Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8565DBE6D95A11EFBCC6185B762E951A.roa
File: 8565DBE6D95A11EFBCC6185B762E951A.roa (raw, json)
Hash identifier: T+QHemWcmnRw/7s+LJK6IjeDOWheSkQNe8JPipeNaEM=
Subject key identifier: B7:66:D0:45:11:D5:39:5B:B9:E8:4B:57:91:5A:B7:5B:B2:6B:6C:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014035
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8565DBE6D95A11EFBCC6185B762E951A.roa
Signing time: Thu 23 Jan 2025 07:20:28 +0000
ROA not before: Thu 23 Jan 2025 07:20:24 +0000
ROA not after: Sat 08 Feb 2025 07:20:24 +0000
asID: 18229
IP address blocks: 154.210.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81973 (0x14035)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 07:20:24 2025 GMT
Not After : Feb 8 07:20:24 2025 GMT
Subject: CN=6791edbc-1b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cc:8b:a5:c3:2b:de:28:59:d4:f3:62:b5:6f:
61:d1:17:5d:2a:5e:13:75:a6:54:9b:d5:de:b2:c5:
99:15:20:48:7e:2f:c7:c3:5f:3a:6a:8b:d1:18:89:
51:e2:00:be:41:aa:54:4e:b0:0d:06:ba:4f:a8:10:
3d:82:84:9d:f8:83:f0:a5:41:73:cc:fa:33:31:b5:
18:21:a7:78:51:bd:61:29:ed:56:15:13:5c:80:7c:
3e:0f:80:ff:cd:ee:0e:bf:bc:85:f1:f7:f3:a7:f1:
61:f4:c9:99:22:6a:b6:f6:9d:cf:7b:06:34:a9:8f:
01:6b:76:3c:34:c0:d7:b7:e1:6f:a2:88:89:08:2d:
c8:2f:32:bb:93:8a:93:26:74:ed:0a:3f:f1:ab:76:
cc:d2:c4:22:e5:b1:f6:f1:da:5b:bb:e7:ec:46:79:
3e:94:12:f0:89:0d:e1:fd:c0:ba:75:6e:83:02:3e:
2e:35:ff:e1:df:09:c1:c3:bb:ab:9b:5b:d7:c4:0f:
4f:e1:39:55:b1:db:66:a5:1a:8f:b1:3f:39:87:58:
53:45:58:fc:5d:b9:a6:e8:61:f7:f9:80:d6:dd:4a:
0d:26:c4:b3:66:2d:e4:1c:38:df:45:f6:2a:56:f6:
19:6b:63:c3:39:b2:68:48:e9:5f:89:a1:9a:ee:8a:
07:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:66:D0:45:11:D5:39:5B:B9:E8:4B:57:91:5A:B7:5B:B2:6B:6C:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8565DBE6D95A11EFBCC6185B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.156.0/24
Signature Algorithm: sha256WithRSAEncryption
07:47:52:d2:6c:42:00:05:3d:26:26:9b:cb:91:53:8f:03:d9:
dc:af:40:4c:07:29:94:8a:c4:5e:68:79:1c:d0:1e:9f:69:e7:
cd:64:01:de:13:0f:97:2f:80:80:a8:f7:e9:49:a2:6f:4a:94:
da:6b:ea:cb:fa:dd:c9:3c:68:f7:40:0b:a0:11:74:a7:e7:9d:
43:3f:a7:9f:20:6e:9d:fc:0f:c3:6d:eb:54:76:2d:3e:1a:ff:
a9:de:b8:8d:b3:a0:97:95:e8:36:4b:93:36:92:0b:b5:7a:98:
b1:4e:ee:7b:97:1c:ce:18:e4:3a:be:b9:b4:3f:19:e2:55:85:
08:bd:71:93:38:06:f6:90:24:54:db:24:1f:5b:3f:d0:60:48:
d7:78:db:50:e3:6f:e7:f7:03:fb:9c:21:63:1e:04:fb:ad:18:
8e:63:57:93:57:50:f2:a7:9e:0c:c7:17:78:a4:de:66:6f:6c:
72:cc:0d:a9:15:b8:b3:77:f7:c0:21:38:fe:7c:5d:4d:a7:df:
a4:6c:52:1f:e2:3d:6a:89:42:3c:f1:4e:f1:d5:eb:f3:c6:0e:
51:a9:fe:46:be:f4:0b:b7:92:58:b3:53:00:4f:a6:01:5a:37:
cc:37:57:70:78:2d:18:05:5e:a9:e3:48:9a:95:51:33:60:2e:
3d:46:04:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:39 2025 by rpki-client