Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70525068CCCB11EFA604C75D762E951A.roa
File: 70525068CCCB11EFA604C75D762E951A.roa (raw, json)
Hash identifier: iC6A0hpatjNcaV0Xwo7yBXqzacNfeY53dBoBHCgIGuQ=
Subject key identifier: 49:D4:A3:73:EA:5D:8D:FC:A5:35:C7:76:6F:52:41:B2:01:D3:E3:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013661
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70525068CCCB11EFA604C75D762E951A.roa
Signing time: Tue 07 Jan 2025 07:46:01 +0000
ROA not before: Tue 07 Jan 2025 07:45:57 +0000
ROA not after: Thu 13 Feb 2025 07:45:57 +0000
asID: 203020
IP address blocks: 154.207.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79457 (0x13661)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 07:45:57 2025 GMT
Not After : Feb 13 07:45:57 2025 GMT
Subject: CN=677cdbb9-ba34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f4:20:fa:52:f1:3d:6c:db:33:8d:46:b3:ee:
42:7e:d3:ad:f6:21:84:05:d3:a7:d1:28:3a:88:18:
39:d5:a8:f4:11:67:c8:f1:9d:5f:5d:0c:ff:31:8d:
8c:b6:12:77:ae:a9:66:aa:af:4e:c3:1c:d7:b9:af:
4d:fc:45:7f:29:e0:c3:10:50:48:ca:29:73:c0:3b:
e7:df:12:8e:7b:11:75:da:69:0e:ba:3c:14:47:12:
99:40:27:bd:91:1c:08:8a:f0:06:c1:f1:a1:e3:d7:
b2:cd:26:7e:8c:6f:6f:b3:b0:19:a1:6d:35:80:a8:
cd:c5:03:88:52:16:fa:ee:fc:1e:50:4e:a4:5c:c3:
3c:5c:59:10:09:bd:03:ea:d4:c8:1a:43:1b:c0:e9:
fc:0f:f7:e5:af:36:c8:07:49:ad:5f:41:d5:06:a2:
8b:06:fb:c8:ee:f6:76:3b:00:47:f7:ac:84:4f:01:
3a:de:68:5b:0e:d0:36:5f:f3:ee:0f:21:f1:00:e4:
83:6c:a8:48:23:da:3d:0b:c8:13:dd:7d:a5:14:da:
f1:02:ef:56:8a:b1:1c:2e:83:57:9f:77:c8:fa:0f:
26:40:45:a4:54:4f:bb:67:a0:26:cd:1c:34:b7:17:
67:76:a1:fd:05:7c:68:9d:d6:4c:32:57:05:75:a4:
de:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D4:A3:73:EA:5D:8D:FC:A5:35:C7:76:6F:52:41:B2:01:D3:E3:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70525068CCCB11EFA604C75D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.54.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:6b:12:35:44:83:31:3b:af:71:03:e6:41:30:1d:e1:18:d6:
42:38:8e:6d:e7:e2:61:41:20:08:2d:1e:a2:96:02:e5:6d:8e:
b1:e5:8e:2f:e3:36:02:a7:99:b8:56:3d:2a:99:22:e5:87:7e:
80:8e:79:3c:bb:c7:c4:6a:a5:75:36:f7:61:a0:78:d7:3f:fd:
d3:04:c4:10:8d:02:40:8a:19:6a:23:e3:a1:45:d8:70:4e:1a:
ed:44:ef:f9:6e:0f:03:fb:cd:56:0f:12:57:60:3d:86:3a:9d:
2b:e3:d7:89:ba:d2:05:d6:fc:f8:77:e3:b6:b7:cc:21:cb:25:
2c:ae:8e:8f:fb:88:18:e6:20:fd:0b:fd:48:d5:6f:ac:a5:b8:
9d:9f:3f:56:cc:7b:15:65:25:ef:5c:70:ea:ca:a1:20:2f:5c:
14:f2:a7:80:31:f6:c1:cc:95:77:40:31:fc:47:be:da:db:f2:
ed:16:b5:e7:3f:d3:89:b5:75:5b:7a:a9:95:6a:96:8a:f6:7f:
d9:fc:2b:ae:56:c3:5b:e4:c7:f8:56:85:35:54:4f:27:66:c3:
f2:00:2f:97:60:b7:83:e9:60:f1:bb:65:f2:a4:d9:f1:f3:e6:
d7:3d:3a:ff:61:b8:0c:94:7e:6f:11:e1:56:6f:af:b6:22:06:
73:df:2c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:43 2025 by rpki-client