Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7586C33ADA3A11EF81754542762E951A.roa
File: 7586C33ADA3A11EF81754542762E951A.roa (raw, json)
Hash identifier: +WT3cH4Sim9UEbaKJBMustrgPlcZf2r9C14zlY45OF4=
Subject key identifier: B9:CE:10:1E:18:BF:82:1A:5E:B9:B2:72:EA:F3:20:C3:EB:3D:8B:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014548
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7586C33ADA3A11EF81754542762E951A.roa
Signing time: Fri 24 Jan 2025 10:03:30 +0000
ROA not before: Fri 24 Jan 2025 10:03:24 +0000
ROA not after: Wed 05 Mar 2025 10:03:24 +0000
asID: 202656
IP address blocks: 154.219.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83272 (0x14548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:03:24 2025 GMT
Not After : Mar 5 10:03:24 2025 GMT
Subject: CN=67936572-307a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c5:30:2f:cf:3d:ee:7e:74:6a:ba:66:dc:16:
c3:ee:64:1f:55:2f:2c:a4:4d:5d:b7:aa:b0:62:5c:
05:46:4d:85:b3:59:f6:04:6b:ff:44:cd:94:8b:08:
de:db:00:b9:8f:db:37:5b:3f:c1:98:ea:1a:03:ed:
5d:3f:7b:02:db:bb:ac:e8:4e:71:f0:ec:c4:8f:a9:
07:e0:14:63:3f:e6:73:e8:a0:da:a6:e2:29:c4:1f:
bb:76:d5:aa:1f:9c:f6:57:53:69:38:9e:b8:cd:92:
65:08:ed:79:36:2f:06:e7:cb:a4:55:e8:51:5f:1a:
35:fb:b4:b0:df:6b:f4:c4:cf:64:ba:09:73:88:38:
5a:bc:f2:9a:d9:e0:82:bd:23:ff:f9:fb:2d:2f:8f:
2f:87:60:8f:8c:f4:9d:ae:cd:b1:76:0d:3e:c9:f3:
c7:73:76:42:91:4f:ef:d2:81:44:9e:75:f5:49:b6:
be:6d:37:15:79:09:44:66:8a:5f:1b:04:f3:58:6e:
ea:ad:70:2d:73:ec:92:ca:7d:df:ca:5e:d0:a4:44:
87:f4:6a:8a:df:b7:9a:05:43:93:24:8c:e7:06:63:
05:db:f5:78:04:e7:58:58:34:f7:d4:07:9a:4c:4b:
f7:e5:ff:70:6e:fc:be:05:78:81:7c:63:ac:45:00:
a3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CE:10:1E:18:BF:82:1A:5E:B9:B2:72:EA:F3:20:C3:EB:3D:8B:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7586C33ADA3A11EF81754542762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.237.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:a4:0f:f5:c2:b3:94:91:e1:c3:90:65:bb:26:2f:a5:7e:8c:
d5:75:40:b7:71:24:66:89:53:3e:c3:b1:d2:cb:37:9a:76:28:
34:d7:75:59:fc:80:c8:b7:8c:63:4b:91:bf:da:e7:1b:f8:fc:
f5:e9:5a:d7:62:02:54:6a:fc:c1:5d:b1:53:66:8d:7f:b7:1e:
08:21:1f:1f:00:09:21:58:15:f8:17:2b:3f:32:a5:22:03:a0:
67:45:a6:92:d5:bb:8f:d5:eb:ee:d9:de:9b:76:cc:ed:e3:ca:
18:b7:31:3f:8f:51:a0:86:38:2a:61:31:48:41:0f:9d:20:46:
3c:f5:31:d8:00:64:db:f1:44:ee:0a:90:02:37:ea:7a:2c:01:
4e:66:51:ae:27:fd:c5:2e:40:1c:3b:db:9d:be:55:87:4d:ff:
72:c1:10:3c:3d:d0:a4:0b:fe:4a:9a:95:c0:f1:d0:38:4a:e1:
d1:31:d8:4f:72:e3:49:eb:41:09:63:0c:dc:ce:84:b0:6e:10:
5e:48:be:b7:76:70:4c:53:07:57:b0:0a:84:d1:a8:6a:38:9a:
37:d0:2b:d7:dc:19:4e:4b:4f:5f:d0:a5:5c:4d:73:6e:77:06:
1c:7b:3f:66:4e:4d:14:70:2c:55:1f:c9:c7:89:fa:bb:0c:bf:
6e:37:f9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:18 2025 by rpki-client