Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F8444B0D8E211EFA3679EAE762E951A.roa
File: 7F8444B0D8E211EFA3679EAE762E951A.roa (raw, json)
Hash identifier: wtHbzlf4veqoTA7Y39APKQQZc9S6+Ma4Kg5D34j+N7M=
Subject key identifier: 31:8F:33:8A:0B:27:3A:C8:8B:8F:E9:15:B7:5C:D8:AB:CD:E6:94:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F8444B0D8E211EFA3679EAE762E951A.roa
Signing time: Wed 22 Jan 2025 17:01:18 +0000
ROA not before: Wed 22 Jan 2025 17:01:15 +0000
ROA not after: Sat 15 Mar 2025 17:01:15 +0000
asID: 138915
IP address blocks: 154.206.76.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81916 (0x13ffc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 17:01:15 2025 GMT
Not After : Mar 15 17:01:15 2025 GMT
Subject: CN=6791245e-e4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:ea:b1:a4:60:b8:aa:a6:fc:3c:82:2a:26:
cd:00:b9:fc:c7:99:1c:e5:f5:b9:d3:4b:70:29:27:
f5:7e:1d:d4:ec:9e:2b:ca:9d:c5:dc:ec:35:29:40:
e2:e7:37:b2:4f:0f:54:be:01:85:47:63:af:f5:14:
d2:48:58:dd:9e:c3:5f:bb:95:d4:da:72:f8:e5:b3:
3d:0b:23:fa:0e:f6:96:83:bd:3e:25:23:44:2f:ff:
dc:5e:54:63:a5:83:d9:03:e6:31:a2:0b:0d:ad:76:
eb:83:94:13:67:bb:d8:50:8f:37:25:c1:b7:09:73:
b5:89:6f:5e:eb:54:5e:2f:8c:f0:76:ec:35:b9:d3:
8e:6c:2b:3e:08:0e:fa:53:35:67:f7:b3:6f:43:35:
94:2c:5c:10:74:80:76:45:f7:14:9c:b5:7f:21:9e:
60:63:de:bd:eb:5e:05:a6:8a:ab:ce:94:aa:e5:aa:
4b:ac:6a:7b:ee:d5:92:9f:7e:f4:6e:ee:b8:b9:71:
f4:b5:f5:ce:69:6f:63:73:e7:ba:34:ab:9a:b9:3e:
1d:14:18:62:ac:78:85:a7:77:3b:35:f2:c9:31:71:
cd:6a:cb:7c:63:26:6b:95:ac:cb:2a:0b:c5:df:bc:
84:fd:f8:19:b5:40:13:d5:fa:31:5d:63:8a:a8:91:
22:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8F:33:8A:0B:27:3A:C8:8B:8F:E9:15:B7:5C:D8:AB:CD:E6:94:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F8444B0D8E211EFA3679EAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.76.0/23
Signature Algorithm: sha256WithRSAEncryption
44:f0:86:b5:0a:da:cb:5c:fb:ed:18:c9:43:26:fe:db:94:5f:
3a:76:19:5d:17:cc:3e:da:53:d7:2b:b0:7e:71:6f:27:d7:7f:
f4:10:6b:8c:6b:2c:5a:74:45:93:ba:88:28:f6:bf:fc:20:71:
14:05:32:3b:f8:74:62:3a:6c:6d:1e:2e:37:4c:2e:11:49:36:
38:23:57:46:c8:05:d9:65:69:45:e5:df:84:d1:45:03:75:a9:
50:c1:aa:7f:c3:bd:31:32:68:97:c9:f1:bb:2f:a6:19:23:61:
db:61:3a:90:84:92:8c:8a:31:78:23:b2:04:1e:81:36:a8:d4:
bb:91:85:04:d9:06:73:b6:c2:fd:84:0a:8f:15:d4:56:82:d2:
4a:6e:f8:69:fc:f4:17:15:53:9e:5d:30:06:0f:b0:5b:ac:4b:
9e:5f:f2:2e:cf:b2:26:0a:75:cc:f3:48:93:99:3e:b1:89:d1:
ba:3b:40:db:44:67:77:90:ff:04:de:9f:80:be:72:0b:fe:d4:
16:7d:7c:08:bd:c7:16:db:12:6c:5a:2c:c7:16:a8:78:44:4d:
a2:a0:78:85:bf:11:ea:85:b1:cc:21:4f:ba:7a:ac:e6:69:5d:
76:8c:ce:eb:bc:15:be:ea:8d:2a:e0:89:44:14:af:6d:56:b8:
87:d2:c4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:49:00 2025 by rpki-client