Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CE71D7AD57511EF9728FAB8762E951A.roa
File: 6CE71D7AD57511EF9728FAB8762E951A.roa (raw, json)
Hash identifier: znh0ItGAT/vMJHL6Z2+g1gDj55Mo4VUf7OCFnatoKPs=
Subject key identifier: 47:1D:03:AA:C5:6A:98:18:7A:3A:E6:FB:33:A8:AB:B0:57:A7:03:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DC2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CE71D7AD57511EF9728FAB8762E951A.roa
Signing time: Sat 18 Jan 2025 08:22:59 +0000
ROA not before: Sat 18 Jan 2025 08:22:55 +0000
ROA not after: Sat 22 Feb 2025 08:22:55 +0000
asID: 8796
IP address blocks: 154.89.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81346 (0x13dc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 08:22:55 2025 GMT
Not After : Feb 22 08:22:55 2025 GMT
Subject: CN=678b64e3-930c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:b4:fe:9a:c5:86:02:eb:5d:8f:b9:12:7c:
92:eb:5e:11:76:40:b3:5f:23:f7:2d:2c:40:58:eb:
d1:c1:58:4e:4f:18:a5:08:19:43:f2:a6:48:11:39:
a1:c8:28:00:04:66:39:9e:32:4e:78:b2:ab:ac:4c:
6b:3f:67:4d:af:d6:a4:4e:69:55:1e:3b:3c:7c:98:
65:67:dc:c3:98:2d:f9:d8:e2:a7:b5:46:be:95:ec:
be:d1:c0:2b:f4:b6:25:2c:55:84:10:1c:4c:14:7d:
e2:c9:e4:c5:b4:c4:05:e0:c8:06:0f:ad:8b:06:83:
00:0c:13:e8:fe:dd:53:aa:34:76:32:89:2b:91:63:
8d:a8:28:08:a8:c7:09:17:1a:f6:9b:16:fe:11:51:
a9:33:9c:89:a3:df:09:67:d4:1b:6c:1e:81:86:44:
b4:8f:4e:fe:7d:05:b7:38:b7:92:da:e6:c4:7d:fd:
04:6e:1a:86:ae:05:fe:ac:7f:32:31:2c:e1:3e:1c:
54:be:2e:d3:34:fd:5b:cc:eb:5e:5e:87:c4:b8:05:
12:97:6d:53:e9:d1:35:11:1f:9e:d9:4f:d3:5f:b9:
67:38:6b:19:1f:69:27:0a:5f:de:cb:da:d7:67:4e:
2b:7d:19:cb:70:98:62:05:49:47:99:d1:2c:f6:2e:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1D:03:AA:C5:6A:98:18:7A:3A:E6:FB:33:A8:AB:B0:57:A7:03:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CE71D7AD57511EF9728FAB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0/20
Signature Algorithm: sha256WithRSAEncryption
74:83:3a:4b:dc:99:8a:ee:48:77:b4:ee:4f:47:8e:d1:e0:aa:
d8:a0:63:65:7d:f9:c5:66:d6:b4:a6:40:47:c9:56:16:71:99:
f6:ca:5d:f7:b5:fd:85:ef:34:2c:88:cc:e6:55:d8:12:e7:66:
9a:3e:31:07:5d:40:25:41:84:de:20:22:2e:76:b2:10:16:0e:
74:b8:01:e8:f1:5c:d6:39:42:83:8a:9d:7a:d5:dd:05:37:d5:
f8:d1:98:6d:27:8c:ad:74:92:c3:e8:0e:73:72:e1:c2:30:13:
c4:13:25:f0:93:db:28:4b:fc:4f:94:88:9c:3f:96:93:fd:92:
a4:c9:bd:b9:97:22:f1:91:38:2b:32:7c:f5:c8:1a:06:d3:f9:
13:2b:0f:c4:b3:06:7e:f2:ad:b4:3a:92:c1:a2:bb:de:a7:24:
68:cc:e6:0e:4f:6f:e8:b4:7a:86:7c:0a:50:38:10:b7:f6:75:
3f:a3:d1:fd:cf:90:26:e3:a3:27:11:2d:2f:11:05:0f:51:3b:
69:24:86:3d:f8:6b:9d:d8:0d:86:6b:b0:a7:c4:be:36:b2:90:
14:83:c7:82:b2:6b:fa:aa:d9:43:92:53:96:ef:a5:2c:1e:af:
ee:85:26:a8:51:11:7b:2f:cd:8e:ad:5a:58:18:51:bf:ec:2c:
f1:51:33:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:10:26 2025 by rpki-client