Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7271E506CAD311EFB6263655762E951A.roa
File: 7271E506CAD311EFB6263655762E951A.roa (raw, json)
Hash identifier: 5okgHK84wxWB1w6b5MmIFlBZkkJg+iab9RRCR0taA7A=
Subject key identifier: E2:D5:5C:C5:4A:B1:BD:52:11:07:9E:3E:6C:B3:8F:18:A2:C3:D7:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013521
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7271E506CAD311EFB6263655762E951A.roa
Signing time: Sat 04 Jan 2025 19:38:18 +0000
ROA not before: Sun 05 Jan 2025 19:38:14 +0000
ROA not after: Sun 09 Feb 2025 19:38:14 +0000
asID: 30781
IP address blocks: 154.217.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79137 (0x13521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 19:38:14 2025 GMT
Not After : Feb 9 19:38:14 2025 GMT
Subject: CN=67798e2a-8884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:8c:c5:c7:47:f3:81:87:13:a6:5c:17:34:
c0:f5:93:0a:c6:a8:ac:f1:c0:c4:80:30:87:97:d6:
7b:c7:68:5a:0f:24:9b:1e:ed:5f:ef:eb:a2:70:1a:
46:66:c1:82:a6:28:74:59:81:0f:ea:e1:1a:41:1b:
c8:af:e3:ac:3b:cd:4d:f9:7e:e6:ba:61:57:26:88:
ea:55:18:f8:d9:29:a9:a9:92:0e:c2:fb:b6:5c:86:
2f:a1:8e:0f:6e:23:3e:b5:58:15:9f:75:f2:65:0b:
c4:4f:a6:39:95:a9:7b:98:2a:f5:b9:1f:51:7a:26:
9b:26:dc:52:18:49:12:eb:1f:4d:e2:28:17:d4:7b:
e6:f0:03:8b:47:2c:ce:b0:07:eb:e3:29:27:46:38:
b3:02:8c:04:86:b1:cc:ec:1f:f6:73:d3:76:37:4c:
06:9a:24:c8:22:f5:fd:6d:5d:24:d5:b3:72:6b:3c:
16:b9:3e:53:f1:14:0b:38:9c:3f:41:7a:1c:78:07:
c4:26:94:d0:cd:7f:fd:7a:95:e3:45:59:08:3c:07:
72:32:0a:81:12:db:59:dc:cb:85:94:9a:4a:a4:64:
18:d0:79:4c:bc:4d:76:2a:f8:53:9c:c5:a9:bb:f9:
f7:6b:b1:2c:de:e8:2a:78:2a:71:ba:5f:e2:e6:e7:
fe:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D5:5C:C5:4A:B1:BD:52:11:07:9E:3E:6C:B3:8F:18:A2:C3:D7:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7271E506CAD311EFB6263655762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.184.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:9c:19:1b:89:2d:76:86:38:e1:bf:a5:70:f8:51:24:7e:15:
6e:2c:3f:f4:67:c4:71:71:c6:46:50:ba:7f:00:b3:81:e9:1e:
e4:a3:72:eb:d5:3f:00:07:26:0f:32:0e:41:e9:0a:f3:20:c3:
a8:43:5e:66:f2:0b:c8:62:82:5f:ff:b1:9b:7e:ac:2e:48:dd:
bd:0c:ff:8f:b6:3f:e9:7a:03:4e:a0:8b:33:aa:db:cf:f6:b1:
08:0e:df:50:0b:9c:f5:95:30:55:9c:e7:9b:12:71:d4:71:2e:
dc:7c:6e:45:88:51:53:81:60:4f:44:b9:4c:84:bc:8f:47:e3:
ea:ac:9c:0e:10:b3:f0:9f:ef:4d:de:f4:cf:69:96:2f:df:44:
6b:8f:a6:5f:4a:aa:94:51:51:e8:20:04:8f:32:a1:b5:4a:6b:
c1:e0:c7:69:fd:33:04:3f:88:6e:cb:59:f3:4c:7f:ee:1f:f2:
42:43:8c:f2:e3:63:00:b3:d6:26:39:4a:bd:d6:da:24:42:99:
db:91:d0:70:20:1e:56:6a:ff:67:66:08:67:62:f2:ba:2f:9b:
7d:b4:d4:23:e4:35:a0:b2:f9:33:95:3b:66:4a:9a:15:13:03:
6f:b1:cf:5a:cb:22:45:d3:ab:9e:32:7f:48:31:87:3e:1c:75:
e9:28:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:22:11 2025 by rpki-client