Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82F28614DFE211EFB1BADC6A762E951A.roa
File: 82F28614DFE211EFB1BADC6A762E951A.roa (raw, json)
Hash identifier: kOnhBPfAcm3s7jzdtvP/+pBbNkrkupFD70E9ZsmKUwU=
Subject key identifier: 12:CF:85:9A:2E:64:78:92:3B:30:07:17:F3:4D:C8:9C:F2:92:D9:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DC1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82F28614DFE211EFB1BADC6A762E951A.roa
Signing time: Fri 31 Jan 2025 14:49:02 +0000
ROA not before: Fri 31 Jan 2025 14:48:58 +0000
ROA not after: Fri 07 Feb 2025 14:48:58 +0000
asID: 63199
IP address blocks: 154.207.106.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85441 (0x14dc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 14:48:58 2025 GMT
Not After : Feb 7 14:48:58 2025 GMT
Subject: CN=679ce2de-b17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:91:f3:9c:c3:d3:f1:a6:5d:d1:19:0e:94:
ad:96:26:fa:50:76:b9:f4:e1:4e:db:6d:0f:63:a3:
1e:92:e0:e4:63:f7:c3:28:38:b4:50:5a:af:86:52:
ad:96:e7:eb:2c:c3:cd:17:7f:9d:b6:f0:57:35:83:
68:9f:8d:2e:65:36:ea:49:b0:29:b5:19:0d:15:06:
74:f3:c0:cc:fe:be:2c:49:d8:21:27:11:9a:1d:7d:
5d:a5:24:ca:e1:9f:6a:7d:e3:b2:47:26:fe:e0:5a:
bf:e3:76:a5:da:d0:64:05:af:52:bf:91:ee:82:71:
bc:6b:03:97:d0:49:1c:a6:31:6f:be:e3:ea:4c:3f:
44:42:ce:13:27:af:df:99:31:15:43:04:24:1c:92:
34:21:57:4f:97:f7:57:6b:93:b0:00:3c:0d:78:93:
da:c5:0c:9a:a6:58:9d:e0:af:c5:0c:87:78:ef:34:
f8:37:c2:f2:cf:f7:46:aa:0f:4c:27:08:a0:49:e6:
62:b8:40:24:ba:76:07:77:cc:f7:6f:85:9f:b1:6e:
f1:a9:d2:fb:2e:3d:0c:5f:de:89:b8:7b:e8:52:17:
db:4b:99:3e:4d:c4:9c:c8:c9:b1:e8:31:22:88:2e:
7a:a3:00:f0:31:a3:5b:2b:8a:0e:75:6e:68:cc:35:
ea:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CF:85:9A:2E:64:78:92:3B:30:07:17:F3:4D:C8:9C:F2:92:D9:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82F28614DFE211EFB1BADC6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.106.0/23
Signature Algorithm: sha256WithRSAEncryption
57:4a:2b:70:68:e2:93:91:54:d6:15:aa:53:1a:55:07:6a:78:
93:02:e5:e4:d7:79:da:09:98:96:39:3c:e9:83:4c:f1:55:2f:
66:95:b4:9f:11:bd:05:85:75:1a:ec:8a:d5:0c:76:7f:37:9d:
42:92:fd:3f:4a:6a:2c:10:3a:25:7d:8a:94:5f:77:64:32:8d:
03:1e:55:68:98:eb:9a:29:9a:c4:e2:e6:97:72:f5:e4:92:ca:
88:8c:2c:cd:3d:8b:2d:53:81:2a:1b:d5:a4:4f:0a:59:ed:cc:
78:94:22:a6:01:7a:03:8d:3f:df:75:1a:9e:7c:15:26:56:86:
83:16:1c:17:4e:d3:27:31:d8:f1:1c:16:67:72:93:43:8b:1f:
3d:d4:f1:47:ca:26:27:11:d9:71:97:c6:2b:06:72:a8:d0:de:
03:2f:e1:19:e8:f4:f0:db:57:41:99:37:a2:be:05:d7:26:ae:
54:d8:a5:22:d0:e0:3c:11:8e:8b:b5:98:f2:99:34:e6:eb:82:
8d:d7:0d:c1:4f:2b:0a:36:9c:f4:6e:40:a8:98:9c:dd:82:9e:
2e:b2:bc:13:7f:41:ed:a9:69:45:fb:13:51:5d:29:45:6b:7f:
b4:86:42:f1:a7:2f:12:27:95:5f:64:43:0f:3b:4e:e9:38:bf:
f8:74:e8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:37:49 2025 by rpki-client