Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/728198DCDD7711EF8190BCA4762E951A.roa
File: 728198DCDD7711EF8190BCA4762E951A.roa (raw, json)
Hash identifier: Z0EoiQOvZHFAONt9Hfv4/vGcscs/65FMgO0/Nd/50Eo=
Subject key identifier: E0:45:A9:A7:60:C3:6E:C0:D5:A4:C7:83:FD:94:95:17:A3:B6:99:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/728198DCDD7711EF8190BCA4762E951A.roa
Signing time: Tue 28 Jan 2025 12:57:36 +0000
ROA not before: Tue 28 Jan 2025 12:57:32 +0000
ROA not after: Tue 25 Feb 2025 12:57:32 +0000
asID: 5065
IP address blocks: 154.206.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85282 (0x14d22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 12:57:32 2025 GMT
Not After : Feb 25 12:57:32 2025 GMT
Subject: CN=6798d440-6fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d0:b3:56:95:2b:d3:1e:e6:ab:1d:55:9a:65:
00:15:b2:f7:3f:f4:e7:38:30:60:26:ed:d6:6e:62:
75:1a:ef:45:da:5c:06:82:7f:26:7a:f6:ec:a4:7b:
ca:01:29:88:38:f2:95:f6:a7:f0:7e:98:6f:95:82:
8e:f8:28:55:f8:15:32:68:c5:bc:28:9f:d3:9f:d2:
97:b4:d1:c0:e4:c7:5d:b0:54:77:87:f4:58:8b:bc:
d9:f0:9c:7a:0d:46:35:fe:b8:c6:da:47:c6:e2:c8:
3b:8d:05:db:66:89:22:5d:1d:e4:27:6d:9f:6c:13:
3e:c1:6b:b8:4d:0d:f4:3d:b4:9e:1c:09:51:20:6d:
13:7e:90:de:f9:e1:f7:ad:32:41:93:38:cb:a6:a1:
8d:07:60:f7:ac:79:73:f2:e8:ba:c3:0b:54:da:2e:
c1:23:87:21:ff:23:de:ac:c3:01:68:b2:f4:8f:94:
1e:98:22:21:78:f4:13:da:38:15:6e:4c:1b:fc:f5:
f4:fc:dd:e4:62:58:c6:08:1c:59:99:bf:05:ec:11:
71:85:53:3c:bb:ff:e8:e1:c4:84:8c:72:13:95:ae:
76:ba:7d:f8:af:b7:3e:64:c8:66:4d:45:f2:bf:87:
37:79:12:23:da:15:3c:22:d3:39:2d:3d:42:6d:19:
88:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:45:A9:A7:60:C3:6E:C0:D5:A4:C7:83:FD:94:95:17:A3:B6:99:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/728198DCDD7711EF8190BCA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.33.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ba:8d:c0:16:df:dd:1f:7c:4a:0a:0e:34:79:8f:5d:66:68:
1e:3d:4d:b0:0e:cc:ed:c8:1c:59:dc:95:5e:df:95:f2:8c:7d:
7d:0c:48:c8:31:71:09:d3:1a:c9:6e:a7:12:c8:df:37:db:b9:
25:20:30:54:1a:d9:77:a4:fd:cf:32:5f:7a:03:8f:76:81:ec:
c3:23:b7:d2:dc:7a:85:69:fa:bd:7f:cd:97:ab:b6:fb:3e:1a:
98:08:06:05:dd:9d:77:12:d3:15:d7:9c:39:32:4b:ab:fb:9f:
9e:f3:f2:c1:a4:e3:35:e5:bb:30:73:64:bb:1b:68:14:fd:a5:
a2:ee:f4:5f:d4:14:32:6e:05:ab:b9:cc:44:00:00:78:8b:4e:
1b:5a:e2:79:d9:e4:f8:e2:a9:74:e9:f5:c0:52:17:6a:97:92:
01:f6:cb:0e:38:6f:4d:09:05:a2:63:79:b2:2c:09:af:78:22:
dd:d5:65:0f:b7:32:57:19:26:18:26:2d:49:11:1b:17:77:63:
38:d4:ee:77:5e:36:f4:30:1f:13:bd:14:69:f5:64:11:17:05:
8d:a6:a3:dd:81:69:da:98:2d:fd:c9:b0:cc:c7:c1:ff:51:e0:
d1:c4:c2:88:5b:ba:80:80:34:35:7f:18:2f:10:61:84:b1:a1:
39:f3:1e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:06:12 2025 by rpki-client