Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EDFE8DEDC9911EFBD03A046762E951A.roa
File: 6EDFE8DEDC9911EFBD03A046762E951A.roa (raw, json)
Hash identifier: 8HSjSREo/02rYguJQMcrFIv1HNhAvCv7uPjknLc1rro=
Subject key identifier: 51:4E:63:12:D7:C5:1B:3D:34:33:86:C8:83:76:6B:C5:21:C5:6D:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BA5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EDFE8DEDC9911EFBD03A046762E951A.roa
Signing time: Mon 27 Jan 2025 10:28:22 +0000
ROA not before: Mon 27 Jan 2025 10:28:18 +0000
ROA not after: Sat 08 Feb 2025 10:28:18 +0000
asID: 7018
IP address blocks: 154.83.214.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84901 (0x14ba5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 10:28:18 2025 GMT
Not After : Feb 8 10:28:18 2025 GMT
Subject: CN=67975fc6-dc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:da:0d:f6:cf:b8:a8:d5:a2:da:62:01:95:
f1:bc:53:0e:d7:9b:1b:53:6e:9e:9e:b5:29:da:79:
1a:b6:6f:2c:ba:05:70:03:2b:59:a5:d3:3c:56:29:
db:75:57:4d:4b:43:c4:3e:53:59:85:f3:ec:54:71:
5f:44:ff:91:55:2a:ff:2b:17:58:1c:cf:9d:83:7c:
61:3c:86:a7:3c:79:f5:7f:73:20:40:65:98:80:97:
d7:7e:5f:ec:48:51:0d:43:4e:0a:99:c6:07:0a:cc:
8b:4c:b2:c7:55:0a:85:36:09:4a:1d:fc:d8:1e:06:
34:c5:ae:3a:7e:49:96:0d:85:c7:76:49:b9:b9:cd:
90:cc:b1:56:88:34:b9:62:b4:27:bc:c1:a5:d5:1a:
4e:78:cb:92:f4:a2:43:df:ce:c1:b2:0a:72:35:08:
24:0a:6d:bb:6a:31:32:b0:3e:39:3a:62:74:70:61:
ea:a0:6b:7d:1a:69:84:b0:1f:9f:58:15:ac:48:3f:
5c:d9:22:a2:0b:68:3d:99:90:a5:77:ac:2b:e3:14:
61:23:28:5f:64:59:da:9e:c6:e9:4f:29:18:fe:c5:
72:7c:27:b2:da:59:27:38:7e:94:1d:84:94:85:44:
d4:b8:90:f4:4e:5f:63:57:b1:b0:76:15:56:74:45:
ff:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4E:63:12:D7:C5:1B:3D:34:33:86:C8:83:76:6B:C5:21:C5:6D:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EDFE8DEDC9911EFBD03A046762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.214.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:2f:a2:2f:e5:85:25:88:96:6a:ce:ee:dd:7e:15:fd:1b:3d:
0d:56:63:85:97:f5:d4:bd:4f:be:de:7d:c5:65:21:d5:4d:17:
fe:67:a5:ca:69:73:d8:6f:51:54:ee:c1:b9:d3:26:cb:f6:0c:
da:1d:26:a4:34:29:f3:af:7c:cf:6d:c1:97:f4:f1:8c:e5:bc:
f1:7d:e8:83:46:2a:cf:e8:c7:d3:a3:b2:e1:eb:56:0b:f3:c1:
5c:6c:71:36:44:98:ae:74:53:7f:55:46:88:70:d4:29:47:70:
7b:41:d0:e2:e3:2c:38:ce:88:06:c5:6e:0d:37:b5:61:6b:e4:
b4:29:2a:9e:23:88:ca:bb:ca:ef:c5:b4:7a:96:15:2d:74:14:
85:93:21:14:11:82:d9:c0:0c:e6:b3:06:f9:65:d0:a5:1d:4c:
39:ff:e4:cf:2b:28:7c:da:30:de:34:9f:d3:05:2f:1d:92:3c:
38:05:49:8a:30:6a:14:51:14:31:b3:17:2e:a2:6a:b5:1a:b7:
98:04:fb:c1:dc:bf:e5:07:7f:ba:8f:4b:45:52:b5:50:62:bc:
4b:62:13:c5:0c:71:ef:14:81:ab:66:b1:f8:c1:dc:d1:51:ea:
e1:40:2e:b1:4b:fa:7b:fb:a6:03:02:79:7d:a5:d5:8f:75:b2:
01:72:55:bd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAUulMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMTI3MTAyODE4WhcNMjUwMjA4MTAyODE4WjAYMRYw
FAYDVQQDEw02Nzk3NWZjNi1kYzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy2raDfbPuKjVotpiAZXxvFMO15sbU26enrUp2nkatm8sugVwAytZpdM8
VinbdVdNS0PEPlNZhfPsVHFfRP+RVSr/KxdYHM+dg3xhPIanPHn1f3MgQGWYgJfX
fl/sSFENQ04KmcYHCsyLTLLHVQqFNglKHfzYHgY0xa46fkmWDYXHdkm5uc2QzLFW
iDS5YrQnvMGl1RpOeMuS9KJD387BsgpyNQgkCm27ajEysD45OmJ0cGHqoGt9GmmE
sB+fWBWsSD9c2SKiC2g9mZCld6wr4xRhIyhfZFnansbpTykY/sVyfCey2lknOH6U
HYSUhUTUuJD0Tl9jV7GwdhVWdEX/awIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFFO
YxLXxRs9NDOGyIN2a8UhxW3CMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82RURGRThERURDOTkxMUVGQkQwM0EwNDY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlPWMA0GCSqGSIb3DQEB
CwUAA4IBAQCuL6Iv5YUliJZqzu7dfhX9Gz0NVmOFl/XUvU++3n3FZSHVTRf+Z6XK
aXPYb1FU7sG50ybL9gzaHSakNCnzr3zPbcGX9PGM5bzxfeiDRirP6MfTo7Lh61YL
88FcbHE2RJiudFN/VUaIcNQpR3B7QdDi4yw4zogGxW4NN7Vha+S0KSqeI4jKu8rv
xbR6lhUtdBSFkyEUEYLZwAzmswb5ZdClHUw5/+TPKyh82jDeNJ/TBS8dkjw4BUmK
MGoUURQxsxcuomq1GreYBPvB3L/lB3+6j0tFUrVQYrxLYhPFDHHvFIGrZrH4wdzR
UerhQC6xS/p7+6YDAnl9pdWPdbIBclW9
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:07:48 2025 by rpki-client