Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D99DBF2D8BF11EFA05AD346762E951A.roa
File: 6D99DBF2D8BF11EFA05AD346762E951A.roa (raw, json)
Hash identifier: LVPHSE+cxfborVjFtQq+05s96jqFoX+0LnzjQsHo/EQ=
Subject key identifier: F4:0C:76:4E:D2:95:2E:2E:1F:F5:B6:F2:98:72:B3:50:5D:7E:C7:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D99DBF2D8BF11EFA05AD346762E951A.roa
Signing time: Wed 22 Jan 2025 12:50:16 +0000
ROA not before: Wed 22 Jan 2025 12:50:12 +0000
ROA not after: Sat 08 Feb 2025 12:50:12 +0000
asID: 18229
IP address blocks: 154.210.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81756 (0x13f5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 12:50:12 2025 GMT
Not After : Feb 8 12:50:12 2025 GMT
Subject: CN=6790e988-aaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:3c:6f:b0:da:82:8d:be:ea:41:61:80:2a:
e5:96:36:ad:b4:64:f6:f8:e0:2b:2f:75:f4:26:da:
e5:df:19:ed:32:a8:6a:98:dd:11:97:18:86:38:27:
b9:ec:f4:b4:27:a8:80:b4:49:67:d4:6a:60:a1:da:
1a:0f:55:0f:93:15:30:41:1a:c7:29:92:88:eb:a2:
f4:35:7a:2f:ec:3c:54:0a:48:1f:24:2e:9a:a7:d6:
03:8b:e6:59:20:96:c4:5d:0d:5c:eb:eb:c4:a6:b9:
84:1f:25:02:fb:88:08:ec:f2:35:88:64:27:fb:6f:
51:16:9b:12:97:38:b5:6d:cb:d2:1c:b9:71:94:7d:
9d:61:31:0c:18:aa:d4:bc:f7:f4:00:ac:ad:75:47:
a6:25:de:33:ad:7a:d4:4e:31:95:40:a3:8b:31:f5:
f7:7a:7c:a3:1e:0d:25:3f:4a:d7:a8:5f:d7:78:0b:
ee:80:5a:c1:97:95:a3:60:64:e1:c4:b7:4c:58:38:
de:33:17:0d:44:ce:7f:50:0a:e7:26:1a:31:83:ac:
13:98:ba:6c:55:2a:8c:4b:e4:cc:67:30:6c:31:ee:
3a:a5:f1:1a:cd:cf:c5:d4:76:41:e8:e6:e1:5a:65:
df:e4:27:fc:15:ef:01:ce:71:35:29:83:da:0c:a2:
93:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0C:76:4E:D2:95:2E:2E:1F:F5:B6:F2:98:72:B3:50:5D:7E:C7:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D99DBF2D8BF11EFA05AD346762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.145.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:d8:4e:3b:94:80:3a:a7:cf:35:8c:9b:22:ff:f8:52:03:1a:
e0:2f:59:f3:f3:4a:ab:a4:20:eb:ff:5c:d3:17:19:5c:09:75:
f0:9f:12:0e:40:3e:e4:dd:b8:62:11:c9:98:21:93:e2:b5:62:
4e:16:be:42:ed:73:e5:f8:80:b1:77:0b:79:70:d7:f8:6b:97:
cc:c9:b6:40:c1:9a:16:8c:53:c9:17:05:0a:cd:74:33:a1:96:
20:0f:bc:cd:65:6c:c4:ad:65:9c:ee:8b:ce:63:aa:2e:85:cb:
bc:cd:47:65:66:6e:38:b1:d4:f5:b8:63:20:b8:a3:89:66:c0:
62:3a:b1:de:2e:bb:d0:53:e0:6b:e7:45:a7:04:78:d5:24:c4:
43:d5:41:54:89:36:17:91:cd:fb:2c:d7:ea:49:c6:46:6f:6c:
ae:8b:05:35:58:8a:52:3a:06:cb:9f:0b:99:1b:d9:8a:72:34:
a6:ca:9b:1e:28:92:d6:c1:00:aa:d1:3c:bb:a3:8c:0d:ca:71:
73:21:00:c7:91:d3:d3:bb:2f:b0:38:b1:68:4c:6c:21:a5:af:
8d:41:a7:d9:74:a3:f5:89:e9:40:d7:1c:eb:e7:16:0e:31:fa:
46:67:1b:91:fe:ae:fc:9a:71:c4:da:c9:ad:4e:2a:69:f4:18:
d7:f2:33:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:43 2025 by rpki-client