Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/714AE184DA6211EF812B5D51762E951A.roa
File: 714AE184DA6211EF812B5D51762E951A.roa (raw, json)
Hash identifier: QXC+Jpvn6EYPgv4/7oTQAvVVb/BIEA1P/H19AFidI6M=
Subject key identifier: E5:DA:2D:5D:14:B2:94:76:94:57:D4:68:79:A4:8A:37:70:4E:DD:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01486B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/714AE184DA6211EF812B5D51762E951A.roa
Signing time: Fri 24 Jan 2025 14:49:41 +0000
ROA not before: Fri 24 Jan 2025 14:49:38 +0000
ROA not after: Sat 01 Mar 2025 14:49:38 +0000
asID: 44559
IP address blocks: 154.203.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84075 (0x1486b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:49:38 2025 GMT
Not After : Mar 1 14:49:38 2025 GMT
Subject: CN=6793a885-f5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:fb:c4:e9:0e:11:3c:10:52:aa:9b:92:55:
6a:b1:35:8f:05:0d:e9:d4:72:13:ce:77:74:56:0d:
fa:14:ad:be:cf:94:32:f2:3f:78:c0:c1:b6:1c:78:
82:f4:0a:86:6a:49:14:39:f7:7c:2e:20:3d:3e:e7:
3a:b2:68:93:fc:0c:3f:3a:8c:8c:96:0d:69:b5:99:
96:9e:64:9f:55:3d:1e:bd:6d:59:fa:a1:92:6c:40:
fc:70:1a:f2:17:e3:d4:a2:c9:a5:70:d3:8c:c3:f6:
3b:b9:79:e2:91:86:2e:8d:8d:1e:b5:0c:a0:84:ba:
b8:b7:0a:b1:e9:26:d6:f0:ea:d0:67:db:84:db:8c:
1b:26:a3:41:74:98:92:d2:d3:52:1f:38:6a:9b:c3:
65:e8:51:85:bf:bc:75:fa:3d:03:e0:99:1c:a6:8b:
34:30:bc:dd:d3:9e:94:89:ef:2f:19:58:57:d4:76:
13:20:db:96:cd:73:51:86:84:50:23:57:13:a4:43:
b5:b3:25:76:c0:ef:47:67:6e:c4:af:85:1d:91:fe:
2e:33:b4:5b:d6:32:29:13:d5:73:71:8b:0e:5f:74:
eb:ef:c8:e2:7e:54:56:0d:92:05:1d:61:18:ba:1f:
94:8d:da:98:cc:d9:dd:fc:a4:8c:63:7b:55:c7:62:
e7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DA:2D:5D:14:B2:94:76:94:57:D4:68:79:A4:8A:37:70:4E:DD:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/714AE184DA6211EF812B5D51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.217.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:77:e4:34:15:a2:d8:e0:e5:cd:95:bc:17:42:7f:15:5a:0d:
be:b6:a9:da:e7:46:23:7f:d4:a4:e1:07:67:03:9e:07:06:8a:
49:68:ca:b1:cf:b9:2d:b0:30:3d:5a:ee:13:96:97:ef:3f:2e:
6e:d2:0f:44:42:0b:71:54:f9:51:be:b0:c5:a3:00:38:aa:ce:
d1:a3:4a:0b:09:d7:0b:df:b5:a4:cc:c4:33:c6:83:93:bd:68:
b5:c4:11:61:73:ed:bf:c8:b8:0a:4d:9f:72:ac:03:3b:21:d4:
51:e6:55:81:e0:15:4e:49:95:a7:28:8b:06:69:95:28:46:2e:
c2:68:3b:00:60:c8:fa:bf:69:ce:c4:e1:9b:a5:65:99:66:ef:
f9:6e:3d:00:fd:f9:e1:dd:31:9d:80:8b:43:c9:1d:a8:17:7a:
64:fc:2f:9d:f3:7c:3f:e2:6d:18:8e:63:4d:0d:f1:fc:9a:25:
d6:e6:13:a2:a8:57:dd:83:5e:5e:c9:d2:c3:71:b3:06:5c:26:
c5:a6:c7:ed:15:08:27:48:8f:61:2e:2c:2b:ec:6e:b7:b8:56:
9a:47:23:9a:65:d5:6c:1f:eb:5e:65:5b:9f:58:e2:09:55:30:
69:87:5b:4a:9c:e6:c6:43:40:2d:e3:9c:42:aa:25:50:b9:f7:
69:51:70:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:05:06 2025 by rpki-client