Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83965898D8AD11EFBD9A0C4F762E951A.roa
File: 83965898D8AD11EFBD9A0C4F762E951A.roa (raw, json)
Hash identifier: qSlBJhXsoTWoAXewnMGPA2IAswnyoevSQYR67p3TPRE=
Subject key identifier: 57:B4:92:DB:A2:C2:12:02:65:85:D1:80:EC:59:B1:63:88:65:B5:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013ED0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83965898D8AD11EFBD9A0C4F762E951A.roa
Signing time: Wed 22 Jan 2025 10:42:02 +0000
ROA not before: Wed 22 Jan 2025 10:41:58 +0000
ROA not after: Sat 08 Feb 2025 10:41:58 +0000
asID: 150008
IP address blocks: 154.210.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81616 (0x13ed0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 10:41:58 2025 GMT
Not After : Feb 8 10:41:58 2025 GMT
Subject: CN=6790cb7a-68b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:6f:a4:85:8b:98:4d:61:70:7e:e5:c4:f5:
07:2c:f0:99:7d:4f:7b:00:9d:e0:8e:8a:e4:02:97:
e7:b2:a6:81:41:bf:3d:d3:81:38:20:21:7c:39:12:
c0:65:27:05:db:f1:ab:b1:4b:4c:32:d9:79:d5:bc:
11:ef:1e:3d:74:43:72:31:e9:d8:17:b1:00:08:42:
1a:e4:c3:55:67:95:07:d1:64:01:1e:c1:7b:11:d7:
7f:0d:13:14:11:c6:49:cc:38:8d:bb:1b:2b:f0:ce:
c1:77:08:ba:8e:a1:62:22:82:b9:52:10:28:b4:29:
b1:ee:9a:c5:0e:18:d8:45:22:ca:28:f7:3a:f5:76:
7d:8b:e5:7a:67:81:cc:ba:0c:7a:4f:a9:8b:89:41:
bc:35:a0:82:ea:34:ef:3e:ac:3d:fc:6b:1b:4c:f7:
f5:b7:aa:13:b4:cb:5f:c9:02:16:5f:72:fe:65:27:
ad:01:ce:86:c5:6c:ae:40:4a:b7:49:d7:b5:f7:16:
68:45:f0:39:1e:29:f4:59:8b:14:14:8c:6b:19:65:
67:64:fb:65:f6:c4:11:0c:41:b5:48:66:64:c6:78:
5d:6d:27:68:d6:37:cc:e2:3e:2c:10:f2:57:76:81:
e6:dd:6f:d9:cf:b3:ec:e3:63:44:55:60:62:23:a1:
9d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B4:92:DB:A2:C2:12:02:65:85:D1:80:EC:59:B1:63:88:65:B5:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83965898D8AD11EFBD9A0C4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.225.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:6c:c3:25:e5:a6:92:1f:66:5d:b8:bf:c6:12:9b:1f:b2:96:
9b:ea:49:2b:67:70:a3:f2:c5:ee:a8:56:67:d7:da:d0:76:cd:
05:fd:3c:2b:41:57:2d:31:40:39:53:34:19:c1:30:11:75:c9:
3f:14:66:c2:03:15:09:d4:63:12:f0:d5:a0:96:98:a8:c4:e3:
7a:d6:4c:ec:06:60:3c:6c:33:fb:7b:f7:1c:5f:bd:c8:d2:42:
f4:91:55:d0:35:3f:26:00:b1:4d:24:4e:d2:44:88:25:5b:f7:
9e:97:d1:5d:d6:d4:92:e0:2b:19:4c:3a:3d:37:32:3a:a0:8d:
e8:5a:fb:e1:43:64:35:5f:09:6d:1a:90:1d:a3:e9:88:ed:3b:
fc:bc:ba:75:9d:21:72:53:90:4f:91:f5:f8:0c:42:ab:04:21:
10:e9:a8:72:bd:27:e6:91:65:23:a0:5a:d4:67:b9:54:51:85:
ea:07:13:73:cf:4a:83:96:51:db:8e:fe:51:99:59:6a:56:b3:
ee:c3:a2:c8:07:e3:0b:69:3b:72:cf:a6:8f:3e:d5:fa:89:1a:
1b:4f:b6:0d:ad:e9:20:4d:b5:7d:e4:90:6c:96:d6:5d:a2:39:
f9:e2:f3:2c:d1:73:d6:86:a8:f8:80:c2:45:55:59:f2:b1:50:
1f:4f:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:49:51 2025 by rpki-client