:d9:
17:37:7d:42:e3:31:87:66:24:5f:5f:43:82:57:66:00:21:1f:
b5:17:09:0a:cb:61:7e:ff:c8:9d:77:dd:a4:8e:74:a6:76:a7:
87:48:fe:87:fa:a0:67:1b:9c:6d:32:fa:4d:83:5c:c9:93:2c:
6e:92:90:43:63:8a:7c:f9:d6:5c:43:8a:2d:17:88:a4:98:7b:
e8:f2:94:1c:0d:a9:2f:53:18:88:4a:42:41:f6:58:88:17:bd:
60:b5:b1:ed:b4:66:b5:83:0e:13:f9:cc:82:3c:e9:96:f1:65:
8f:41:c3:de:db:d5:80:90:a5:ce:b3:f9:57:bd:40:4b:f9:ff:
ff:34:01:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:16:16 2025 by rpki-client