Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8832C0D4DA5211EFA2ACE163762E951A.roa
File: 8832C0D4DA5211EFA2ACE163762E951A.roa (raw, json)
Hash identifier: +qFreeabrv8lVik5CtM3gidDc2rDAVQhPKUwLopgCD0=
Subject key identifier: 39:6C:56:1A:AD:A8:4B:B3:76:8A:52:CD:BA:F2:ED:52:7D:FD:BD:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014723
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8832C0D4DA5211EFA2ACE163762E951A.roa
Signing time: Fri 24 Jan 2025 12:55:48 +0000
ROA not before: Fri 24 Jan 2025 12:55:44 +0000
ROA not after: Wed 05 Mar 2025 12:55:44 +0000
asID: 44559
IP address blocks: 154.209.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83747 (0x14723)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:55:44 2025 GMT
Not After : Mar 5 12:55:44 2025 GMT
Subject: CN=67938dd4-937a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:32:04:d5:b8:b7:de:43:68:9a:60:92:ac:ae:
c7:b8:46:ef:a2:75:31:66:b7:7e:4d:d8:a5:bf:5e:
76:c3:00:81:54:04:dd:5f:f7:10:d7:9f:2a:49:b8:
57:f7:f2:7b:b9:5f:7d:4a:a0:31:99:b4:82:b9:e9:
d0:a1:83:09:3f:f6:bd:8f:33:4e:8d:55:37:8c:c0:
9e:20:ec:00:7a:c5:d0:79:ef:f8:c2:80:ee:bf:38:
bd:4e:60:c7:91:54:ec:55:5d:67:0a:24:0e:31:36:
75:16:dc:7b:6f:a3:74:e9:f5:9d:26:4f:73:92:31:
4e:b1:48:e8:98:f5:19:db:7a:b7:77:3e:0a:52:45:
13:e1:8d:49:45:4f:a4:22:f7:10:5c:57:35:54:1f:
92:04:49:cf:d0:c5:dd:2d:af:37:0c:10:26:6f:b6:
53:33:e7:fe:d5:ac:4f:6c:25:e8:01:13:a4:3c:c9:
15:8d:08:89:d8:4e:96:3c:8c:89:45:68:b6:25:7e:
e2:8a:03:08:a4:ed:59:fb:88:89:2a:93:d7:7e:e6:
76:83:07:02:e4:87:5c:0d:a5:c8:f2:93:f7:af:b3:
1c:43:27:bf:8c:88:15:79:a4:3e:5b:b9:f3:6d:14:
20:60:a6:56:9b:f7:6d:83:da:69:93:63:1d:d0:0a:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6C:56:1A:AD:A8:4B:B3:76:8A:52:CD:BA:F2:ED:52:7D:FD:BD:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8832C0D4DA5211EFA2ACE163762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.151.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:1d:d3:c6:ca:51:a3:dc:13:ce:97:b8:3a:1e:16:13:ea:6f:
cb:ed:21:15:cf:1e:e6:fd:62:0a:aa:8e:52:05:f8:42:39:93:
f6:b1:66:bf:8b:e7:8d:58:91:97:60:dd:37:07:3f:c9:34:8d:
02:c1:8c:ec:b5:6c:ba:81:06:f6:b2:6c:40:b6:51:b7:e0:43:
93:c8:07:21:ae:ac:45:15:f0:fd:28:ae:47:bb:d8:be:f3:19:
9f:ca:a2:80:7b:7f:00:70:c8:7c:45:2c:69:5c:22:4a:f5:1a:
23:86:06:e5:7a:36:76:3b:50:13:bf:15:3b:1c:e4:fd:9f:7b:
84:14:00:1f:df:e3:fe:d5:b4:1b:55:2f:2f:8b:5c:b6:5e:8d:
bf:51:6b:3e:d3:65:50:40:6b:e3:a2:82:cf:6c:e7:d5:29:10:
61:cb:b0:f6:00:46:9d:9f:82:17:b3:e7:ee:29:c6:cf:14:76:
e1:61:5f:64:f1:5a:c8:bc:22:9f:7d:fc:fe:2a:60:01:59:59:
5a:e9:a2:04:c3:e2:df:ec:78:04:89:48:ec:05:36:b2:7b:48:
03:c3:05:3b:f2:2f:da:23:8b:19:e6:f8:e7:53:3f:0c:47:b5:
71:a6:e9:eb:b6:4c:18:2b:52:6d:d8:c6:bb:3b:cd:9a:05:20:
f2:89:7c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:56:05 2025 by rpki-client