Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71A842E8D0BC11EFBBC62D66762E951A.roa
File: 71A842E8D0BC11EFBBC62D66762E951A.roa (raw, json)
Hash identifier: DyG2ZKxZlRI1ahUjbVOqz0bNhTX8wKzM6miE7ytu+Ik=
Subject key identifier: EB:4E:CF:D2:9B:E9:0F:3F:CE:8B:5B:B6:8D:63:EB:30:15:F3:8B:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013AB2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71A842E8D0BC11EFBBC62D66762E951A.roa
Signing time: Sun 12 Jan 2025 08:08:45 +0000
ROA not before: Sun 12 Jan 2025 08:08:41 +0000
ROA not after: Fri 14 Feb 2025 08:08:41 +0000
asID: 142032
IP address blocks: 154.222.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80562 (0x13ab2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 08:08:41 2025 GMT
Not After : Feb 14 08:08:41 2025 GMT
Subject: CN=6783788d-2dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:b9:e3:cc:c1:ee:8b:bc:0a:02:10:c7:d1:
64:0a:d6:22:75:c2:5b:71:eb:0b:38:3f:97:81:ff:
a2:c7:89:57:f7:65:b7:bf:6b:68:0f:de:ba:c4:08:
7d:35:7e:fc:40:0d:3f:67:5d:c6:9a:34:3d:38:b6:
e2:f0:6b:57:d2:3a:18:7e:44:1b:39:7f:57:8b:c4:
04:46:ea:12:ab:ac:96:b7:cc:68:51:83:df:34:07:
3a:04:3e:5d:eb:52:49:b8:29:4d:13:78:61:fa:b1:
06:c3:33:58:31:c9:71:d9:68:e3:84:fc:39:b6:16:
18:6a:4b:7d:3b:ed:33:4f:e2:ee:de:80:42:0b:6e:
74:af:f1:fe:6c:22:f7:26:7b:63:35:d8:76:62:49:
90:44:6c:a9:4a:73:ea:14:fb:95:16:1f:31:44:ad:
54:8a:c9:30:2f:e3:e9:5b:d7:59:3f:59:ab:de:e5:
cc:0a:82:f7:9b:e0:25:c2:e3:a0:2e:77:37:3e:dd:
2f:1b:91:a0:1a:ec:ac:36:d5:5e:f9:5e:eb:2e:c9:
7a:23:59:b6:d5:9f:2e:f9:3f:3b:84:9e:13:77:7a:
bf:c6:67:ef:eb:c4:24:e0:b8:f0:88:7e:c3:89:d8:
75:41:3f:53:76:fc:04:e2:a4:ba:df:b8:7f:52:34:
f9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4E:CF:D2:9B:E9:0F:3F:CE:8B:5B:B6:8D:63:EB:30:15:F3:8B:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71A842E8D0BC11EFBBC62D66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:ea:e9:c7:2f:2a:dd:ef:c8:4b:1d:ad:59:d9:6a:aa:65:c3:
b8:25:65:d9:74:39:44:9f:78:35:bc:3d:f9:4f:55:92:c6:d8:
ee:9d:57:2b:99:19:de:4d:f4:05:b7:03:98:a7:6a:4a:da:06:
d8:ee:b2:4b:62:8b:58:2c:23:17:85:4a:63:aa:b6:7a:bc:05:
e1:dd:f2:3f:3d:92:60:29:0c:a7:f2:5a:f0:ea:6a:73:33:f1:
86:dc:41:04:2d:64:72:3f:28:de:0d:d3:a7:06:33:e8:ac:4e:
78:3e:df:de:38:0e:73:3e:bb:2d:d1:57:f9:c0:87:31:b8:f1:
e3:e0:66:50:9d:47:dc:97:86:c0:1a:b9:b2:c2:96:fc:c2:83:
74:cf:ef:80:11:e0:00:63:a5:aa:06:f5:50:dc:d9:b5:18:1e:
03:3a:dd:f4:17:13:82:e6:cd:6f:f0:a9:24:c5:4b:a1:ba:cc:
b3:a1:f6:90:61:74:24:f3:7b:65:11:32:54:35:07:02:f6:d1:
42:c8:99:6f:e4:bb:78:0a:96:c4:c4:bf:22:b2:52:af:59:1a:
5a:de:b1:db:6b:79:da:0d:0b:9a:7d:b1:08:fc:af:8f:7e:4f:
c5:37:3b:5b:ce:d8:e0:61:f6:12:ee:57:04:99:70:65:6d:56:
3f:ba:e5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:37:24 2025 by rpki-client