Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DCE7B52DB2411EFAFA43973762E951A.roa
File: 6DCE7B52DB2411EFAFA43973762E951A.roa (raw, json)
Hash identifier: oWxIqlPpzLV/yuL8RlNwF7qdjmh5kvD4r6ykFfno+vs=
Subject key identifier: DD:82:5F:6D:7C:F3:F9:20:96:B4:01:32:98:98:50:0C:C1:AD:0C:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149B2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DCE7B52DB2411EFAFA43973762E951A.roa
Signing time: Sat 25 Jan 2025 13:58:18 +0000
ROA not before: Sat 25 Jan 2025 13:58:14 +0000
ROA not after: Tue 04 Feb 2025 13:58:14 +0000
asID: 212238
IP address blocks: 154.207.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84402 (0x149b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:58:14 2025 GMT
Not After : Feb 4 13:58:14 2025 GMT
Subject: CN=6794edfa-ff1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:27:cb:d9:26:57:e5:da:3f:f5:9d:03:58:
c0:9a:fb:bd:1c:8a:16:a8:f6:12:ad:69:73:b1:84:
bf:12:f5:45:65:e6:28:61:60:63:c3:91:fe:74:91:
d1:de:c5:c8:31:21:5e:67:44:5c:ec:66:4a:fd:36:
92:19:51:0d:42:65:53:0a:69:21:b9:a3:6d:53:a6:
68:52:1e:df:f3:78:72:76:6f:2e:25:f4:7c:0e:a3:
07:e5:8b:43:ad:a3:37:da:33:63:fb:9c:87:65:14:
22:73:dc:99:e3:6f:c2:80:3b:ca:58:02:ba:cb:24:
94:f6:ca:1f:5f:0b:6c:5d:a7:ad:82:8d:4d:34:e0:
b9:c4:09:7d:e5:98:47:75:7e:4c:a9:b3:d5:f2:6c:
f2:39:48:89:53:69:0e:af:d6:ce:2d:9b:e9:d6:71:
51:82:17:88:be:6b:1e:d8:72:03:b1:14:0e:39:08:
e4:c3:30:fe:82:b6:77:e1:5c:3b:e4:34:93:ed:11:
bb:a9:de:38:26:45:4a:fe:61:7d:63:70:08:ab:4a:
3f:35:78:72:91:b3:4d:a9:01:79:ea:0a:a0:26:dd:
b1:a7:e2:d4:16:29:48:4b:fc:6e:eb:63:3a:6e:29:
43:4e:1f:39:51:3f:ff:7b:b2:76:3f:0d:e9:3e:66:
a2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:82:5F:6D:7C:F3:F9:20:96:B4:01:32:98:98:50:0C:C1:AD:0C:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DCE7B52DB2411EFAFA43973762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.144.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:ed:62:b7:65:0c:21:41:b6:29:87:6a:c4:75:0a:e6:d5:cc:
67:09:9c:97:ff:9f:d6:79:ec:1b:01:1f:5b:db:aa:79:41:41:
ea:87:c5:50:8e:1d:87:94:fb:7e:de:44:21:ad:59:02:bd:da:
55:d8:13:59:63:47:12:ae:2c:1c:e4:78:a3:e6:a5:a0:49:a7:
48:6e:99:c4:28:bd:58:04:c3:ee:03:2e:10:cd:79:a4:e9:99:
a5:22:a1:0a:9d:4a:53:aa:c9:69:1b:0b:67:6d:3a:a7:34:15:
d2:6c:1a:48:0b:b3:11:3d:95:cb:63:ae:d2:74:66:97:69:90:
51:b6:8f:00:0a:c4:e6:d4:87:e0:f3:90:fd:1c:f9:a5:f0:65:
dd:75:12:51:03:4d:4c:3a:62:d7:cf:5e:a0:f5:5a:1c:3d:7e:
7b:1d:31:ae:2c:18:66:f8:8d:12:7d:43:c2:04:62:3b:7e:fa:
2c:41:5f:d1:9e:fe:81:d2:f1:85:ee:f3:ce:f1:b0:1a:08:b5:
60:e7:00:64:fb:16:10:aa:f8:b5:89:a2:4f:f6:27:3c:77:29:
e7:1e:fd:c2:92:ae:2b:58:73:1f:21:e2:83:2f:03:a2:72:95:
d8:95:6d:98:25:cb:db:bb:60:55:fa:68:ba:3e:d7:57:a3:3c:
d0:b3:7d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:38:18 2025 by rpki-client