Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75D38D3AD3D411EF9E2DDF8F762E951A.roa
File: 75D38D3AD3D411EF9E2DDF8F762E951A.roa (raw, json)
Hash identifier: MVPWU7fynRv20DsP8C2OUC3XNmnVuBw+KMd254PXr2E=
Subject key identifier: 09:96:0E:FA:F7:8A:09:2D:C6:ED:20:5A:4F:D6:50:FF:3B:69:32:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75D38D3AD3D411EF9E2DDF8F762E951A.roa
Signing time: Thu 16 Jan 2025 06:38:14 +0000
ROA not before: Thu 16 Jan 2025 06:38:10 +0000
ROA not after: Wed 19 Feb 2025 06:38:10 +0000
asID: 7018
IP address blocks: 154.200.166.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80822 (0x13bb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 06:38:10 2025 GMT
Not After : Feb 19 06:38:10 2025 GMT
Subject: CN=6788a955-3fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:82:d9:0b:3d:03:8a:54:5f:83:7e:5f:51:
c0:98:95:d8:62:c0:e9:a0:dd:a2:10:46:98:c0:d2:
c5:97:de:0a:77:f7:55:d3:37:cf:2f:25:b5:9c:61:
3d:f5:f7:be:d1:e4:f8:c5:80:90:37:df:37:3b:db:
4c:96:c4:29:a3:b0:b3:cd:d8:15:9a:04:76:6a:b9:
47:22:e4:e3:c0:26:c4:e4:ca:94:2c:d7:c0:4c:11:
de:bd:81:14:00:84:04:49:8d:59:9e:74:43:14:c0:
f3:33:9e:37:01:0b:05:9c:43:58:bb:9a:56:9c:70:
94:ff:b5:dc:0f:e7:f3:f8:23:4a:13:d0:4a:6d:a9:
34:a0:ce:e9:3c:79:1e:eb:93:40:79:d0:0b:79:b3:
7f:12:dd:d6:b3:86:ca:13:4f:b8:3d:f6:cb:eb:09:
a4:07:9f:84:e8:76:bf:43:d7:63:3b:3e:1f:46:a3:
1a:cb:26:24:0e:0e:e4:39:2e:74:d3:53:c5:5c:01:
c6:9e:a0:0e:39:f0:97:bf:94:7e:7a:23:2e:5f:da:
83:79:89:ac:25:42:11:fa:f6:39:bd:dd:9b:ff:8b:
4b:ed:8b:94:75:c5:c4:d2:c7:36:91:7c:de:1e:31:
3a:46:e6:f0:92:d2:12:1d:b9:8a:51:66:15:f7:d9:
0d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:96:0E:FA:F7:8A:09:2D:C6:ED:20:5A:4F:D6:50:FF:3B:69:32:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75D38D3AD3D411EF9E2DDF8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.166.0/23
Signature Algorithm: sha256WithRSAEncryption
65:26:7a:e9:7e:4f:05:1d:05:dc:b6:aa:a6:d2:a9:9c:bd:b1:
91:fd:24:08:e0:d0:53:bd:4b:a1:5c:18:b3:8d:26:b3:a2:f6:
0a:7b:94:94:0f:98:70:3a:37:13:1c:81:8a:3f:b2:75:b2:78:
09:92:dd:e2:ba:48:e5:13:f7:a1:c1:dc:37:5a:e6:08:53:74:
24:52:f0:c7:a4:0c:82:54:38:6b:c5:90:85:cf:81:1f:15:77:
a6:4d:1c:4f:aa:40:9c:9a:af:06:ee:f4:46:57:39:1f:42:f0:
e6:79:a9:9f:18:09:03:2a:13:60:14:f5:d8:42:3e:c3:d1:93:
d4:fa:a7:35:98:35:e4:c2:f4:27:6f:5f:24:9a:c3:21:09:3f:
39:d6:aa:bb:88:bf:e7:7d:3a:11:2f:75:2e:b7:79:ff:df:a0:
18:51:4c:7f:28:31:fb:96:12:49:91:8f:91:3f:90:86:c5:69:
ab:05:f6:1b:d2:28:e9:a2:f9:99:dd:84:28:d5:bb:9d:17:f4:
e8:b7:94:93:fc:d8:cb:53:1b:30:13:63:05:17:27:8b:20:85:
c7:d9:9d:65:8c:4f:1f:de:46:79:5d:e8:6d:ad:85:4b:37:51:
13:cb:00:5a:42:09:de:3d:6f:55:cb:cd:72:ad:0f:9f:88:ea:
ef:0b:b4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:24:30 2025 by rpki-client