Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D332766CBE211EF959B5C97762E951A.roa
File: 6D332766CBE211EF959B5C97762E951A.roa (raw, json)
Hash identifier: djB8I76kpC8onxskD/zo5llOi0BVQu6DHqM9oyiNXmc=
Subject key identifier: 11:88:B8:7A:80:93:9E:89:28:89:01:AA:BC:CF:54:0B:2F:8B:C1:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01356F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D332766CBE211EF959B5C97762E951A.roa
Signing time: Mon 06 Jan 2025 03:58:03 +0000
ROA not before: Mon 06 Jan 2025 03:57:59 +0000
ROA not after: Sun 09 Feb 2025 03:57:59 +0000
asID: 203020
IP address blocks: 154.217.232.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79215 (0x1356f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 03:57:59 2025 GMT
Not After : Feb 9 03:57:59 2025 GMT
Subject: CN=677b54cb-385f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:38:e0:0e:e4:27:68:23:5c:92:14:d2:86:
0c:ce:50:6a:6e:1f:51:23:8f:b4:52:ac:e0:5a:3e:
e0:c4:21:17:70:89:50:ce:cc:6b:d8:3f:8d:6d:d0:
84:62:b5:02:2a:73:14:aa:7f:61:20:00:b6:7a:7b:
71:cb:e0:e0:1f:e9:5b:ef:05:d0:56:21:15:48:65:
4a:5d:7f:1e:bf:7d:4d:c1:37:02:e8:7d:02:07:32:
df:b2:b6:23:59:92:ae:f2:e8:ee:8e:f1:2a:c7:58:
0a:7d:bf:c9:6b:68:16:57:7b:c1:7c:f5:90:e8:c8:
47:73:36:26:69:66:f8:c4:16:a9:2d:3f:35:12:57:
25:c1:b6:96:87:44:71:37:d1:ff:65:9a:d1:0c:d6:
bb:b0:e2:d2:3d:c3:11:e3:4f:a6:30:44:77:ff:e2:
b6:97:ce:ac:bf:ff:de:16:08:d0:50:e2:8a:73:7b:
54:8e:27:a7:7e:ed:34:57:90:25:76:04:ea:35:fb:
77:ab:bc:78:6e:ce:68:de:41:0f:7c:26:01:c4:43:
4b:26:60:14:84:c0:74:3d:99:95:a1:07:62:35:b4:
73:db:da:29:98:26:31:fa:8f:51:2f:cf:94:1e:90:
78:17:e2:99:80:e5:56:ca:2a:35:04:29:c9:ba:f3:
ea:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:88:B8:7A:80:93:9E:89:28:89:01:AA:BC:CF:54:0B:2F:8B:C1:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D332766CBE211EF959B5C97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.232.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:3a:b9:99:0d:51:c2:ac:03:ec:b3:04:c0:2f:e5:a0:8b:56:
f9:d1:9d:b3:34:8d:5e:fa:0a:d6:c7:0d:76:82:7a:35:32:5b:
c1:19:ff:01:af:4e:99:66:70:d0:52:40:91:4e:94:af:c3:d9:
4b:cc:55:03:ac:41:af:7b:e0:fe:bc:ba:b4:37:2f:5c:fd:63:
f9:d4:b1:d4:16:ab:ce:f9:cd:5f:65:72:dc:14:07:0c:f9:f0:
09:2f:f0:a2:01:58:ac:d5:36:fd:b8:72:5b:d5:2b:18:f0:e0:
ec:a3:c3:30:32:1d:32:15:dc:62:ba:9b:de:ac:4d:d3:80:6c:
5c:e1:45:c1:f5:88:50:fb:13:28:3e:af:58:52:a0:4b:1b:93:
60:ad:80:57:28:f8:42:90:09:7e:06:fa:9e:b4:88:3b:2e:05:
88:aa:69:39:e8:f1:dc:d8:0c:97:98:d1:7d:b4:97:3d:6d:c0:
6d:99:f6:0a:34:17:da:60:c8:57:fa:3f:be:0b:cb:98:92:4a:
1d:07:f1:12:92:14:40:48:73:f9:9a:fc:9f:2d:d5:e0:07:66:
5f:88:7e:61:2a:c3:57:fd:c7:a6:8f:29:76:18:35:1c:0d:0a:
ea:74:cf:68:aa:8a:ef:06:1e:f2:3c:43:86:93:b3:b8:46:dc:
4a:eb:11:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:52:40 2025 by rpki-client