Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FB3C474D8AC11EFBA0B2C48762E951A.roa
File: 6FB3C474D8AC11EFBA0B2C48762E951A.roa (raw, json)
Hash identifier: ogPMP9tBH4lEoFD52rzDRCQja2ROiU7imXTMVdD6Za0=
Subject key identifier: 0C:7A:6E:DE:F2:4C:32:6D:7C:9B:81:47:B0:C3:FF:F7:0D:D4:D2:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FB3C474D8AC11EFBA0B2C48762E951A.roa
Signing time: Wed 22 Jan 2025 10:34:19 +0000
ROA not before: Wed 22 Jan 2025 10:34:15 +0000
ROA not after: Sat 08 Feb 2025 10:34:15 +0000
asID: 150008
IP address blocks: 154.210.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81608 (0x13ec8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 10:34:15 2025 GMT
Not After : Feb 8 10:34:15 2025 GMT
Subject: CN=6790c9ab-6247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:75:17:70:d7:e8:8c:36:e7:5a:8f:98:f8:
47:9d:95:13:e1:6d:c2:f4:09:32:66:bb:77:ae:2e:
f7:74:2c:f2:94:ca:6b:42:58:f1:ec:99:18:d0:e2:
c6:fd:97:8a:ca:36:58:55:74:c6:50:c3:7b:50:e6:
64:07:9f:1a:62:a5:d9:78:35:41:32:06:c4:71:62:
07:28:93:b9:06:30:91:49:d2:99:4f:f5:8f:82:b8:
1f:dc:e3:1d:21:01:a2:3b:76:da:3e:c6:14:54:12:
77:81:74:d4:4a:e3:f2:d8:cd:ea:e3:35:ba:e9:78:
b8:81:09:da:24:7b:d4:b2:2f:91:19:74:0e:fa:60:
df:51:a2:8b:25:52:db:06:be:01:93:75:84:b1:5f:
39:19:5b:47:7b:6d:93:d4:f5:5d:4a:db:48:13:0d:
56:ed:44:a9:61:0c:6a:21:76:52:77:ca:a7:9c:fb:
87:9d:06:68:64:9d:14:66:ec:ba:10:d9:1f:ff:2f:
d3:dd:c9:ed:63:3f:ee:3a:73:d6:7f:05:9d:74:a3:
78:1e:e7:d0:e5:5f:c7:6f:56:6a:d7:6a:33:d3:21:
b4:55:d9:a4:0b:b4:e3:d5:d2:6f:3b:14:f5:1d:a9:
f7:27:a0:fc:63:b3:b7:94:43:c3:db:6f:ef:30:3b:
8a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7A:6E:DE:F2:4C:32:6D:7C:9B:81:47:B0:C3:FF:F7:0D:D4:D2:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FB3C474D8AC11EFBA0B2C48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.233.0/24
Signature Algorithm: sha256WithRSAEncryption
71:35:de:80:24:cc:91:28:7f:05:77:67:71:5f:f0:92:9e:20:
ac:ae:8b:2c:73:b5:d0:51:8b:64:42:98:ed:2a:5a:d2:e7:e6:
db:6f:9e:70:d9:8f:5f:96:d2:d0:12:50:a4:33:00:b8:51:fd:
3c:26:0c:cf:32:81:be:25:1e:6f:23:26:30:f2:12:ae:58:51:
d9:a3:a4:5e:a3:3d:1e:7a:4b:b4:66:3d:de:f8:97:89:7b:91:
5a:31:58:1f:d4:3a:cc:fd:22:53:60:ee:81:47:2a:44:75:41:
f5:1d:78:cc:7c:9f:99:da:ba:76:94:63:7b:c3:28:c5:86:74:
47:b4:e6:9e:65:29:d1:6c:31:aa:77:8a:78:e4:04:25:73:47:
fe:d8:9d:1a:00:ee:82:7b:1c:8c:44:61:b4:b1:ba:4c:06:60:
dd:98:6a:86:06:e2:24:ad:f5:3a:34:d4:50:c4:ea:d2:35:62:
51:8d:f9:48:dc:78:98:fe:3a:5d:65:32:b2:b3:20:ec:fd:38:
34:08:1e:94:6c:6a:48:dd:08:2b:a1:d0:c1:02:4b:e2:c3:fd:
88:4d:e4:d6:fb:82:98:10:95:54:af:69:f7:1a:ba:b1:56:13:
36:24:2b:ca:47:5c:dd:1d:41:62:e4:63:bb:6a:2b:0b:7d:93:
7c:47:81:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:50:05 2025 by rpki-client